Cannot create Managed Certificate for Custom Domain

Question

Cannot create Managed Certificate for Custom Domain

Ben 0

I have a custom domain (I've tried both via GoDaddy and Squarespace) and trying to host an api subdomain .NET 10 C# api project in this domain. The frontend project is a React project that's hosed in Azure via static web apps (which is working as expected)...I've add custom domains in Azure multiple times before including adding Managed Certificates without issue...but now, I'm not able to add a Managed Certificate for either a GoDaddy or a Squarespace domain:'

ssl_1

ssl_2

ssl_3

ssl_4

Golla Venkata Pavani 3,495 Reputation points Microsoft External Staff Moderator

2026-04-03T10:39:38.87+00:00
Hi @Ben

Thanks for sharing the screenshots and details, I see your custom domain (rinns-pantry-api.btaylorsolutions.com) has been successfully validated in Azure (CNAME + TXT records are in place and show as secured), but the App Service Managed Certificate isn't provisioning.

This is a very common issue and is almost always caused by a CAA (Certification Authority Authorization) record on your domain. Azure's free managed certificates are issued by DigiCert, and if your DNS doesn't explicitly allow DigiCert to issue certificates for the subdomain, the request will fail even when validation passes.

Recommended steps:
In your DNS provider (Google Workspace, Squarespace, or GoDaddy), add the following CAA record for the subdomain:

Type: CAA

Name/Host: riXXX-pantXX-api

Value: 0 issue "digicert.com"

TTL: 1 hour (or the lowest available)

After adding it, wait 5–15 minutes for DNS propagation, then go back to the Custom domains blade in your App Service and try creating the App Service Managed Certificate again (SNI SSL).

Reference:
https://dori-uw-1.kuma-moon.com/en-us/azure/app-service/configure-ssl-certificate?tabs=apex%2Crbac%2Cazure-cliKindly let us know if the above helps or you need further assistance on this issue.

Please "upvote" if the information helped you. This will help us and others in the community as well.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Ben 0 Reputation points

2026-04-04T05:41:43.4+00:00

Thanks for your response @Golla Venkata Pavani . I tried you suggestions but I'm still unable to add a Managed Certificate for my custom domain (I'm still receiving the same error). I tried 2 separate custom domains but neither one worked: api.rinnspantry.com (this domain is hosted by SquareSpace) and rinns-pantry-api.btaylorsolutions.com (this domain is hosted by GoDaddy).

rinns-pantry-api.btaylorsolutions.com (GoDaddy):

api.rinnspantry.com (SquareSpace):

1 answer

Your answer

Golla Venkata Pavani 3,495 Reputation points Microsoft External Staff Moderator

2026-04-03T10:39:38.87+00:00

Hi @Ben

Thanks for sharing the screenshots and details, I see your custom domain (rinns-pantry-api.btaylorsolutions.com) has been successfully validated in Azure (CNAME + TXT records are in place and show as secured), but the App Service Managed Certificate isn't provisioning.

This is a very common issue and is almost always caused by a CAA (Certification Authority Authorization) record on your domain. Azure's free managed certificates are issued by DigiCert, and if your DNS doesn't explicitly allow DigiCert to issue certificates for the subdomain, the request will fail even when validation passes.

Recommended steps:
In your DNS provider (Google Workspace, Squarespace, or GoDaddy), add the following CAA record for the subdomain:

Type: CAA

Name/Host: riXXX-pantXX-api

Value: 0 issue "digicert.com"

TTL: 1 hour (or the lowest available)

After adding it, wait 5–15 minutes for DNS propagation, then go back to the Custom domains blade in your App Service and try creating the App Service Managed Certificate again (SNI SSL).

Reference:
https://dori-uw-1.kuma-moon.com/en-us/azure/app-service/configure-ssl-certificate?tabs=apex%2Crbac%2Cazure-cliKindly let us know if the above helps or you need further assistance on this issue.

Please "upvote" if the information helped you. This will help us and others in the community as well.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Ben 0 Reputation points

2026-04-04T05:41:43.4+00:00

Thanks for your response @Golla Venkata Pavani . I tried you suggestions but I'm still unable to add a Managed Certificate for my custom domain (I'm still receiving the same error). I tried 2 separate custom domains but neither one worked: api.rinnspantry.com (this domain is hosted by SquareSpace) and rinns-pantry-api.btaylorsolutions.com (this domain is hosted by GoDaddy).

rinns-pantry-api.btaylorsolutions.com (GoDaddy):

api.rinnspantry.com (SquareSpace):

Answer 1

Golla Venkata Pavani 3,495 Microsoft External Staff Moderator

Hi @Ben

Thanks for the confirmation. Now you are able to add managed certificate for my custom domain (api.rinnspantry.com) and it succeeded.

I’ve coordinated with the backend team and verified that the blocker has been resolved. This should now be functioning properly.

Kindly let us know if the above helps or you need further assistance on this issue.

Please "accept" if the information helped you. This will help us and others in the community as well.

0 comments

Share via

Cannot create Managed Certificate for Custom Domain

1 answer

Your answer