Why Vercel custom domains show no-sni.vercel-infra.com SSL certificate mismatch

Help
, ,
1

Hi all,

Problem

When I added my domain (https://www.jobbox.cc) inside Vercel Domain config, Vercel seems to add 64.29.17.1 as an IP as well (dnschecker.org).

On the 64.29.17.1 IP, I’m seeing a no-sni.vercel-infra.com error when I run a test on SSL Labs.

What I’ve Tried

  • I tried removing and re-adding jobbox.cc and www.jobbox.cc.
  • Both domains show “OK” when I hit them via browser or curl.

Current Behavior

Some users can’t visit the site because of the certificate issue.

Error: no-sni.vercel-infra.com

Anyone encountered this or know what is going on?

Thanks

2

The domain troubleshooting guide can help with most custom domain configuration issues. You might be able to use that guide to solve it before a human is available to help you. Then you can come back here and share the answer for bonus points.

You can also use v0 to narrow down the possibilities.

7

Additional details:

  • Domain: www.jobbox.cc

  • Vercel project: jadash

  • Both domains show “Valid Configuration” in dashboard

  • DNS resolves to two IPs via CNAME b75307a8ca13a8ee.vercel-dns-017.com: 216.198.79.1 and 64.29.17.1

  • curl tests with SNI pass correctly on all IPs

  • SSL Labs shows Certificate #2 (No SNI) serving no-sni.vercel-infra.com with MISMATCH — serial number 06ea88a51285ec7fd039f147fe24ea020104

  • This persisted even after removing and re-adding both domains to force SSL re-provisioning

  • Real users are getting “Safari can’t establish a secure connection” and “Website can’t be reached” errors

  • Certificate #1 (with SNI) shows subject as jobbox.cc only — www.jobbox.cc not in Alternative Names