[▲ Vercel Community](/) · [Categories](/categories) · [Latest](/latest) · [Top](/top) · [Live](/live) [Help](/c/help/9) # Custom domain stuck in invalid SSL state: [tucancion.app](https://tucancion.app) / [www.tucancion.app](https://www.tucancion.app) 23 views · 0 likes · 4 posts Vcgraphicdesign (@vcgraphicdesign) · 2025-12-13 <!-- Questions that get answered the fastest are the ones with relevant info included in the original post. Be sure to include all detail needed to let others see and understand the problem! --> <!-- Current versus Expected behavior --> <!-- Code, configuration, and steps that reproduce this issue --> <!-- Project information (URL, framework, environment, project settings) -->Hello Vercel Support Team, I am experiencing a persistent issue with my custom domain configuration. I hope you can help me resolve this once and for all. Project Details: Project name: Tu Canción Vercel subdomain (working): [tu-cancion.vercel.app](https://tu-cancion.vercel.app) Custom domains (problematic): [tucancion.app](https://tucancion.app) and [www.tucancion.app](https://www.tucancion.app) Current Status: The subdomain [tu-cancion.vercel.app](https://tu-cancion.vercel.app) works perfectly. When visiting [tucancion.app](https://tucancion.app) or [www.tucancion.app](https://www.tucancion.app), the browser shows: This site can’t provide a secure connection ERR_SSL_PROTOCOL_ERROR DNS Configuration: A record for root domain: 76.76.21.21 CNAME record for www: [cname.vercel-dns.com](https://cname.vercel-dns.com) Attempts to Fix: Cleared browser cache and cookies. Tried different browsers and incognito mode. Waited several hours for DNS propagation. Verified DNS records multiple times. Attempted to remove and re-add the domains in Vercel dashboard, but the UI shows: Failed to fetch. Observations from Vercel: The Vercel dashboard indicates DNS Change Recommended for both [tucancion.app](https://tucancion.app) and [www.tucancion.app](https://www.tucancion.app). SSL certificate is issued (Let's Encrypt) and appears valid from the infrastructure side. Dashboard is unable to manage the domain despite it being healthy from infrastructure perspective. Request: I need Vercel support to force-remove and reattach both domains from the backend, regenerating the SSL certificates to resolve this issue permanently. Please advise or perform the backend operations needed to ensure that: Both [tucancion.app](https://tucancion.app) and [www.tucancion.app](https://www.tucancion.app) work correctly with SSL. No further manual intervention is required from my side. The configuration will remain stable for production usage globally. Thank you for your prompt assistance. system (@system) · 2025-12-13 The domain troubleshooting guide can help with most custom domain configuration issues. You might be able to use that guide to solve it before a human is available to help you. Then you can come back here and share the answer for [bonus points](https://community.vercel.com/t/introducing-the-vercel-leaderboard/1358). [https://vercel.com/docs/projects/domains/troubleshooting](https://vercel.com/docs/projects/domains/troubleshooting) You can also use [v0](https://v0.dev/) to narrow down the possibilities. Jacob Paris (@jacobparis) · 2025-12-14 The SSL certificates seem to be valid now and DNS has fully propagated, are you still seeing issues here? Sometimes it just takes some time to propagate globally [https://dnschecker.org/#A/www.tucancion.app](https://dnschecker.org/#A/www.tucancion.app) Jacob Paris (@jacobparis) · 2026-01-23 @vcgraphicdesign, I wanted to check in regarding the SSL issue with your custom domain. Are you still experiencing problems, or has everything resolved on your end? Let me know if that helps!