Skip to content

Commit ee19900

Browse files
Fix formmating and examples and make text more generic
1 parent 5e5bfb9 commit ee19900

File tree

1 file changed

+2
-11
lines changed
  • src/content/docs/dns/zone-setups/subdomain-setup/setup

1 file changed

+2
-11
lines changed

src/content/docs/dns/zone-setups/subdomain-setup/setup/index.mdx

Lines changed: 2 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -68,18 +68,9 @@ Although the how-to guides in this documentation are focused on both parent doma
6868

6969
## SSL/TLS certificates
7070

71-
### Troubleshooting Certificate Validation
71+
If a certificate is already active on the child zone for a specific hostname (`subdomain.example.com`), any certificate pack containing that exact hostname in the parent zone (`example.com`) will fail validation.
7272

73-
This section addresses common issues where Edge Certificate provisioning appears to be stuck or failing. In the context of Subdomain Setup, these failures are often **expected behaviors** due to conflicts in domain hierarchy and delegation.
74-
75-
* **Conflict 1: Active Child Zone Certificate Blocks Parent Zone Validation**
76-
If a certificate is already **active on the child zone** for a specific hostname (e.g., `subdomainA.example.com`), any certificate pack containing that exact hostname in the **parent zone** (e.g., for `example.com`) will **fail validation**.
77-
* **Why it happens:** This is the **expected behavior** to ensure the child zone's certificate takes precedence. The active certificate in the child zone prevents the parent zone from completing Domain Control Validation (DCV) for that specific hostname.
78-
79-
* **Conflict 2: Parent Zone Wildcard DNS Record Blocks Child Zone Validation**
80-
If a **wildcard DNS record** exists in the **parent zone** (e.g., `*.test.example.com`) that covers a hostname in the **child zone** (e.g., `subdomainA.test.example.com`), the Domain Control Validation (DCV) process for a certificate in the child zone will **fail**.
81-
* **Why it happens:** The wildcard record in the parent zone intercepts the DCV query, causing it to resolve against the parent zone's configuration instead of the child zone's, thus blocking validation.
82-
* **Resolution:** To successfully provision the certificate in the child zone, you must **pause or remove the conflicting wildcard DNS record** in the parent zone temporarily.
73+
Also, if a wildcard DNS record exists in the parent zone (`*.example.com`) that covers a hostname in the child zone (`subdomain.example.com`), the [domain control validation (DCV) process](/ssl/edge-certificates/changing-dcv-method/) for a certificate in the child zone will fail. To successfully provision the certificate in the child zone, you must pause or remove the conflicting wildcard DNS record on the parent zone.
8374

8475
## Access applications
8576

0 commit comments

Comments
 (0)