Problem
SSL certificate is not being issued for my subdomain winkel.ehgn.nl, even though DNS is correctly configured. HTTP works, but shows a page without CSS.
HTTPS fails with SSL handshake error.
Setup
- Domain: winkel.ehgn.nl (subdomain) and or shop.ehgn.nl
- Root domain (ehgn.nl): Hosted elsewhere (not on Vercel)
- Project: Astro SSR app, deploys successfully to ehgn-shop.vercel.app
DNS Configuration
- Record type: CNAME
- Name: winkel
- Value: cname.vercel-dns.com
- Nameservers: Third-party (redecohosting.net)
Verification Done
-
DNS resolves correctly:
dig winkel.ehgn.nl CNAME +short
→ cname.vercel-dns.com. -
CAA records allow Let’s Encrypt:
dig ehgn.nl CAA +short
→ 0 issue “letsencrypt.org” -
HTTP works (200 OK from Vercel):
curl -I http://winkel.ehgn.nl
→ HTTP/1.1 200 OK
→ Server: Vercel -
HTTPS fails:
curl -I https://winkel.ehgn.nl
→ SSL_ERROR_SYSCALL
What I’ve Tried
- Removed and re-added domain in Vercel dashboard
- Tried A record (76.76.21.21) instead of CNAME
- Tried the CNAME value that Vercel gave me (new one, b5XXXXXXcname.)
- Waited 24+ hours for certificate issuance
- Ran
vercel certs issue winkel.ehgn.nl→ “Error: Response Error” - Ran
vercel alias set→ “Error: Response Error”
Vercel Dashboard Status
- Domain shows “Invalid Configuration”
- SSL Certificates section shows “No certificates to show”
- DNS records section shows the domain pointing to correct IP
Environment
- Vercel CLI: 50.4.8
- Project type: Astro SSR with @astrojs/vercel adapter
Question
Why is the SSL certificate not being issued? The DNS is correct, CAA allows Let’s Encrypt, and HTTP traffic already reaches
Vercel. What’s blocking the certificate generation?
How can I fix it? For any subdomain white the root is hosted elsewhere.