What Shopify SSL Pending Means
If you are trying to figure out how to fix Shopify SSL pending, the first step is understanding what the message actually indicates.
In Shopify, SSL pending usually means the platform has not yet finished issuing and verifying the certificate for your custom domain.
This process depends on domain configuration, DNS propagation, and Shopify’s certificate provisioning workflow, so a delay does not always mean something is broken.
Common Reasons Shopify SSL Stays Pending
Several technical issues can keep SSL from activating on a Shopify store.
The most common ones involve DNS records, domain registration settings, and conflicts with old hosting or security configurations.
DNS records are not pointed correctly
Shopify requires your domain to resolve to its infrastructure through specific DNS records.
If the A record or CNAME record is incorrect, Shopify cannot verify control of the domain.
- The A record should point to Shopify’s IP address.
- The www CNAME should point to Shopify’s domain target.
- Conflicting records can interfere with verification.
The domain is still propagating
DNS changes do not update instantly across the internet.
Depending on your registrar, TTL values, and resolver caches, propagation can take several hours and sometimes up to 48 hours.
Proxy or CDN settings are interfering
Services such as Cloudflare, reverse proxies, and certain security layers can prevent Shopify from validating the domain.
If traffic is being proxied instead of resolving directly, Shopify may continue showing SSL pending.
There are conflicting DNS records
Multiple A records, outdated CNAME entries, or leftover AAAA records can confuse verification.
Even if the site loads, Shopify may still fail to issue SSL if the DNS zone contains conflicting configuration.
The domain was not added correctly in Shopify
Sometimes the issue starts inside Shopify rather than at the registrar.
If the domain was not connected properly in the Shopify admin, the platform may not have the right information to complete certificate provisioning.
How to Fix Shopify SSL Pending Step by Step
To resolve the issue efficiently, work through the domain setup in a specific order.
This reduces the chance of missing a DNS or account-level problem and helps Shopify complete verification faster.
1. Confirm the domain is connected in Shopify
Open your Shopify admin and go to the domain settings.
Make sure the custom domain is added and marked as connected or pending connection.
If the domain is missing, add it first before changing DNS records.
2. Verify your A record
At your domain registrar or DNS host, check that the root domain points to Shopify’s IP address.
Shopify commonly uses 23.227.38.65 for the apex domain.
Remove any extra A records for the root domain that point elsewhere.
3. Check the www CNAME record
Ensure the www subdomain points to shops.myshopify.com.
If the CNAME points to an old host, website builder, or parked domain service, SSL validation may fail.
4. Remove conflicting DNS entries
Delete outdated records that may interfere with Shopify’s verification process.
This may include duplicate A records, incorrect AAAA records, or old CNAMEs from a previous website provider.
5. Disable proxying temporarily
If you use Cloudflare or another CDN, switch the relevant DNS records to DNS-only mode while Shopify issues the certificate.
After SSL is active, you can review whether proxying is appropriate for your setup.
6. Wait for DNS propagation
After making corrections, allow time for changes to spread across DNS resolvers.
During this period, avoid repeatedly changing records, because that can reset the verification window.
7. Refresh Shopify’s domain verification
Return to Shopify and check the domain status again.
In some cases, toggling the domain connection or rechecking the settings prompts Shopify to retry SSL provisioning.
How Long Shopify SSL Pending Usually Lasts?
In many cases, Shopify SSL pending clears within a few hours after DNS is corrected.
However, if the domain is newly registered, recently transferred, or behind a proxy network, it can take longer.
A realistic timeframe is often 24 to 48 hours, especially if DNS records were changed recently.
If the status remains pending beyond that window, there is usually still a configuration issue to investigate.
What to Check in Your DNS Provider
Your registrar or DNS provider plays a major role in whether Shopify can issue SSL successfully.
A clean, minimal DNS configuration is usually best.
- Root domain A record: point to Shopify’s IP address.
- www CNAME: point to Shopify’s host target.
- Remove unnecessary redirect records that may conflict.
- Confirm your nameservers are active and correct.
- Avoid mixing old hosting records with Shopify records.
If your provider offers DNS health tools, use them to confirm there are no warnings about invalid or conflicting records.
Tools such as Google Admin Toolbox, WhatsMyDNS, or your registrar’s diagnostics can help verify propagation.
How Cloudflare Can Affect Shopify SSL Pending
Cloudflare is a frequent source of SSL delays because it introduces an additional layer between visitors and Shopify.
If the orange-cloud proxy is enabled on the records Shopify needs to verify, the certificate request may not complete normally.
To test this, switch the A record and CNAME record to DNS-only mode.
Then wait for propagation and recheck the Shopify admin.
If SSL activates after that change, Cloudflare proxying was the likely cause.
After issuance, you may still choose to use Cloudflare, but make sure its SSL settings, page rules, and caching behavior do not interfere with Shopify’s certificate management or checkout experience.
When the Domain Was Recently Changed
If you recently moved from another platform such as WordPress, Wix, Squarespace, or an older hosting provider, SSL pending can appear while old DNS records are still active.
This is common during migrations when the domain has residual settings from the previous service.
Review the full DNS zone and remove records tied to the old platform.
Also confirm the domain is not still using outdated nameservers from the previous host.
A clean cutover usually resolves the issue faster than trying to preserve legacy settings.
Signs the Problem Is Not DNS
Most Shopify SSL pending cases are DNS-related, but not all.
If your records are correct and propagation has completed, the issue may involve verification timing, domain lock state, or account-level delays.
- The domain shows correct records everywhere you check.
- The same setup works for other domains.
- SSL remains pending well past 48 hours.
- The domain was transferred very recently.
In that situation, contact Shopify Support or your domain registrar with screenshots of your DNS settings and the exact domain status shown in the admin.
Best Practices to Prevent SSL Delays in the Future
Preventing SSL issues is easier when your domain setup is kept simple and consistent.
Shopify works best with straightforward DNS configuration and minimal third-party interference.
- Use one A record for the root domain.
- Use one CNAME record for www.
- Keep old hosting records removed after migration.
- Minimize proxy layers during certificate issuance.
- Check domain settings before launching a new store.
It also helps to document your DNS changes so you can quickly identify what changed if SSL pending reappears after a migration, transfer, or redesign.