Staging Domains Not Receiving Let's Encrypt Certificates
LxRoot automatically attempts to issue an SSL certificate for staging domains to ensure your development environment is secure. If a certificate fails to issue, the most common cause is a DNS validation failure at the root level of your staging domain.
The Propagation Requirement
Let's Encrypt requires that the primary staging domain itself resolves correctly before it will issue certificates for any associated subdomains (e.g., yoursite.stagingdomain.com).
Verification Steps:
- Navigate to Settings > Platform > Platform Domains.
- Identify the domain set as your Staging Domain.
- Ensure that this domain has an A Record pointing to your control panel server's IP address.
- Confirm that the domain is fully propagated and accessible globally.
Why this matters:
When LxRoot requests a certificate for a staging site, Let's Encrypt performs a DNS check. If the parent staging domain does not resolve to a valid IP, the certificate authority cannot verify ownership of the namespace, and the request will be denied.
Once DNS resolution is confirmed, the platform will typically retry the issuance automatically. Alternatively, you can toggle the "SSL" setting on the website dashboard to trigger an immediate re-request.