| State | Meaning | What to do |
|---|---|---|
| Pending DNS | We have not found the CNAME (or A) record pointing to us yet | Add the record and click Check DNS; DNS can take up to 48 hours to spread |
| Verified | The record points to us; the HTTPS certificate has not been issued yet because nobody has visited the domain over HTTPS | Open https://your-domain once in a browser; the certificate is issued during that first visit, usually within a minute |
| Active | Domain serves links over HTTPS | Set it as default if you like |
| Needs attention | The record was changed or removed, is proxied through another network (for example Cloudflare's orange cloud), the certificate could not be issued or renewed (for example a blocking CAA record), or the domain was flagged | Open the domain for the exact reason and fix it; links on the domain may stop working if not fixed |
| Disabled | Disabled by you or by us (for example for abuse or on a plan downgrade above limits) | Contact support if you did not disable it |
We re-check every Active domain daily and email Owners if the record disappears or starts pointing elsewhere.