This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 26%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
I can add the custom domain ok but it fails with a generic error:
Pending managed certificate failed: Certificate creation failed unexpectedly for canonical name [redacted]. Contact support for assistance.
Azure Portal verifies the DNS CNAME and TXT records OK. I have tried multiple times and have also left it for hours in case of DNS propagation delays.
An Azure service that provides streamlined full-stack web app development.
Hi Sean,
If you post your domain in a comment and then immediately edit and remove from your comment (so it isn't public), I will run some queries and see if I notice any issues.
Do you have DigiCert CAA record for your apex domain? It should be: 0 issue "digicert.com" You may use dig in Azure Cloud Shell to verify it is correct with command similar to below:
dig yourdomain.com caa
Output similar to below:
;; ANSWER SECTION:
yourdomain.com. 3600 IN CAA 0 issue "digicert.com"
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 51%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAN%3C/text%3E%3C/svg%3E)
Hello @Sean Kwek
Thank you for reaching out Microsoft Q&A. Thank you for confirming and As we could see from our end the certificate is being reflected for your domain.