ca_unreachable

What it means

Issuing a certificate means talking to the certificate authority over the network. Those requests timed out or failed on every attempt in this round. Nothing is wrong with the domain: DNS is verified and the domain is routed.

Why it happens

• The certificate authority had an outage or was degraded. Its own status page usually shows it.
• A network problem between our edge and the certificate authority.

What to do

1. Nothing: we retry automatically with backoff (1 min, 5 min, 30 min, 2 h, then every 12 h).
2. If it lasts more than a few hours, check our status page.
3. POST /v1/domains/{id}/verify retries right away once the outage is over.