Are you experiencing Cloudflare Universal SSL Pending Validation (TXT) issue? Then you’ve landed on the right article.
Cloudflare offers great security and speed features for a website. It also offers a lifetime free universal SSL for your domain.
What is Cloudflare Universal SSL?
For all customers, Cloudflare automatically provision a SSL certificate on CloudFlare’s network that will accept HTTPS connections for a customer’s domain and subdomains. Those certificates include an entry for the root domain (e.g., example.com) as well as a wildcard entry for all first-level subdomains (e.g., www.example.com, blog.example.com, etc.).
This certificate will be managed by Cloudflare and will be auto renewed by the Cloudflare system. Cloudflare Universal SSL is lifetime free.
Why Cloudflare Universal SSL Pending Validation (TXT)?
After adding your domain to Cloudflare, you need to update the nameservers of your domain. After your site is activated on Cloudflare, the system will not verify your domain and issue a SSL.
Sometimes due to the DNS cache, the DNS TXT record verification takes longer than usual. If you visit the SSL/TLS section you will see Pending Validation (TXT) warning in the SSL section.
NOTE: For domains added to Cloudflare prior to December 9, 2016, the hosting partner must delete and re-add the domain to Cloudflare to provision the SSL certificate.
If you’re experiencing Cloudflare Universal SSL Pending Validation (TXT) issue then are some ways to fix it.
How to Fix Cloudflare Universal SSL Pending Validation (TXT)?
- You must manually add SSL verification records on the DNS tab if you are using a CNAME setup. To learn more, contact Cloudflare Customer Support.
- Please try clearing the cache in your browser or using Incognito/Private Browsing Mode if your certificate has been issued but you’re still experiencing problems with your website.
- Turn off Universal SSL in the SSL/TLS app, wait a short while, and then turn it back on to re-start the provisioning of your SSL certificate.
- After switching to Cloudflare’s nameservers, provisioning will begin. It will take about 24 hours after you point the name servers for the Cloudflare system to issue the Universal SSL certificate.
- Cloudflare’s Universal SSL certificate covers Only example.com and *.example.com. www.subdomain.example.com won’t be covered. Consider using Advanced Certificate Manager to cover more than one level of subdomains, remove Cloudflare branding from the Universal certificate, or change the shortest certificate lifespan if you require a deeper subdomain with HTTPS, such as www.subdomain.example.com.
- Cloudflare system may take up to 24 hours to issue the SSL. If you have waited 24 hours and there has been no change, you should contact Cloudflare support.
Frequently Asked Questions
How do I renew my Cloudflare SSL certificate?
If you’re using Cloudflare Universal SSL then it will be automatically renewed by Cloudflare. It’s valid until you remove your domain from Cloudflare.
Is Cloudflare SSL really free?
Yes, Cloudflare Universal SSL is free for all customers.
My Cloudflare Universal SSL is issued but the browser still showing http in URL bar and connection not secure warning.
it may cause due to cache errors. Try in incognito tab.
How long it can take to complete Cloudflare Universal SSL Pending Validation (TXT)?
It may take up to 24 hours to complete TXT validation for Cloudflare SSL.
Bottomline
Cloudflare does provide free SSL certificates for both their edge servers and a free origin certificate you can install on your web server which is needed to make the connection fully secure.
Cloudflare SSL is a good choice who use VPS servers. They can easily get SSL for the domains in just a few clicks. Also, it is managed by Cloudflare so you never need to renew the SSL manually. Just give it a try!
Like this article? Do share it with your friends on social media.
RELATED: