My domain raminstitute.in has its DNS settings correctly pointed to Vercel (verified with A and CNAME records), but I am stuck on the HTTP-01 certificate validation error. Could a staff member please manually trigger a certificate flush or force-issuance for this domain?
Hi Pjmathur0291,
For an HTTP-01 validation failure, I’d check the DNS and certificate-blocking records before assuming it needs a manual certificate flush.
From a terminal, I’d run:
dig A raminstitute.in +shortdig AAAA raminstitute.in +shortdig CNAME www.raminstitute.in +shortdig CAA raminstitute.in +shortdig TXT _acme-challenge.raminstitute.in +shortcurl -I http://raminstitute.in/.well-known/acme-challenge/test
A few things to look for:
- The apex A record should match the value Vercel shows for the domain- The www CNAME should match the value Vercel shows, if you added www- AAAA should not point a third-party custom domain to Vercel- If CAA records exist, they need to allow letsencrypt.org- A stale _acme-challenge TXT record from an old provider can block issuance- /.well-known should not be redirected or rewritten by your app
Vercel’s domain troubleshooting guide covers those SSL checks here:
https://vercel.com/docs/domains/troubleshooting
If all of those are clean and the dashboard still shows HTTP-01 failure, the useful details to share are the exact domain status from Vercel, the dig output above, and the timestamp when you retried certificate generation.
