My domain raminstitute.in has its DNS settings correctly pointed to Vercel (verified with A and CNAME records), but I am stuck on the HTTP-01 certificate validation error. Could a staff member please manually trigger a certificate flush or force-issuance for this domain?
Hi Pjmathur0291,
For an HTTP-01 validation failure, I’d check the DNS and certificate-blocking records before assuming it needs a manual certificate flush.
From a terminal, I’d run:
dig A raminstitute.in +short
dig AAAA raminstitute.in +short
dig CNAME www.raminstitute.in +short
dig CAA raminstitute.in +short
dig TXT _acme-challenge.raminstitute.in +short
curl -I http://raminstitute.in/.well-known/acme-challenge/test
A few things to look for:
- The apex A record should match the value Vercel shows for the domain
- The www CNAME should match the value Vercel shows, if you added www
- AAAA should not point a third-party custom domain to Vercel
- If CAA records exist, they need to allow letsencrypt.org
- A stale _acme-challenge TXT record from an old provider can block issuance
- /.well-known should not be redirected or rewritten by your app
Vercel’s domain troubleshooting guide covers those SSL checks here:
If all of those are clean and the dashboard still shows HTTP-01 failure, the useful details to share are the exact domain status from Vercel, the dig output above, and the timestamp when you retried certificate generation.