The corporate domain shows an invalid or insecure SSL certificate. What should I do?
Right after you point the domain, it's normal for the corporate control panel to show an SSL certificate error for a few hours. If the error persists, the likely cause is incorrect or incomplete CAA records on the domain.
Wait for propagation
- After you set up the domain pointing, it can take up to 72 hours for the domain to work properly. Most of the time, it takes just a few hours.
- During the first few hours, an invalid SSL certificate error may appear when you access the corporate control panel. Certificate propagation can take up to 2 hours.
If the error persists, adjust the CAA record
You have two options. Do one of them in your domain's DNS zone editor.
Option 1: Add the information to the CAA zone
- Open the domain's DNS zone editor.
- In the CAA zone, add the information from the table below.
| Record type | Value |
|---|---|
| CAA | issue "digicert.com" |
Option 2: Remove the CAA record from the subdomain
- Open the domain's DNS zone editor.
- Remove the CAA record from the subdomain that points to the Adeus Pendrive services.
Important: remove only the CAA record for this subdomain. You don't need to completely remove the CAA record from the main domain (root domain).