Skip to main content
// DOMAIN TROUBLESHOOTING

FIX DOMAIN ISSUES.

Troubleshoot DNS configuration, SSL certificate provisioning, and domain verification problems.

01

DNS CONFIGURATION ISSUES

Domain Not Resolving

DNS records haven't propagated or are configured incorrectly.

bash
# Check DNS records
dig example.com +short
dig www.example.com +short

# Verify CNAME points to Boottify
dig CNAME www.example.com

# Check A record for apex domain
dig A example.com

Fix: Wait up to 48 hours for propagation, or verify DNS records at your registrar.

Wrong DNS Values

DNS records point to wrong values or old hosting.

dns
# Correct values for apex domains (A)
Type: A
Name: @
Value: 95.216.3.90

# Correct values for subdomains (A)
Type: A
Name: www
Value: 95.216.3.90
02

SSL CERTIFICATE ISSUES

SSL Certificate Pending

Certificate is still being provisioned by Let's Encrypt.

Fix: Ensure DNS is properly configured and wait up to 24 hours. Certificate provisioning requires valid DNS.

Certificate Mismatch

Browser shows certificate error or domain mismatch.

bash
# Check certificate details
openssl s_client -connect example.com:443 -servername example.com 2>/dev/null | openssl x509 -noout -subject -issuer

# Verify certificate matches domain
echo | openssl s_client -connect example.com:443 2>/dev/null | openssl x509 -noout -text | grep -A1 "Subject Alternative Name"
03

VERIFICATION ISSUES

Domain Verification Failed

Boottify cannot verify domain ownership.

bash
# Verify DNS is pointing correctly
dig A example.com +short
# Expected: 95.216.3.90

# Check if TXT record is set (for verification)
dig TXT _boottify.example.com

# Check nameservers
dig NS example.com +short

Fix: Add the TXT verification record shown in the dashboard, then retry verification.

04

COMMON MISTAKES

Using CNAME for apex domain

Most DNS providers don't allow CNAME at apex. Use A record instead.

Conflicting DNS records

Remove old A/AAAA records when adding CNAME. They cannot coexist.

Cloudflare proxy enabled

Disable Cloudflare proxy (orange cloud) during initial setup, or use "Full (Strict)" SSL mode.

CAA records blocking Let's Encrypt

If you have CAA records, add "letsencrypt.org" to the allowed list.