How-to's · Shopify · 3 min read
SSL Pending on Shopify: What It Means and How to Fix It
Short answer
'SSL pending' means Shopify is still trying to issue a free SSL certificate for your custom domain. It usually resolves on its own once DNS is pointed correctly, often within hours and sometimes up to about 48 hours. If it stays pending longer, check your A record, www CNAME, duplicate records and any CAA records.
You connected your domain to Shopify, and instead of a reassuring "SSL active," the Domains page says SSL pending. This is common and usually temporary. Here is what is happening and what to check if it does not clear up.
What SSL pending means
Shopify provides free SSL certificates for every domain connected to a store. SSL is what makes your site load over https:// with a padlock in the browser. To issue the certificate, Shopify must confirm that your domain points to Shopify's servers. Until that check succeeds, the status shows as pending.
In other words, SSL pending is almost always a DNS issue or a DNS waiting period, not a problem with Shopify itself.
How long it normally takes
When DNS is set correctly, the certificate is often issued within a few hours. DNS changes can take up to 48 hours to propagate across the internet, so waiting a day or two after editing records is not unusual. If it has been longer than that, something needs fixing.
Step-by-step fixes
1. Check your A record
Your root domain (example.com) needs an A record pointing to Shopify's IP address. Shopify shows the exact value in the admin when you connect a domain; for years it has been 23.227.38.65. Make sure the host is set to @ (or left blank, depending on your registrar).
2. Check your www CNAME
The www subdomain should have a CNAME record pointing to shops.myshopify.com.
3. Remove conflicting records
This is the most common cause. Old A records from a previous host, AAAA (IPv6) records, extra CNAMEs or forwarding rules can prevent verification. There should be only one A record for @ and one CNAME for www. Delete AAAA records pointing elsewhere.
4. Check CAA records
Some domains have CAA records that restrict which certificate authorities can issue SSL for them. If a CAA record exists and does not permit the authority Shopify uses, certificates cannot be issued. Either remove the CAA records or add the ones Shopify's help center lists.
5. Check proxies and CDNs
If your DNS goes through a service like Cloudflare with proxying turned on, verification can fail. Set the records to DNS-only (not proxied) for the Shopify domain.
6. Verify the connection in Shopify
In Settings > Domains, open the domain and use the option to verify the connection. Shopify will tell you whether the records look correct.
7. Wait, then contact support
If records are correct and 48 hours have passed, contact Shopify Support with your domain name and screenshots of your DNS settings.
Quick troubleshooting table
| Symptom | Likely cause | Fix |
|---|---|---|
| Pending for a few hours | Normal propagation | Wait |
| Pending after 48 hours | Wrong or conflicting records | Clean up A, AAAA, CNAME |
| Root works, www fails | Missing www CNAME | Add CNAME to shops.myshopify.com |
| Never verifies | CAA records or proxy | Adjust CAA, disable proxy |
Avoid the problem next time
- If you buy your domain through Shopify, DNS is configured automatically and SSL issues are rare. See how much is a Shopify domain.
- Before connecting a third-party domain, delete old records from previous hosts.
- Make changes during a quiet period, not right before a launch.
Once SSL is active, set your custom domain as the primary domain so all traffic redirects to it. If you also need to find or share your store's default address, read how to find my Shopify store URL. For a broader branding refresh, see what a favicon is on Shopify.
Frequently asked questions
How long does SSL pending last on Shopify?
Often a few hours. DNS changes can take up to 48 hours to spread, so waiting a day or two after changing records is normal.
Can customers buy while SSL is pending?
Your myshopify.com address stays secure, and Shopify's checkout is secure. The custom domain may show warnings until the certificate is issued, so avoid promoting it until SSL is active.
What DNS records does Shopify need?
Typically an A record for the root domain pointing to Shopify's IP address and a CNAME for www pointing to shops.myshopify.com. Use the exact values shown in your Shopify admin.
Platform features, prices and policies change. Check the official help pages linked above before you act on a detail that matters to your store.