App Service Certificate Denied, How to Fix

Raeldor 40

My app service certificate was denied because it failed domain ownership (I missed the window because I thought the email from godaddy was a phishing email). I'm really scared to delete the certificate and re-issue like it's asking. Is there another way to fix this?

Luke Murray 11,091 Reputation points MVP

2024-07-11T05:12:47.9233333+00:00

You should be able to delete the certificate, reissue, and domain validate without issues.
SnehaAgrawal-MSFT 21,686 Reputation points

2024-07-11T06:42:38.51+00:00
@Raeldor Thank you for your question!

If I understand correctly, you opted for auto-renewal for your App Service certificate because you thought the email from GoDaddy was a phishing email, and now you want to renew the App Service certificate if so-

Yes, GoDaddy requires you to verify your domain once every three years, and you will receive an email for this verification. App Service certificates have a one-year validity period. As the expiration date approaches, you can renew App Service certificates either automatically or manually in one-year increments.

To change the automatic renewal setting for your App Service certificate at any time, on the App Service Certificates page, select the certificate.

On the left menu, select Auto Renew Settings.

Select Off, and select Save.

To manually renew the certificate instead, select Manual Renew. You can request to manually renew your certificate 60 days before expiration, but the maximum expiration date will be 397 days.

After the renew operation completes, select Sync.

The sync operation automatically updates the hostname bindings for the certificate in App Service without causing any downtime to your apps.

Check- https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-app-service-certificate?tabs=portal#renew-an-app-service-certificate

Please let us know if query remains,
Raeldor 40 Reputation points

2024-07-11T08:46:01.72+00:00

Thank you for the reply. I cannot turn off auto-renew. It says 'Certificate cannot be renewed when it is either denied, revoked, expired or cancelled auto renew of the certificate will not happen.'. I also can't see a 'Manual Renew' button anywhere.

Thanks
Ray
Raeldor 40 Reputation points

2024-07-12T12:37:54.3666667+00:00

Thank you for the reply. I'm kind of worried stuff will somehow get un-bound from my app. Is this safe to do without having to reconfigure a bunch of stuff afterwards? Thanks.

Accepted answer

SnehaAgrawal-MSFT 21,686 Reputation points

2024-07-12T06:43:11.0766667+00:00

@Raeldor Thanks for reply! If your Certificate is Denied: This is due to Domain verification was not completed in 15 days causing the certificate to be in denied state.

Note that Certificate will not be billed. You have to Purchase a new certificate with same domain to resolve this. This Certificate cannot be restored.

see- https://azure.github.io/AppService/2018/02/20/Troubleshooting-Tools-for-App-Service-Certificate.html

Let us know if you have further query happy to assist.
Please sign in to rate this answer.

1 person found this answer helpful.
Raeldor 40 Reputation points

2024-07-17T13:43:32.8833333+00:00

Thank you. I deleted and re-created the certificate and it seems to not have affected my website or app.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

App Service Certificate Denied, How to Fix

0 additional answers

Your answer