Are you having trouble installing the free SSL certificates available through our client panel? In this article, we’ll cover the most common reasons you’re getting an error when attempting to install a certificate.
The error that you’ll see after a failed attempt will look as follows:
DNS verification issues
You should keep in mind that if your domain does not resolve through WPX’s DNS, installing the free certificate from the client’s panel would be impossible.
If you have purchased a domain from WPX but it’s connected to a different hosting provider, our system will also be unable to verify the domain and provide a certificate for it.
Name Servers
That’s the best way to point your domain to WPX. If you are not using our Name Servers you may run into difficulties installing a certificate. The Name Servers in question are:
ns1.wpx.net
ns2.wpx.net
ns3.wpx.net
We’ll also cover the alternative way of pointing your domain to WPX below if Name Servers are not something you’d like to go for.
A records
It is also possible to have your domain pointed to WPX using A records and successfully installing a certificate but there are a few things you should keep in mind.
- If you want to use WPX Cloud (XDN), you should add 4 records in total to your active DNS zone. Click here to learn how to do that.
- In case you do not want to use our XDN, you’ll need 2 A records in total. They should look as shown below:
- Host: Same as domain or ‘@’.
Value/Target: 67.202.92.28 (most likely a different IP address depending on the server your sites are hosted at). - Host: www
Value/Target: 67.202.92.28 (most likely a different IP address depending on the server your sites are hosted at).
More on how to point your domain to WPX can be found here!
Keep in mind that the ‘www’ A record could also be a CNAME record. It won’t interfere with the SSL installation.
The ‘www’ record is an absolute must because the verification requires both the ‘same as domain’ or ‘@’ record along with the ‘www’ record.
AAAА Records (IPv6)
Having a such record is not required by our service and it also may resolve in an SSL certificate installation failing. The solution to the issue would be removing it. If you contact our friendly support they’ll surely handle it all for you!
Redirection issues
Even if your domain’s DNS points to WPX if your site redirects elsewhere, our system won’t be able to make a successful verification and you’ll run into the same SSL installation error.
Please make sure that your domain doesn’t redirect to a different domain name using a .htaccess rule.
If you have an active redirection plugin that redirects your site to a different URL, you’ll still run into SSL installation issues as the plugin also adds a .htaccess rule to perform this action.
DNSSEC
That’s an additional layer of protection that your domain registrar (the place you’ve purchased your domain from) adds to your domain name. Unfortunately, that doesn’t seem to be working well with the SSL provider that we work with (Let’s Encrypt).
Disabling that option will take care of the issue without harming your domain when it comes to its security.
If you get stuck with anything discussed on this page, please get in touch with the WPX Support Team via live chat (use the bottom right-hand widget) and they will respond and help within 30 seconds or less.