A connected storefront domain remains in SSL pending after records are changed. The steps below isolate this particular failure and preserve the current account, purchases, saved media and device configuration where applicable.
Recognize the exact symptom
A connected storefront domain remains in SSL pending after records are changed. Before making a change, write down whether the symptom affects every contact, file, device or account—or only one. Note the application and operating-system versions, approximate time of failure, connection type and any on-screen wording.
Most useful A/B test: Compare authoritative DNS records to the domain entries requested by Shopify. Keep all other conditions as similar as possible so the outcome points to one probable layer rather than several unrelated causes.
Likely causes and how to separate them
An order record, an authorization, a captured charge and a bank statement are distinct states. A failed checkout page does not establish that no payment happened. Reconcile account-side transaction identifiers and seller order records before making any new payment.
| Evidence | What it suggests | Next decision |
|---|---|---|
| Problem occurs only on the original setup | A device, connection, file or account-specific setting remains plausible. | Compare authoritative DNS records to the domain entries requested by Shopify. |
| Both test setups fail in the same way | A shared service, entitlement or source problem is more likely. | Review CAA and DNS proxy settings only where relevant, recording prior entries. |
| Control test works but the real item fails | The affected content, profile or workflow needs focused inspection. | Keep a copy of the original before changing it. |
Safe first correction
Start here: Correct conflicting A or CNAME records and allow normal certificate provisioning time. Change one relevant setting at a time. If the action cannot be undone safely, stop and preserve the original configuration or contact the account owner or administrator.
After the controlled change, repeat the exact action that failed—not merely a related feature. If it still fails, revert the test setting where appropriate. Avoid clearing application storage or reinstalling an app before checking whether it holds unique local messages, media, workspaces, offline content or device data.
Step-by-Step Troubleshooting
Choose Beginner for low-risk checks or Advanced to isolate the failure with focused evidence.
Identify the exact failure
A connected storefront domain remains in SSL pending after records are changed. Write down the account or device, software version, time and whether this occurs in one conversation, item, file or session. Do not make changes until the baseline is reproducible.
Run a safe comparison
Compare authoritative DNS records to the domain entries requested by Shopify. Repeat using a non-sensitive test item when possible. Keep the same application version and change only one variable.
Try the least disruptive correction
Correct conflicting A or CNAME records and allow normal certificate provisioning time. Preserve original values. If another user or administrator controls the relevant account, request permission before changing a shared setting.
Confirm the actual result
The custom domain opens with a valid HTTPS certificate and correct storefront. Repeat after a normal reopen or reconnect when safe. If it did not improve, undo the test and move to the Advanced investigation.
Locate the responsible layer
Reconcile account-side transaction identifiers and seller order records before making any new payment. Distinguish a server-side, policy, account or eligibility failure from the local client. Avoid destructive repair until the affected layer is known.
Gather focused technical evidence
Review CAA and DNS proxy settings only where relevant, recording prior entries. Record versions, timestamps and anonymized error details. Do not include credentials, tokens, security codes, private messages or payment information.
Reproduce with one controlled change
Compare authoritative DNS records to the domain entries requested by Shopify. Record a before-and-after outcome and determine whether the change affects the original symptom. Do not treat success in a different workflow as proof.
Preserve state and escalate safely
Do not disable HTTPS or purchase third-party certificates unnecessarily. If the result is unchanged, restore any temporary setting and take the comparison evidence to official support or the authorized administrator. Verify that saved records and permissions remain intact.
Advanced diagnosis
Inspect the remaining boundary: Review CAA and DNS proxy settings only where relevant, recording prior entries. Capture the smallest useful evidence: sanitized timestamp, supported software version, account role, relevant local setting and the first visible failure.
Compare authoritative DNS records to the domain entries requested by Shopify. If the comparison changes the outcome, focus only on the part that changed. If both environments fail identically, confirm the provider status or eligibility requirements before modifying the operating system, local network or account protections.
What to avoid
Safety rule: Do not disable HTTPS or purchase third-party certificates unnecessarily. Do not use unofficial login pages, cracked apps, modified payment links or tools that request backup codes. A reversible observation is more valuable than a destructive repair applied without a diagnosis.
How to verify the fix
Pass condition: The custom domain opens with a valid HTTPS certificate and correct storefront. Check it once immediately and again after a normal application restart or reconnection, when that action is safe. Record the outcome and confirm other previously working features are unaffected.
Solution Checklist
If the problem continues
Preserve the baseline and escalate with a clear comparison: Compare authoritative DNS records to the domain entries requested by Shopify. Include the relevant result, affected app version, device, connection and time. For account, billing or access issues, use official support and never include tokens, passwords, full payment details or personal recovery codes.
Reduce the chance of recurrence
Keep a record of the working version, permissions and configuration. After future app updates, account changes or device migrations, repeat this small diagnostic instead of changing multiple settings at once. Do not disable HTTPS or purchase third-party certificates unnecessarily.