TypeScript custom domains SDK Install Domain SDK for TypeScript

Custom domain implementation guides Build a custom-domain settings page Add and remove customer domains Display DNS records correctly Store domain state in your database Poll until a domain is active Troubleshoot pending DNS Troubleshoot certificate issuance Handle apex domains and subdomains Give tenants managed subdomains Tenant authorization and domain security Production credential setup Switch providers safely Test without external API calls

Custom domain provider comparison Vercel custom domains Cloudflare for SaaS custom domains Railway custom domains Render custom domains Netlify custom domains Testing provider

Guides

Home
Documentation
Guides
Troubleshoot certificate issuance

Troubleshoot certificate issuance

Separate certificate validation from routing and hostname ownership.

Confirm routing and ownership first, then render records with purpose: "certificate". Check CAA/DNSSEC and proxy configuration when the provider reports validation errors. Cloudflare may return HTTP validation instead of DNS; the SDK preserves that as a message.

Use domain.certificate.status and issues rather than probing HTTPS yourself as the source of truth.

Read next: Managed certificates.

Troubleshoot pending DNS

Diagnose routing and ownership records that remain pending or invalid.

Handle apex domains and subdomains

Respect adapter capabilities without guessing public-suffix boundaries.