As part of the Cloudflare SSL certificate renewal process, we need you to re-approve the domain
Dear Cloudflare team,
I received the following message month ago regarding a renewal process for my domain.
I've done as instructed and opened a support ticket (Number: 01034479) 11 days ago to validate that the renewal process went well but no one responded to my cases yet. Note: I'm a paid Pro member on this domain.
Can you please advise how I can validate via the CloudFlare SSL Dashboard that SSL certificate and domain is in good standing or help me get this case escalated?
Thank you
28 Replies
Note: when I go to my domain via the browser the certificate still shows that it will expire on Aug 27th, 2024.
Pinging @Erisa on this as she's always been so helpful in the past 🙂
What’s the domain?
Hi, I don't work for Cloudflare anymore so I am significantly more limited in how much I can help you on this compared to previous topics
The domain is
tribecast.fm @HardlyWorkin' .
@Erisa it's good to hear as always and thank you for being gracious with your time 🙂I have also been approving the certificate renewal request again (did that 3+ times already)
The certificate expiring in a few days is very worrying, but it's possible that another certificate will take over when it does
Does the domain have a Cloudflare Pages project on it by any chance? And when you go to SSL/TLS > Edge Certificates, what do you see (a screenshot would help)
Sharing now 🙂
Yes, the domain does have a Pages project and we no longer use it or route to it.
This is what I'm seeing in SSL/TLS > Edge Certificates:
The certificate expiring in a few days is very worrying, but it's possible that another certificate will take over when it doesI thought so too, but it seems to me that waiting for the last day isn't a good practice. Been trying to be proactive, by writing to CF support 11 days ago. Client Certificates show this btw, in case it's relevant.
we no longer use it or route to it.Okay that would definitely cause this then, because the certificate comes from the project but fails to renew since you're not pointing to the project. If the Pages project still exists, go to to the project settings and then Custom Domains, and delete the custom domain entry. That should resolve the issue
@Erisa let me try that out and show you what I see.
CC @HardlyWorkin' would graciously appreciate your input too 🙂
Here is what I see in Pages > Custom Domains
Yeah remove the second entry, the one that says inactive
On it.
All set.
There you go
Woah! Checking on my end too
The expiring cert was immediately deleted and replaced with the one from the zone, no downtime since it hasnt expired yet
Bingo!
@Erisa thank you so much 🙂 As always, for your gracious support.
This happens due to the "unique" way that Pages custom domains are implemented internally, with them having their own certificates that take priority over the zone certificates even when you don't point to the project. Since you aren't pointing to the project it fails to renew and does all this
I see! Thank you so much. I wish that the support team at Cloudflare could have been more responsive via my case. 😦
( @HardlyWorkin' You were about to write something... very keen to hear your feedback too)
@Erisa I wonder -
Should I have not fixed that with your help. Would it impact other subdomains i.e.
members.tribecast.fm or only tribecast.fm?I too wish the support team could be more responsive in general, unfortunately I don't work for them anymore so nothing I can do about that
Only ones that are added as Pages custom domains that then aren't in active use, the certificate is specifically for
tribecast.fm so if anything bad did happen then it would only affect that and not subdomainsI wish you a lovely Sunday, @Erisa and @HardlyWorkin' . Thank you!