# DNS records and SSL

Which DNS records a connected domain needs, how often UOVA checks them, what each status label means, and how the SSL certificate is issued.

*Figure: A domain moves from added, to DNS records found, to verified, to live with SSL.*

## Which records you add

For a domain you connected, add the records below at your registrar. For a domain you bought through UOVA, nothing is needed: its nameservers already point at the hosting provider's DNS.

```text
A      @                            76.76.21.21
CNAME  www (your subdomain)        cname.uova.io
TXT    _uova-verify.yourdomain.com  uova-site-verification=<domain id>
```

The A record is for the bare domain, the CNAME for a subdomain. A subdomain also passes if its host resolves to a hosting address, which suits DNS providers that flatten CNAMEs. The step-by-step flow is in [Connect a domain you own](https://www.uova.com/help/build/domains/connect-your-own-domain).

| Record | Values UOVA accepts as pointing at its hosting |
| --- | --- |
| A | `76.76.21.21`, `76.76.21.22`, `216.198.79.1`, `216.198.79.65`, `64.29.17.1`, `64.29.17.65`, or any address beginning `76.76.21.`, `216.198.79.` or `64.29.17.`. |
| CNAME | `cname.uova.io`, `cname.vercel-dns.com`, any name ending `.vercel-dns.com`, `uova.io` or any name ending `.uova.io`. |
| TXT | Exactly `uova-site-verification=<domain id>` at `_uova-verify.<your domain>`. It proves ownership but does not point the domain. |

## How checks run

| When | What UOVA does |
| --- | --- |
| While your Domains page is open | Re-checks every 20 seconds, up to 90 times (about 30 minutes) per page visit, for up to 3 pending domains. |
| When you open a domain's Details | Runs one check for that domain if it is not yet Connected. |
| When you press Check again or Verify now | Runs a check now. Limited to 30 per minute per account. |
| In the background | Every 10 minutes for the first hour after you add the domain, hourly for the next 24 hours, then daily for 7 days, then stops. |

A check whose DNS lookup fails changes nothing, so a lookup problem cannot turn a working domain into a broken one. Once the background checks stop, open the Domains page and press **Check again** or **Verify now**. DNS changes can take up to 48 hours to propagate.

## Status labels

A domain shows the first label below that applies, from the top.

| Label | Meaning |
| --- | --- |
| Payment pending | A purchase or transfer has not finished paying. |
| Transfer pending | A transfer in is in progress. |
| Connecting | A purchase or transfer is being set up. |
| Purchase failed, Transfer failed | The purchase or transfer did not complete. A failed registration, renewal or transfer is refunded in full automatically. |
| Expired | The registration has expired. |
| Expires <date> | The registration expires within 30 days. This label outranks the DNS labels. |
| DNS error | The last check found no DNS records for the name at all. |
| Needs DNS | UOVA has not confirmed DNS yet, found records that do not point at its hosting, or matched only the TXT record. |
| Connected | Verified and active. |

## SSL

Your site is served over HTTPS. The certificate is issued by UOVA's hosting provider after the domain is attached to the project, and its state is read live as active, pending, error or unknown. While it is pending, the Domains page keeps re-checking. Certificates are renewed automatically, and the publish window shows **Secured with SSL** after a publish. UOVA does not promise a time for issuing a certificate.

The domain manager at [uova.com/domains](https://www.uova.com/domains) shows the state in a domain's drawer, with lines that begin "SSL certificate active", "SSL certificate provisioning", "SSL setup hit a snag" and "SSL status will appear after a DNS check". The provisioning line says it usually takes a few minutes; treat that as an estimate, not a promise. The dashboard shows **Connected** and does not show the certificate state separately.

## Limits

- There is no DNS record editor. The DNS rows in the domain drawer are read-only with **Copy**.
- Email and forwarding records are not offered or managed by UOVA.
- The domain serves only while its site is published. Otherwise it shows "Site not found".

**It has been an hour and the domain is not connected.**

Check that each record matches the Domains page character for character, then press **Check again**. DNS can take up to 48 hours.

**The row says only the TXT record was found.**

Ownership is verified but the DNS records are still pending. Add or fix the A or CNAME record.

**The row says DNS error.**

The last check found no DNS records for the name at all. Add the records at your registrar, wait, then press **Check again**.

**My browser shows a certificate warning.**

The certificate may still be pending. If it stays in error, contact UOVA through [Help & Support](https://www.uova.com/help/getting-started/help-and-support).

Source: https://www.uova.com/help/build/domains/dns-and-ssl