Troubleshooting · Domains
The custom domain does not get verified (DNS TXT record)
Symptom
The domain stays «Waiting for the DNS record» and, when you choose «Verify», you see «The TXT record was not found yet. DNS changes can take a while; verify again later.» Or the domain turns «Failed — verify again».
Cause
| Situation | Likely cause |
|---|---|
| TXT not found | The record was created with the wrong name, the DNS provider appended the domain to the name (duplicated name), the value has extra spaces or quotes, or the change has not propagated yet |
| «Failed — verify again» | Ownership was verified, but the certificate could not be issued: the name does not point at the service (missing or wrong CNAME) or a CAA record prevents it |
| 503 answer on verify | The service could not query DNS at that moment |
| Certificate expiry warning | Renewal failed; often because the TXT record or the CNAME were deleted |
Fix
- Under «Custom domains», use «Copy name» and «Copy value» to copy the record exactly.
- At the DNS provider, create a TXT record with that name and value. If the panel appends the domain by itself, enter only the first part of the name.
- Check from outside:
nslookup -type=TXT <copied name>must show the value. - Create the CNAME your service provider gives you and, if you have CAA, allow the stated certificate authority.
- Choose «Verify» again. After ownership is verified, the domain goes through «Issuing the certificate» to «Active».
Keep the TXT record: it is checked at every certificate renewal.
When to escalate
If the TXT has been visible from outside for over an hour and verification still fails, the distributor contacts the platform with the domain and the time.
Error codes in this article
Was this page helpful?
Thank you. Your answer stays in this browser; nothing is sent.
Sorry about that. Try:
- searching for the exact text of the message or the error code
- the error code index
- asking your organization's administrator