New certificate order fails on Pending, The CA is processing your order, please just wait and gets timeout

Help
1

I am trying the order the new certificate with an existing SAN, and it's getting for one of the domain it retires 120 times on "Processing, The CA is processing your order" and then gets timeout

the acme.sh script uses ZeroSSL CA by default and occasionally times-out and does not generate the .cer file. i tried using "--server letsencrypt" option to use LE CA.

[Thu Apr 4 14:40:58 EDT 2024] response='{"identifier":{"type":"dns","value":"xxxxxxxxxx"},"status":"pending","expires":"2024-05-04T18:35:03Z","challenges":[{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/p-98","status":"processing","token":"xxxxxxxxxxxxxxxxx"}],"wildcard":true}'

2

Hi @zkhot, and welcome!

The error message still shows that your client is trying to contact ZeroSSL, which means we don't have any insight into why it might be failing.

To get more help, you'll need to provide more information, including the domain name for which validation is remaining pending.

3 Likes
3

AND/OR
Post your issue on any ZEROSSL support channel(s).

2 Likes
4

When you opened this thread in the Help section, you should have been provided with a questionnaire. Maybe you didn't get it somehow (which is weird), or you've decided to delete it. In any case, all the answers to this questionnaire are required:

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

3 Likes