--- title: "Troubleshooting domain issues" slug: "troubleshooting-domain-issues" description: "Resolve domain verification issues with CNAME and TXT records, ensuring SSL provisioning and access to your Knowledge Base site. Get expert tips now!" updated: 2026-05-15T09:11:37Z published: 2026-05-15T09:11:37Z --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.document360.com/llms.txt > Use this file to discover all available pages before exploring further. # Troubleshooting domain issues | Issue | Likely cause | First step to fix | | --- | --- | --- | | [Domain verification failed](/help/docs/troubleshooting-domain-issues#domain-verification-failed) | Incorrect or missing CNAME record | Check CNAME using a DNS lookup tool (e.g., Google Dig, Digwebinterface) | | [Site inaccessible with www prefix](/help/docs/troubleshooting-domain-issues#unable-to-access-the-knowledge-base-site) | www variant not configured in DNS | Use the non-www URL or add a separate CNAME + redirect for www | | [TXT record not found](/help/docs/troubleshooting-domain-issues#txt-record-not-found) | Record not added at the registrar | Add the TXT record exactly as shown in Document360 | | [TXT record mismatch](/help/docs/troubleshooting-domain-issues#txt-record-mismatch) | Incorrect verification code value | Update the TXT record value to match Document360 exactly | | [Multiple TXT records](/help/docs/troubleshooting-domain-issues#multiple-txt-records-detected) | Duplicate entries causing a conflict | Delete all duplicates, keep only the one matching Document360 | | [TXT record not propagated](/help/docs/troubleshooting-domain-issues#txt-record-not-propagated) | DNS propagation still in progress | Wait a few minutes, then retry verification | | [CNAME not found](/help/docs/troubleshooting-domain-issues#cname-record-not-found) | Record missing at the registrar | Add CNAME after TXT verification is complete | | [Incorrect CNAME target](/help/docs/troubleshooting-domain-issues#incorrect-cname-target) | CNAME pointing to wrong destination | Update "Points to" value to match Document360's CNAME | | [CNAME proxied (Cloudflare)](/help/docs/troubleshooting-domain-issues#cname-is-proxied-cloudflare) | Proxy blocking verification | Switch CNAME to "DNS only" (grey cloud) in Cloudflare | | [SSL provisioning blocked](/help/docs/troubleshooting-domain-issues#ssl-provisioning-blocked) | TXT/CNAME not yet verified | Complete both DNS verifications first | | [SSL provisioning failed](/help/docs/troubleshooting-domain-issues#ssl-provisioning-failed) | CAA records restricting certificate issuance | Add CAA records for DigiCert, Let's Encrypt, and Google | | ["This site can't be reached"](/help/docs/troubleshooting-domain-issues#resolving-the-error-this-site-cant-be-reached-while-configuring-a-custom-domain) | Expired CNAME or DNS propagation delay | Remove and reconfigure the custom domain; re-add CNAME immediately | | ["Connection not private/secure"](/help/docs/troubleshooting-domain-issues#resolving-errors-such-as-your-connection-is-not-private-or-your-connection-is-not-secure-while-accessing-the-knowledge-base-site) | Expired SSL or browser/VPN issue | Check SSL validity; try a different browser or disable VPN | | [SSL_ERROR_NO_CYPHER_OVERLAP](/help/docs/troubleshooting-domain-issues#resolving-the-secure-connection-failed-sslerrornocypheroverlap-error-while-configuring-a-custom-domain) | CNAME mismatch causing SSL failure | Verify CNAME on dnschecker.org; correct it and reconfigure | | [Search returns no results](/help/docs/troubleshooting-domain-issues#search-returns-no-results-after-migrating-to-a-new-data-center-or-reconfiguring-the-project) | Custom domain mapping removed from Document360 | Re-add the custom domain under Settings > Custom domain | --- ### Domain verification failed If you are having issues verifying your custom domain, ensure that the [**CNAME**](/docs/custom-domain-mapping#cname) matches the domain host. ![7_Screenshot-Troubleshooting_invalid_record](https://cdn.document360.io/860f9f88-412e-4570-8222-d5bf2f4b7dd1/Images/Documentation/image-1729966781926.png) There are chances for any other record to be mapped in the place of CNAME (such as AAAA records). This would also cause an error. **Suggestion**: To view your domain's CNAME, and other DNS information, use [Digwebinterface](https://www.digwebinterface.com/) or [Google's DNS lookup](https://toolbox.googleapps.com/apps/dig/), or any other DNS lookup tool available on the web ![9_Screenshot-Troubleshooting_digwebinterface](https://cdn.document360.io/860f9f88-412e-4570-8222-d5bf2f4b7dd1/Images/Documentation/image-1729967027700.png) ** NOTE For security reasons, some domain registrars can mask/restrict the DNS records from being discovered on the DNS lookup tools. One such example is **Cloudflare**. In such cases, you can contact your domain registrar for more information. Once the correct CNAME is mapped, it might take up to 24 hours for successful mapping. --- ### Unable to Access the Knowledge Base Site **Error:** The Knowledge Base site is inaccessible when using a `www` prefix in the URL (e.g., `https://www.support.yourcompany.com/`), but works correctly without it (e.g., `https://support.yourcompany.com/`). ![Error message indicating trouble connecting to the specified website with troubleshooting tips.](https://cdn.document360.io/860f9f88-412e-4570-8222-d5bf2f4b7dd1/Images/Documentation/unable-to-access-KBSite.png) Steps to resolve: 1. Access the Knowledge Base site using the correct URL, without the www prefix. (e.g., [https://support.yourcompany.com/).](https://support.yourcompany.com/).) 2. Verify your configured domain in Document360: - Navigate to **Settings** > **Knowledge base site** > **Custom domain** ![Document360 interface showing custom domain settings and provided domain link.](https://cdn.document360.io/860f9f88-412e-4570-8222-d5bf2f4b7dd1/Images/Documentation/Custom-domain.png) - Confirm the exact domain that was set up. Use the URL to access the **Knowledge base site**. 1. If you want both the www and non-www URLs to work, contact your DNS administrator to: - Add a separate CNAME record for the www variant - Configure a redirect from [www.support.yourcompany.com](http://www.support.yourcompany.com) to [support.yourcompany.com](http://support.yourcompany.com) --- ### Wait time after DNS records are updated If the CNAME match and the domain verification issue persist, the TTL (Time-To-Live) can be a possible reason. If you're updating an existing DNS Record value, it may take time for the configured TTL to reflect globally. If the TTL is set to 3600 for a DNS record, then it may take up to 1 hour (3600 seconds) to reflect the DNS record value for the DNS Name server globally. --- ### CAA restriction set by the domain registrar Some domain registrars set a restriction that the SSL certificate should be provisioned by a specific CA (Certificate Authority). For **example**, if a CAA DNS record has a value of 0 issues "letsencrypt.org", then only the Let's Encrypt (CA) will be able to generate a certificate for the particular custom domain. Other Certificate Authorities (DigiCert, in our case) would see this configuration and would deny generating an SSL certificate. Check if you have any CAA records configured in the DNS configuration for the custom domain. --- ### TXT Record Errors #### TXT record not found This error occurs when Document360 cannot detect the TXT record for your domain at the registrar. Steps to resolve: 1. Log in to your domain registrar and navigate to DNS settings. 2. Add the TXT record exactly as shown in Document360: - Host: `_doc360-verify.` followed by your domain - Value: The unique verification code displayed in Document360 3. Save the record and click **Retry verification** in Document360. > [!NOTE] > ******NOTE > > DNS changes may take a few minutes to propagate. If the record was just added, wait a few minutes before retrying. --- #### TXT record mismatch This error occurs when a TXT record is found, but the value does not match the verification code generated by Document360. Steps to resolve: 1. Go to your domain registrar's DNS settings. 2. Locate the existing TXT record for `_doc360-verify.` and check its value. 3. Compare it against the exact value shown in Document360. 4. Update the value to match exactly — even a single character difference will cause failure. 5. Save and click **Retry verification**. --- #### Multiple TXT records detected This error occurs when more than one TXT verification record exists for the same host, causing a conflict during verification. Steps to resolve: 1. Log in to your domain registrar and navigate to DNS settings. 2. Search for all TXT records with the host `_doc360-verify.` 3. Delete all duplicate entries, keeping only the one matching the value shown in Document360. 4. Return to Document360 and click **Retry verification**. --- #### TXT record not propagated This error occurs when the TXT record has been added correctly but has not yet propagated across DNS servers globally. Steps to resolve: 1. Confirm the TXT record has been saved correctly at your registrar. 2. Use [Google's DNS lookup tool](https://toolbox.googleapps.com/apps/dig/) or [Digwebinterface](https://digwebinterface.com) to check if the TXT record is visible. 3. Wait a few minutes and click **Retry verification**. > [!NOTE] > ******NOTE > > DNS propagation typically takes a few minutes but can occasionally take longer depending on your registrar's TTL settings. --- #### Invalid TXT host This error occurs when the host name of the TXT record has been entered incorrectly at the registrar. Steps to resolve: 1. Log in to your domain registrar and locate the TXT record. 2. Verify that the host is set exactly as shown in Document360 — it should begin with `_doc360-verify.` 3. Correct the host name if it differs and save the record. 4. Click **Retry verification** in Document360. --- ### CNAME Errors #### CNAME record not found This error occurs when Document360 cannot detect a CNAME record for your domain after TXT verification has passed. Steps to resolve: 1. Log in to your domain registrar and navigate to DNS settings. 2. Add a new CNAME record: - Host: Your custom domain (e.g., [help.yourcompany.com](http://help.yourcompany.com)) - Points to: The CNAME value shown in Document360 1. Save the record and click**Retry verification**. > [!NOTE] > ******NOTE > > CNAME verification only begins after TXT ownership verification is successfully completed. --- #### Incorrect CNAME target This error occurs when a CNAME record exists but is pointing to the wrong destination instead of Document360's servers. Steps to resolve: 1. Go to your domain registrar's DNS settings. 2. Locate the existing CNAME record for your custom domain. 3. Update the **Points to** value to match the exact CNAME target shown in Document360. 4. Save and**click Retry verification.** --- #### CNAME is proxied (Cloudflare) This error occurs when the CNAME record is routed through Cloudflare's proxy, which prevents Document360 from verifying the record correctly. Steps to resolve: 1. Log in to your Cloudflare account and navigate to the DNS settings for your domain. 2. Locate the CNAME record for your custom domain. 3. Click the orange proxy icon next to the record to switch it to DNS only (grey cloud). 4. Save the change and click Retry verification in Document360. > [!NOTE] > ******NOTE > > Cloudflare's proxy (orange cloud) intercepts DNS resolution, which blocks Document360's verification. Switching to DNS only mode is required for successful verification. --- #### Ownership not verified (CNAME blocked by TXT) This error occurs when CNAME verification is attempted before TXT ownership verification has been completed. Steps to resolve: 1. Return to the DNS records table in Document360. 2. Ensure the TXT record has been added correctly at your registrar. 3. Complete TXT verification first — CNAME verification will only proceed once TXT is confirmed. --- ### SSL Errors #### SSL provisioning blocked This error occurs when SSL provisioning cannot begin because DNS verification (TXT and CNAME) has not been completed. Steps to resolve: 1. Ensure both the TXT and CNAME records are verified successfully in Document360. 2. Once both records show a **Verified** status, SSL provisioning will begin automatically. --- #### SSL provisioning failed This error occurs when Document360 is unable to issue an SSL certificate for your domain. Steps to resolve: 1. Check if any CAA records in your DNS are restricting SSL issuance. Ensure the following entries are present: - `@ IN CAA 0 issue digicert.com` - `@ IN CAA 0 issue letsencrypt.org` - `@ IN CAA 0 issue pki.goog` 2. Add any missing CAA entries and click **Retry verification**. 3. If the issue persists, contact [Document360 support](mailto:support@document360.com). --- #### SSL still provisioning This message appears when SSL setup is in progress and has not yet completed. Steps to resolve: 1. No action is required — SSL provisioning is automatic. 2. Wait a few minutes and refresh the page to check the updated status. 3. If the status does not change after 15 minutes, click **Retry verification**. --- ### General Verification Errors #### Verification already running This message appears when a verification attempt is already in progress. Steps to resolve: 1. Wait for the current verification process to complete. 2. Do not click Retry verification while verification is running — this may cause a conflict. 3. Once the process completes, review the status of each record and retry if needed. --- #### Verification incomplete This error appears when some verification checks have passed but others have failed. Steps to resolve: 1. Review the DNS records table in Document360 — failed records will be highlighted. 2. Fix only the records showing a failed or not verified status. 3. Records that have already passed do not need to be reconfigured. 4. Click **Retry verification** once the failing records are corrected. --- ### Default Domain Errors #### Domain already in use This error appears when the subdomain you entered is already taken by another project. Steps to resolve: 1. Enter a different subdomain name in the field. 2. The **Update** button will activate once an available name is entered. 3. Click **Update** to save the change. --- #### Invalid domain name This error appears when the subdomain entered contains unsupported characters. Steps to resolve: 1. Ensure the subdomain uses only **lowercase letters** and **hyphens**. 2. Remove any special characters, spaces, uppercase letters, or leading/trailing hyphens. 3. Re-enter the corrected subdomain and click **Update**. --- ### Resolving the error "This site can’t be reached" while configuring a custom domain **Error**: This site can’t be reached This error usually occurs when the **CNAME record is not added promptly** in your DNS after it's generated in Document360. If there's a delay, the CNAME may expire, leading to a failed domain verification. Other possible causes include: - **DNS propagation delays** - **Duplicate CNAME entries** in your DNS - **Missing CAA records** for supported SSL providers like Let’s Encrypt, DigiCert, or Google ![Error message indicating the site cannot be reached with troubleshooting suggestions.](https://cdn.document360.io/860f9f88-412e-4570-8222-d5bf2f4b7dd1/Images/Documentation/1_Screenshot-Troubleshooting_This_site_cant_be_reached.png) **Steps to resolve:** 1. **Check when the CNAME was configured** - Confirm whether the CNAME record was added to your DNS **immediately** after creating it in Document360. - If not, the CNAME might have expired. 2. **Remove and reconfigure the custom domain** - Go to your **DNS provider** and remove the existing CNAME record. - Then, in Document360, delete the existing **custom domain** entry. - Wait **15 minutes** before proceeding. 3. **Add the CNAME record again** - Navigate to **Settings** (**) > **Knowledge base site** in the left navigation bar****in the Knowledge base portal. - In the left navigation pane, navigate to **Custom domain** > **Custom domain mapping**, and create the custom domain again. - Immediately copy the CNAME record and add it to your DNS provider with a TTL (Time To Live) of **5 minutes**. - Return to Document360 and click **Verify**. - Wait a few minutes for the configuration to complete. 4. **Check for DNS propagation** - DNS changes typically take **2–4 hours**, but in some cases up to **24 hours**. - Wait for full propagation before rechecking the domain. 5. **Verify DNS using Google Dig tool** - Use [Google Dig tool](https://toolbox.googleapps.com/apps/dig/) to check if your DNS records are showing correctly. - Look for any **duplicate CNAME entries** for the same hostname. If found, **remove duplicates**. 6. **Check for CAA record conflicts** - Use [dnschecker.org](http://dnschecker.org) to view CAA records for your domain. - If any **CAA records** are configured, ensure they allow Document360’s SSL providers: - @ IN CAA 0 issue [digicert.com](http://digicert.com) - @ IN CAA 0 issue [letsencrypt.org](http://letsencrypt.org) - @ IN CAA 0 issue [pki.goog](http://pki.goog) Add these CAA entries to your DNS if missing. If the issue persists after following these steps, please contact the Document360 support team for further assistance: [Contact Document360 Support](https://document360.com/support/) --- ### Resolving errors such as “Your connection is not private” or “Your connection is not secure” while accessing the Knowledge base site This error typically occurs due to the following reasons: 1. **Issue: SSL certificate expired** 1. Check if the SSL certificate has expired. 2. Visit the Knowledge base site and click the **View site information** option in the URL bar. 3. Click **Connection is secure** to view the SSL certificate details. **B. If the SSL Certificate has not expired, then try the below troubleshooting steps:** 1. Try accessing the site from a different browser to rule out browser-specific issues. 2. Deactivate any website extensions in your browser and check again. 3. Verify if all users are experiencing the same issue to identify if it is user-specific or system-wide. 4. Clear your browser cache or switch to another browser, as this often resolves the problem. **C. VPN connection** 1. Deactivate your VPN and try accessing the site again: 2. If deactivating the VPN resolves the issue, the VPN might be causing the problem. 3. Contact your IT team for further assistance. **D. DNS records issue** There may be issues with the DNS resolver if the DNS records have not been updated successfully. 1. Use a DNS checker (e.g., [DNS Checker](https://dnschecker.org/)) to verify the DNS records. 2. Confirm if all the records have been updated successfully. 3. If the records are not properly synced, contact your DNS provider or domain registrar to ensure the DNS zone is correctly configured and synced for the domain. If the issue persists after following these steps, please contact the Document360 support team for further assistance: [Contact Document360 Support](https://document360.com/support/) --- ### Resolving the “Secure Connection Failed - SSL_ERROR_NO_CYPHER_OVERLAP” error while configuring a custom domain **Error**: Secure Connection Failed - SSL_ERROR_NO_CYPHER_OVERLAP This error usually indicates that the SSL certificate couldn’t be issued due to a mismatch in the CNAME configuration. If the custom domain does not point to the correct Document360 domain, SSL validation fails, resulting in the error. **Steps to resolve**: 1. Go to [dnschecker.org](http://dnschecker.org). 2. In the **search bar**, enter your custom domain and select **CNAME** from the dropdown. 3. Verify the result: The CNAME value should match the exact CNAME provided in the Document360 portal during domain setup. 4. If the CNAME is incorrect: - Remove the current custom domain from your Document360 project. - Correct the CNAME record in your DNS provider by adding the one provided in Document360. - Wait a few minutes, then reconfigure the custom domain in Document360 and verify again. Once the correct CNAME is in place and verified, the SSL certificate will be issued successfully, resolving the error. ![DNS check results showing Google and other service locations with IP addresses.](https://cdn.document360.io/860f9f88-412e-4570-8222-d5bf2f4b7dd1/Images/Documentation/image-1744345114351.png) --- ### Search returns no results after migrating to a new data center or reconfiguring the project **Issue:** All users are unable to search for articles on the Knowledge base site. Search, Advanced Search, and Eddy AI Search all return no results, even though articles are published and accessible. **Cause**: This can happen when the custom domain mapping has been removed from Document360, commonly after a data centre migration or project reconfiguration. Even if the CNAME record still exists in your DNS (keeping the custom domain URL accessible), the search feature will not function unless the custom domain is actively mapped within Document360. **How to identify**: In the Knowledge base portal, click **Open Site** icon. If it loads the default Document360-provided domain (e.g., [yourproject.document360.com](http://yourproject.document360.com)) instead of your custom domain, the custom domain mapping has been removed. **Steps to resolve:** 1. Navigate to **Settings** > **Knowledge base site** > **Custom domain** and check whether your custom domain is listed. If it is missing, proceed with the steps below. 2. Go to your DNS provider and remove the existing CNAME record for the custom domain. 3. In Document360, navigate to **Settings** > **Knowledge base site** > **Custom domain**, and re-add the custom domain. 4. Copy the new CNAME record generated by Document360 and add it to your DNS provider. 5. Return to Document360 and click Verify to complete the mapping. 6. Once verified, test the search on your custom domain to confirm it is working as expected. > [!NOTE] > ******NOTE > > Removing the old CNAME record from DNS (step 2) before reconfiguring is essential. If the existing CNAME record is not removed first, it will conflict with the new one and the mapping will fail. A DNS record that maps a subdomain (such as [docs.yourcompany.com](http://docs.yourcompany.com)) to your Document360 knowledge base site URL. In Document360, CNAME records are required when connecting a custom domain. You add the CNAME entry at your DNS provider, pointing your subdomain to the Document360-provided target address, which can take up to 48 hours to propagate. Time To Live is a DNS setting that specifies how long, in seconds, a DNS record is cached by resolvers before they query the authoritative server for a fresh value. Lower TTL values (e.g., 300 seconds) allow DNS changes — such as pointing a custom domain to Document360 — to propagate faster. Higher values (e.g., 86400 seconds / 24 hours) reduce DNS query load but slow down propagation of updates. A server that stores information about a domain, such as its address, mail settings, and other DNS records, and responds to queries about this information. Certification Authority Authorization - A DNS record that restricts which Certificate Authorities are permitted to issue SSL certificates for your domain. Adding a CAA record prevents unauthorized CAs from issuing certificates that could be used to impersonate your site. In Document360, configure CAA records in your DNS provider when setting up a custom domain with SSL.