Verify the intended hostname
Confirm the exact host name in the Apex project and compare it with the DNS record published by your DNS provider. A mismatch between apex and subdomain names is a common source of verification failures.
Check the DNS record
- Confirm the record type and target match the current Apex project instructions.
- Remove conflicting records for the same host name.
- Check the authoritative nameservers rather than relying on a single local resolver.
Certificate state
Certificate provisioning begins after domain ownership is verified. A certificate issue should be investigated separately from an application error so the fix does not accidentally change the route.
Routing checks
Once TLS is healthy, confirm that the hostname is attached to the correct project and environment. A healthy certificate on the wrong project is still a routing problem.
Protect access while troubleshooting
Review tokens, roles, and environment-variable access before sharing logs with a wider team.