Netlify SSL Certificate Pending or Not Provisioning

How to fix it

Try these in order — the most common fix is first.

1. 1. Check status

   1. Open Domain management > HTTPS
   Did this fix it? Yes No

2. 2. Fix DNS first

   1. Point apex and www at Netlify and wait for propagation
   Did this fix it? Yes No

3. 3. Fix CAA records

   1. Allow letsencrypt.org with the Netlify account URI, or remove restrictive CAA records
   Did this fix it? Yes No

4. 4. Disable proxy

   1. Turn off Cloudflare proxying until issued
   Did this fix it? Yes No

5. 5. Renew the certificate

   1. Domain management > HTTPS > Renew certificate
   Did this fix it? Yes No

6. 6. Subdomain limits

   1. Use Netlify DNS for wildcard certificates or contact support before adding many aliases
   Did this fix it? Yes No

Symptoms

HTTPS shows 'Certificate provisioning failed', stays pending, or the browser warns the certificate does not match.

Why it happens

• DNS not yet pointing to Netlify
• CAA record excludes Let's Encrypt
• Cloudflare proxy intercepts validation
• More than 5 subdomain aliases hit rate limits
• Custom certificate does not cover the domain
• Inactive Netlify DNS zone

This guide also covers

• netlify ssl certificate pending
• netlify certificate provisioning failed
• netlify https not working
• netlify let's encrypt

Other Netlify errors

• Netlify Page Not Found on Refresh (SPA 404)
• Netlify Build Failed
• Netlify Deploy Stuck on Building or Enqueued
• Netlify Custom Domain Not Working
• Netlify Function Timeout (502 / 504)
• Netlify Site Paused: Credit Limit Reached
• Netlify Build Failed: Secrets Scanning Detected Secrets
• Netlify Environment Variables Undefined