---
title: "The SSL certificate can’t be created or renewed"
url: "https://inleed.com/helpcenter/ssl-certificate-cannot-be-created"
language: "en"
updated: "2026-11-06"
category: "Web hosting"
type: "felsokning"
---

# The SSL certificate can’t be created or renewed

DirectAdmin can’t issue or renew the SSL certificate. Start with the cause at the top.

## Right guide?

- Creating an SSL certificate for the first time?  
  [Turn on an SSL certificate for your website](https://inleed.com/helpcenter/turn-on-ssl-certificate)

## Common causes

### 1. It says `The ACME system is disabled`

**Check:** ACME, which creates the certificates automatically, is turned off for the domain. A certificate that already exists still renews automatically.

**What to do:** If there’s no certificate yet: turn on the automation (ACME) for the domain.

[Turn on an SSL certificate for your website](https://inleed.com/helpcenter/turn-on-ssl-certificate)

### 2. The domain or www doesn’t point here

**Check:** Does it say `No domains pointing to this server`? Let’s Encrypt checks the domain and www, and ends up on another server.

Do the A records for @ and www point to your hosting’s IP address, and are there AAAA records pointing somewhere else?

**What to do:** Point the A records for @ and www to your hosting’s IP address, and remove AAAA records that point somewhere else. The IP address is in the [client area](https://login.inleed.net) on your hosting’s page under **Hosting Specifics**.

[Connect a domain to your hosting](https://inleed.com/helpcenter/connect-domain-to-hosting)

### 3. The wildcard certificate can’t be created

**Check:** Is the domain’s DNS with another provider? A wildcard certificate needs the DNS to be with Inleed.

**What to do:** Switch to Inleed’s nameservers. Or turn off **Prefer wildcard certificates** under **ACME settings**, and a certificate is created for the exact names instead.

[Change the nameservers for your domain](https://inleed.com/helpcenter/change-nameservers)

### 4. It says an SSL request is already in progress

**Check:** Did you try to create the certificate a moment ago? A request in progress can’t be cancelled.

**What to do:** Wait about 15 minutes and try again.

### 5. Everything points correctly, but it still fails

**Check:** Does the domain use DNSSEC? An error in DNSSEC means the domain can’t be checked.

**What to do:** Turn off DNSSEC and try again.

[Turn off DNSSEC for your domain](https://inleed.com/helpcenter/turn-off-dnssec)

## Good to know

- The error for each attempt is shown in DirectAdmin under **SSL/TLS Certificates › Provisioning history**.
- After a DNS change you can wait a few minutes and click **PROVISION NOW**. Otherwise a new attempt is made automatically within 24 hours.

## Related guides

- [Turn on an SSL certificate for your website](https://inleed.com/helpcenter/turn-on-ssl-certificate)
- [My website shows “Not secure”](https://inleed.com/helpcenter/website-shows-not-secure)
- [Connect a domain to your hosting](https://inleed.com/helpcenter/connect-domain-to-hosting)
- [Turn off DNSSEC for your domain](https://inleed.com/helpcenter/turn-off-dnssec)