I’m getting this issue despite all DNS being set up correctly. Any idea on the issue?
RRset status
Insecure (3)
8af2c797ce4cb1af.vercel-dns-017.com/A
8af2c797ce4cb1af.vercel-dns-017.com/A
Citizen | Reduce Phone Calls To Your GP Practice and Increase Website Engagement ---- I can reproduce that from my own test server. Note that I am not expert with these systems but it does seem odd that ns3 and ns4 behave different than ns1 and ns2.
dig +noall +answer A 8af2c797ce4cb1af.vercel-dns-017.com @ns3.vercel-dns-017.com
8af2c797ce4cb1af.vercel-dns-017.com. 300 IN A 216.198.79.65
8af2c797ce4cb1af.vercel-dns-017.com. 300 IN A 64.29.17.65
dig +noall +answer A 8af2c797ce4cb1af.vercel-dns-017.com @ns3.vercel-dns-017.com
8af2c797ce4cb1af.vercel-dns-017.com. 300 IN A 216.198.79.1
8af2c797ce4cb1af.vercel-dns-017.com. 300 IN A 64.29.17.1 ---- can you help with these errors I’m getting?
The output you’ve provided suggests there’s an inconsistency in the DNS responses from different Vercel nameservers. This could be causing issues with your SSL certificate validation.
To troubleshoot this further, let’s break down the information:
-
**Inconsistent DNS Responses**:
- The DNS responses from `ns3.vercel-dns-017.com` and `ns4.vercel-dns-017.com` are different from those of `ns1.vercel-dns-017.com` and `ns2.vercel-dns-017.com`. This inconsistency can cause problems with DNS resolution and, by extension, SSL certificate issuance.
-
**Potential Causes**:
- **DNS Propagation**: Although DNS changes typically propagate within 48 hours, it’s possible that the updates haven’t fully propagated yet, leading to inconsistent responses.
- **DNS Server Configuration**: There might be a configuration issue with the Vercel nameservers, specifically with `ns3` and `ns4`, that’s causing them to return different IP addresses.
-
**Steps to Resolve**:
- **Verify DNS Configuration**: Ensure that your domain’s DNS settings are correctly configured in the Vercel dashboard. Pay particular attention to the nameserver settings.
- **Check for DNS Propagation**: Use tools like [What’s My DNS](https://www.whatsmydns.net/) to check the propagation status of your DNS changes across different nameservers and locations.
- **Contact Vercel Support**: Given the inconsistency in DNS responses from Vercel’s nameservers, it’s advisable to reach out to Vercel’s support team. They can investigate the issue further and provide guidance on resolving the DNS inconsistency.
