A clear path forward

My domain isn't verifying or SSL isn't provisioning—how do I troubleshoot?

Before troubleshooting domain verification or SSL provisioning failures, wait for DNS changes to propagate. The answer says DNS changes can take up to 48 hours, and you should confirm the records are visible globally with a DNS lookup tool. Remove AAAA records if they exist on the same hostname as the A record, because the answer says IPv6 AAAA records there can block SSL. Remove old or conflicting A records and keep only one A record at the root domain pointing to Replit. If using Cloudflare, set the domain to DNS only because the orange-cloud proxy mode interferes with SSL provisioning. Disconnect and reconnect the domain in Publishing → Domains → Manage to force a fresh certificate, then wait a few minutes and reload. If CAA records exist, at least one must allow Let's Encrypt as an issuer, because Replit issues certificates through Let's Encrypt.

VerifiedRH-0046v1

These checks apply only to externally registered domains; if you bought your domain through Replit, contact Replit Support. DNS changes can take up to 48 hours to propagate.

See Custom domains.

Was this page helpful?

Still stuck? Try troubleshooting with Agent.

Copy this prompt and paste it into Agent. For a project issue, open the project where it happens first. Add what happened and anything you've already tried. Don't include passwords, API keys, database connection strings or payment-card details.

Copying does not open Agent or send a support request. Agent availability and usage depend on your account.

Can't open your project, or need another kind of help? Get help.

Share or save this answer

Send a link

Point someone to this answer.

Save the answer

Paste the answer into your notes.

Last updated