The corporate domain has an invalid or insecure SSL certificate. What should I do?
Right after pointing the domain, it is normal for the corporate control panel to show an SSL certificate error for a few hours. If the error continues, the likely cause is incorrect or incomplete CAA records for the domain.
Wait for propagation
- After you set up the domain pointing, the domain can take up to 72 hours to work properly. Usually it takes just a few hours.
- In the first few hours, when you open the corporate control panel, an invalid SSL certificate error may appear. Certificate propagation can take up to 2 hours.
If the error continues, adjust the CAA record
You have two options. Do one of them in your domain's DNS zone editor.
Option 1: add the information to the CAA zone
- Open the domain's DNS zone editor.
- In the CAA zone, add the information from the table below.
| Record type | Value |
|---|---|
| CAA | issue "digicert.com" |
Option 2: remove the CAA record from the subdomain
- Open the domain's DNS zone editor.
- Remove the CAA record from the subdomain that points to the Adeus Pendrive services.
Important: remove only the CAA record of this subdomain. You do not need to completely remove the CAA record of the main domain (root domain).
