SSL certificate validation fails — CNAME not detected

Website URL

https://blog.paolasolarinsights.com

Error Message

InfinityFree SSL panel shows: “(no CNAME found) — Not Ready”.

The required _acme-challenge CNAME record is configured in Cloudflare with DNS only, and its destination matches the value provided by InfinityFree. However, the record is not detected.

Other Information

My domain is managed by Cloudflare, and I have verified that the CNAME record matches the destination shown in the InfinityFree SSL panel. The record is set to DNS only (grey cloud). I have also checked the DNS configuration, but InfinityFree still reports “no CNAME found”. Please help me troubleshoot the DNS validation issue. I do not want to change the other DNS records because they are used by my main website and email.

Welcome to the InfinityFree community forum! Good to have you here.

  • Most people answering here are volunteers. They’re often the fastest source of help. Admin (the only staff member) checks in about once a day for issues on our end.
  • Volunteers can’t see your account or website. Share what you actually see, like error messages and what happens when you try something. That’s more useful than your theory of what’s wrong.
  • AI tools often get InfinityFree wrong. If a volunteer’s advice differs from what an AI told you, please try the volunteer’s suggestion first.
  • Solving an issue is a joint effort. Try the suggestions you get and report back what happened.

Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look.

What’s the exact name of the record in Cloudflare, as it shows in your DNS list? Since the certificate is for blog.paolasolarinsights.com, the name should end in .blog, so _acme-challenge.blog. A bare _acme-challenge sits on the main domain, so the check for the blog subdomain wouldn’t find it.

The article on creating the CNAME records covers this for subdomains. Its example puts the subdomain in the record name, for instance _acme-challenge.www.blog on example.com.

How to create the CNAME records for free SSL

The article also says it can take a few hours for the panel to detect a new record. So if you added it recently and the name already includes .blog, how long ago did you add it?

Likely due to this

This may be better for you