As part of the Cloudflare SSL certificate renewal process, we need you to re-approve the domain

Dear Cloudflare team,

I received the following message month ago regarding a renewal process for my domain.

I've done as instructed and opened a support ticket (Number: 01034479) 11 days ago to validate that the renewal process went well but no one responded to my cases yet. Note: I'm a paid Pro member on this domain.

Can you please advise how I can validate via the CloudFlare SSL Dashboard that SSL certificate and domain is in good standing or help me get this case escalated?

Thank you

eliranOP•8/25/24, 12:01 PM

Note: when I go to my domain via the browser the certificate still shows that it will expire on Aug 27th, 2024.

eliranOP•8/25/24, 12:09 PM

Pinging @Erisa on this as she's always been so helpful in the past

Eeliran Dear Cloudflare team, I received the following message month ago regarding a re...

Hello, I’m Allie!•8/25/24, 12:14 PM

What’s the domain?

Eeliran Pinging @Erisa on this as she's always been so helpful in the past 🙂

Erisa•8/25/24, 12:16 PM

Hi, I don't work for Cloudflare anymore so I am significantly more limited in how much I can help you on this compared to previous topics

eliranOP•8/25/24, 12:19 PM

The domain is tribecast.fmtribecast.fm @HardlyWorkin' .

@Erisa it's good to hear as always and thank you for being gracious with your time

eliranOP•8/25/24, 12:20 PM

I have also been approving the certificate renewal request again (did that 3+ times already)

Erisa•8/25/24, 12:20 PM

The certificate expiring in a few days is very worrying, but it's possible that another certificate will take over when it does

Does the domain have a Cloudflare Pages project on it by any chance? And when you go to SSL/TLS > Edge Certificates, what do you see (a screenshot would help)

eliranOP•8/25/24, 12:21 PM

Sharing now

eliranOP•8/25/24, 12:22 PM

Yes, the domain does have a Pages project and we no longer use it or route to it.

eliranOP•8/25/24, 12:23 PM

This is what I'm seeing in SSL/TLS > Edge Certificates:

eliranOP•8/25/24, 12:23 PM

The certificate expiring in a few days is very worrying, but it's possible that another certificate will take over when it does

I thought so too, but it seems to me that waiting for the last day isn't a good practice. Been trying to be proactive, by writing to CF support 11 days ago.

eliranOP•8/25/24, 12:24 PM

Client Certificates show this btw, in case it's relevant.

eliranOP•8/25/24, 12:24 PM

Erisa•8/25/24, 12:24 PM

we no longer use it or route to it.

Okay that would definitely cause this then, because the certificate comes from the project but fails to renew since you're not pointing to the project.

If the Pages project still exists, go to to the project settings and then Custom Domains, and delete the custom domain entry. That should resolve the issue

eliranOP•8/25/24, 12:25 PM

@Erisa let me try that out and show you what I see.

CC @HardlyWorkin' would graciously appreciate your input too

eliranOP•8/25/24, 12:26 PM

eliranOP•8/25/24, 12:26 PM

Here is what I see in Pages > Custom Domains

Erisa•8/25/24, 12:26 PM

Yeah remove the second entry, the one that says inactive

eliranOP•8/25/24, 12:26 PM

On it.

eliranOP•8/25/24, 12:26 PM

All set.

Erisa•8/25/24, 12:26 PM

There you go

eliranOP•8/25/24, 12:26 PM

Woah! Checking on my end too

Erisa•8/25/24, 12:27 PM

The expiring cert was immediately deleted and replaced with the one from the zone, no downtime since it hasnt expired yet

eliranOP•8/25/24, 12:27 PM

Bingo!

eliranOP•8/25/24, 12:27 PM

@Erisa thank you so much

As always, for your gracious support.

Erisa•8/25/24, 12:28 PM

This happens due to the "unique" way that Pages custom domains are implemented internally, with them having their own certificates that take priority over the zone certificates even when you don't point to the project. Since you aren't pointing to the project it fails to renew and does all this

eliranOP•8/25/24, 12:29 PM

I see! Thank you so much. I wish that the support team at Cloudflare could have been more responsive via my case.

( @HardlyWorkin' You were about to write something... very keen to hear your feedback too)

eliranOP•8/25/24, 12:30 PM

@Erisa I wonder -

Should I have not fixed that with your help. Would it impact other subdomains i.e. members.tribecast.fmmembers.tribecast.fm or only tribecast.fm?

Erisa•8/25/24, 12:30 PM

I too wish the support team could be more responsive in general, unfortunately I don't work for them anymore so nothing I can do about that

Eeliran @Erisa I wonder - Should I have not fixed that with your help. Would it impact...

Erisa•8/25/24, 12:30 PM

Only ones that are added as Pages custom domains that then aren't in active use, the certificate is specifically for tribecast.fmtribecast.fm so if anything bad did happen then it would only affect that and not subdomains

eliranOP•8/25/24, 12:32 PM

I wish you a lovely Sunday, @Erisa and @HardlyWorkin' . Thank you!

As part of the Cloudflare SSL certificate renewal process, we need you to re-approve the domain

Similar Threads

Similar Threads

Similar Threads