A Not Secure warning on an Elementor Host site is normal during the 72-hour DNS propagation period. Elementor automatically generates an SSL certificate once your domain connection is verified worldwide. To resolve persistent issues, verify your A and CNAME records, remove any CAA records, and disable the Cloudflare proxy feature.
What happens during the Elementor Host domain connection process?
When you connect a third-party domain, your DNS records must propagate across global servers. This “address book” update can take up to 72 hours. During this window, you may notice the following:
- Intermittent Availability: Your URL might point to your old host, the new Elementor site, or a 404 error page while servers update.
- Delayed SSL Issuance: The security certificate is the final step and cannot be created until the domain points to Elementor everywhere.
- Dashboard Status: Your site status will remain “Pending” or “Connecting” until the process is complete.
Why is my SSL certificate still pending?
If your site remains insecure after several hours, specific technical blockers at your domain registrar might be preventing Elementor from issuing the certificate.
How do I verify my DNS records?
Incorrect records are the most common cause of security warnings. You must ensure your registrar settings match these requirements:
- Log in to your domain registrar (e.g., GoDaddy, Namecheap).
- Navigate to the DNS Management or DNS Records page.
- Update the following records:
- (Type A): Name (or Host) is
@, Valueis 162.159.137.9or162.159.138.9 - (CNAME): Name is
www, Value is your Elementor domain (e.g., mycoolsite.elementor.cloud).
- (Type A): Name (or Host) is
- Delete any old A records or Parked records that point to different IP addresses.
Are CAA records blocking my security certificate?
A Certificate Authority Authorization (CAA) record tells the internet which companies can issue security certificates for you. If a CAA record exists that does not include the authority used by Elementor, the SSL will fail.
- Open a tool like dnschecker.org.
- Perform a CAA lookup for your domain.
- If records are found, log in to your registrar and Delete the CAA records.
- Wait 24 hours for the change to clear the path for your new SSL.
How do I disable the Cloudflare proxy?
If you manage your domain through Cloudflare, their “Proxy” setting masks your IP address, which prevents Elementor from verifying ownership.
- Log in to your Cloudflare Dashboard.
- Select the DNS tab.
- Locate your A Records.
- Click the Orange Cloud icon to turn it Gray (DNS Only).
- Click Save.
When should I contact Elementor support?
You should open a ticket with the support team if you encounter any of the following specific scenarios:
- The DNS records have been correct for more than 72 hours but the site is still not secure.
- You have confirmed that no CAA records exist and Cloudflare is set to DNS Only.
- The My Elementor dashboard displays a Red Error Message instead of “Pending.”