# SSL Certificate Error on icptokens.net **URL:** \ **Category:** Developers\ **Created:** [October 11, 2025, 5:50pm UTC](https://forum.dfinity.org/t/ssl-certificate-error-on-icptokens-net/58788 "2025-10-11T17:50:01Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![bobekas](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/bobekas/32/20160_2.png) [@bobekas](https://forum.dfinity.org/u/bobekas)\ **Post date:** [October 11, 2025, 5:50pm UTC](https://forum.dfinity.org/t/ssl-certificate-error-on-icptokens-net/58788/1 "2025-10-11T17:50:01Z")
Hi everyone, I’m the developer of **[icptokens.net](https://icptokens.net)** — it’s an on-chain asset canister hosted on the Internet Computer. Recently, the site started showing this browser error: ```auto net::ERR_CERT_COMMON_NAME_INVALID ``` It seems related to the SSL/TLS certificate, not sure if this issue is from the boundary nodes, or something in the network configuration. Could anyone from the DFINITY community help me investigate whether this is a **network-side issue** or something I need to fix in my **canister/domain setup**? Any insights or guidance would be greatly appreciated. ---
**Author:** ![peterparker](https://avatars.discourse-cdn.com/v4/letter/p/b9bd4f/32.png) [@peterparker](https://forum.dfinity.org/u/peterparker)\ **Post date:** [October 11, 2025, 5:56pm UTC](https://forum.dfinity.org/t/ssl-certificate-error-on-icptokens-net/58788/2 "2025-10-11T17:56:08Z")
I don’t know the answer, but I’m sharing the following in case it’s useful until the colleagues who know best respond. Just few days ago, a few people using **Cloudflare** reported a similar issue that was resolved by updating their Cloudflare configuration as mentioned here: > [@Custom Domain Re-registration?](https://forum.dfinity.org/t/custom-domain-re-registration/58467/3): > > Hey @WebTreeSoftwareSolut and @Cris.MntYetti, we do experience some flakiness (especially with apex domains). Often the cause is that the domain is registered with Cloudflare and there is some misconfiguration. When you use Cloudflare, you need to make sure that you have disable edge certificates as it can interfere with the custom domains service. You can disable it the following way: Go to your domain in the cloudflare panel, then go to “SSL/TLS” → “Edge Certificates”, scroll all the way dow… Again, just sharing in case it might help by any chance. ---
**Author:** ![WebTreeSoftwareSolut](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/webtreesoftwaresolut/32/35012_2.png) [@WebTreeSoftwareSolut](https://forum.dfinity.org/u/WebTreeSoftwareSolut)\ **Post date:** [October 12, 2025, 1:18am UTC](https://forum.dfinity.org/t/ssl-certificate-error-on-icptokens-net/58788/4 "2025-10-12T01:18:43Z")
> [@peterparker](#): > > Just few days ago, a few people using **Cloudflare** reported a similar issue that was resolved by updating their Cloudflare configuration as mentioned here: I was one of those people. Resubmitting the request to the boundary nodes is what immediatly resolved the situation. Changing cloudfare setting is what will prevent issue in future (with cloudfare messing up txt record) ---
**Author:** ![bobekas](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/bobekas/32/20160_2.png) [@bobekas](https://forum.dfinity.org/u/bobekas)\ **Post date:** [October 12, 2025, 8:06am UTC](https://forum.dfinity.org/t/ssl-certificate-error-on-icptokens-net/58788/5 "2025-10-12T08:06:31Z")
After disabling Cloudflare Edge Certificates, we re-submitted the request, and it’s now stuck in **“PendingAcmeApproval”**. DNS TXT records are correct and proxying is off… ---
**Author:** ![DanGTZ](https://avatars.discourse-cdn.com/v4/letter/d/c67d28/32.png) [@DanGTZ](https://forum.dfinity.org/u/DanGTZ)\ **Post date:** [October 13, 2025, 5:12pm UTC](https://forum.dfinity.org/t/ssl-certificate-error-on-icptokens-net/58788/6 "2025-10-13T17:12:11Z")
> [@bobekas](#): > > PendingAcmeApproval Any update on this? This already occurred in the past, so what’s the issue currently @peterparker ? > [@Stuck with "PendingAcmeApproval"](https://forum.dfinity.org/t/stuck-with-pendingacmeapproval/31247/3): > > SOLVED: For the community, it may happen that the process is stuck with PendingAcmeApproval and then after 10+ hours it completes. So far, so good slight_smile ---
**Author:** ![peterparker](https://avatars.discourse-cdn.com/v4/letter/p/b9bd4f/32.png) [@peterparker](https://forum.dfinity.org/u/peterparker)\ **Post date:** [October 13, 2025, 5:50pm UTC](https://forum.dfinity.org/t/ssl-certificate-error-on-icptokens-net/58788/7 "2025-10-13T17:50:30Z")
As mentionned in my [above post](https://forum.dfinity.org/t/ssl-certificate-error-on-icptokens-net/58788/2), I don’t know the answer. ---
**Author:** ![Nimakra](https://avatars.discourse-cdn.com/v4/letter/n/aeb1de/32.png) [@Nimakra](https://forum.dfinity.org/u/Nimakra)\ **Post date:** [October 13, 2025, 8:08pm UTC](https://forum.dfinity.org/t/ssl-certificate-error-on-icptokens-net/58788/8 "2025-10-13T20:08:27Z")
Same here. Mine has been like that for over a week now and the website is still not accessible. ---
**Author:** ![rbirkner](https://avatars.discourse-cdn.com/v4/letter/r/838e76/32.png) [@rbirkner](https://forum.dfinity.org/u/rbirkner)\ **Post date:** [October 14, 2025, 11:37am UTC](https://forum.dfinity.org/t/ssl-certificate-error-on-icptokens-net/58788/9 "2025-10-14T11:37:55Z")
Hello everyone, there are multiple threads on this going on. Mostly this is due to the Cloudflare Universal SSL setting. Renewal fails, but the custom domains service is not smart enough and just retries for 3 days in the hope of the order going through at some point. However, that triggers a rate-limit on the Let’s Encrypt side. After 3 days, the custom domains service gives up. When you retry immediately after that, you hit the rate-limit again and it won’t go through. That’s why you should wait a few days and then retry. We are currently working on a new custom domains service that is more robust and smarter about such errors. We are code complete and are now planning the rollout and transition. For you, the users not much will change. ---
**Author:** ![bobekas](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/bobekas/32/20160_2.png) [@bobekas](https://forum.dfinity.org/u/bobekas)\ **Post date:** [October 15, 2025, 7:04am UTC](https://forum.dfinity.org/t/ssl-certificate-error-on-icptokens-net/58788/11 "2025-10-15T07:04:16Z")
**Thanks, @rbirkner!** I’ve marked this answer as the **solution** — really appreciate the clear explanation and update. For anyone looking for the **short-term workaround** , please check the other thread here: 👉 [https://forum.dfinity.org/t/help-icp-gateway-returns-error-400-unknown-domain/56948/](https://forum.dfinity.org/t/help-icp-gateway-returns-error-400-unknown-domain/56948/24) (It also includes adding the `www` version and redirect setup.) Thanks again! Best, Boyan CTO, ICP Tokens ---
**Author:** ![bobekas](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/bobekas/32/20160_2.png) [@bobekas](https://forum.dfinity.org/u/bobekas)\ **Post date:** [October 15, 2025, 12:01pm UTC](https://forum.dfinity.org/t/ssl-certificate-error-on-icptokens-net/58788/13 "2025-10-15T12:01:48Z")
You’re right - different domain means a new PID (like a fresh icptokens account), so portfolio and watchlist aren’t visible; we’re waiting on Dfinity support to revert to the non-www version.