How to Complete Email SSL Verification

Use this recommended solution if you see the error "Your connection is not private" when clicking the "Unsubscribe link" or any other "Link" in an email sent through MSG91

1. Log in to your MSG91 account.

2. Navigate to Email Settings / Domain Settings (as applicable in your panel).

3. Locate the option for SSL Verification.
   
   

   

1. Click on Request SSL.

2. After requesting, a CNAME record value will be generated.
   
   

   

• The generated CNAME value may end with a dot (.) as shown in the screenshot.

⚠️ Important Note:

• Some DNS providers automatically remove the trailing dot (.).

• Some DNS providers do not remove it, which may cause SSL validation to fail.

✅ To ensure successful validation, always remove the dot (.) at the end of the CNAME value before saving the DNS record.

1. Log in to your DNS provider panel.

2. Add a new CNAME record with the details provided by MSG91.

3. Ensure:

   • Host/Name is correct

   • Value does NOT end with a dot (.)

4. Save the record.

1. Return to the MSG91 panel.

2. Click on Validate after adding the DNS record.

3. Wait for a few seconds.

✅ Upon successful validation, a success pop-up will appear, and the SSL setup will show a verified status.

• If validation fails:

  • Recheck the CNAME value for any trailing dot (.)

  • Ensure DNS propagation is complete (may take a few minutes)

  • Confirm the record type is CNAME, not TXT or A record

  • If you have CAA records added for your main domain then you need to check the records of Amazon/Aws and they are not added then please add the records of the Amazon.

Additional troubleshooting steps:

If CAA records are not configured, you may proceed with the above SSL verification steps.
If CAA records are present and AWS is not authorized, SSL validation may fail.
In such cases, allow AWS in your CAA records by referring to the official guide:

https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-caa.html

How to check CAA Records via third party tools?

https://www.whatsmydns.net/your-domain.com

http://dnschecker.org/#CAA/your-domain.com

https://www.nslookup.io/

If you have found any records like below then you need to add the records of Amazon

How to add CAA records ?

Go to your DNS panel and click on add record and in the hostname enter “@” and add all the 4 values of Amazon(aws)

• amazon.com

• amazontrust.com

• awstrust.com

• amazonaws.com

NOTE - CAA records needs to be added on main domain only.

Here is the screenshot of the CAA records once it is added successfully on C-Panel

Once the record of Amazon are added on C-Panel then it will show records of Amazon/aws like this