Quick answer: A new Shopify domain can show SSL or TLS pending for up to 48 hours. If it remains stuck, check conflicting DNS records, incorrect CNAME values, wildcard records, proxying, and whether Shopify needs to reprovision the certificate.
The real symptom
The domain appears connected, but Shopify shows SSL pending or TLS pending. Visitors may see a browser privacy warning, certificate mismatch, or only the myshopify.com URL works.
Likely causes
- DNS changes are still propagating.
- Multiple A records point the root domain to different services.
- An old AAAA record points IPv6 traffic elsewhere.
- The www CNAME does not point to shops.myshopify.com.
- A wildcard record or proxy interferes with certificate validation.
- The domain was moved from another Shopify store and verification is incomplete.
Confirmed Community fix
Community answers consistently recommend waiting through the provisioning window, then correcting DNS conflicts. If the records are correct for more than 48 hours and the status remains pending, Shopify Support may need to reset or reprovision the certificate.
Exact admin path
- Go to Settings → Domains.
- Open the affected domain.
- Review Shopify’s DNS warnings.
- Open the DNS manager at the domain provider.
- Correct the root record, remove conflicting AAAA records, and set www CNAME correctly.
- Return to Shopify and verify connection.
- Wait up to 48 hours after the final DNS change.
Simple checks
nslookup example.com
nslookup www.example.comTest both root and www. If one works and the other fails, the issue is usually a specific DNS record or redirect path.
Do not do this
Do not keep changing DNS every few hours. Each change can restart the interpretation window and make the failure harder to diagnose.