Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

lara28580's avatar

Can't generate SSL certificate at forge

Every time I want to generate a "Let's encrypt" certificate on forge I am getting

Please review your DNS configuration and ensure all domains specified for the certificate contain a DNS "A" record that points to your server's public IP address. Updated DNS records may take several hours to propagate across the Internet.

I changed my nameserver entries at my registrar as digital ocean states it. Can reach my website but I am not able to generate a ssl certificate.

0 likes
9 replies
sr57's avatar

Can reach my website

With your DNS server

Not sure the DNS servers used by let's encrypt are updated ... wait some hours ...

1 like
aleahy's avatar

By default forge adds the www subdomain. Have you added this to the configuration, or removed it from the domain list when creating your certificate?

1 like
lara28580's avatar

@aleahy Thanks for you answer but can't find such an option. I am under SSL -> Let's encrypt can't find something like that.

aleahy's avatar

@SmokeTM When you click on LetsEncrypt in forge, you get a textbox listing domains before you click "Obtain Certificate".

Any domains listed here need to point to your server

lara28580's avatar

What is interesting I only can access the www.site.com but not the site.com page? Someone knows whats wrong here? Maybe it has something to do with the SSL problem?

sr57's avatar

@SmokeTM

I don't use forge, but where do you defined your domain and alias(es)? (like SelrverAlias in apche virtualhost)

It can be linke with your certificate pb if domain is not defined as name or alias.

aleahy's avatar

@SmokeTM I use digital ocean to manage the domain and I set it up this way:

site.com is an A record to the IP address of the server.

www.site.com is a CNAME record which is an alias for site.com

Then there are just the NS record servers for site.com

sr57's avatar

@aleahy

Ok for the DNS, but I was speaking of the web server defintion.

aleahy's avatar
aleahy
Best Answer
Level 25

@sr57 Under forge, you're meant to define the root domain when you're creating the site. It can be updated under the Meta tab if required. www aliases are created automatically by forge.

If @smoketm is finding only www.site.com is working, maybe www.site.com was created as the root domain for the site in forge?

Please or to participate in this conversation.