IBM Cloud Docs
What do I do if my universal certificate won't progress from pending state?

What do I do if my universal certificate won't progress from pending state?

You might encounter issues where a Universal Certificate remains in a Pending Validation state, leading to SSL errors.

You encounter SSL errors, such as:

  • Chrome: ERR_SSL_VERSION_OR_CIPHER_MISMATCH
  • Firefox: SSL_ERROR_NO_CYPHER_OVERLAP

To resolve this issue, follow these steps:

  1. Check the Universal Certificate status:

    1. Log in to IBM Cloud and view your CIS instance.

    2. Navigate to Security > TLS > Edge certificates.

    3. Locate the certificate with Type Universal and check its status.

      • If the status is Active, the certificate is working correctly.

      • If the status is Pending Validation, wait for the certificate to be issued.

        Activation can take some time.

  2. Validate Certificate Authority Authorization (CAA) records.

    If the certificate remains in Pending Validation status, ensure that the CAA records allow CIS to issue the certificate.

If the issue persists after CAA validation, contact IBM Support for further troubleshooting.