Hi everyone,
I’m in the middle of configuring a custom domain portal for our team's knowledge base and ticketing page. I’ve added the required CNAME records pointing to our Freshworks instance on our domain registrar's DNS panel, and external lookup tools confirm the DNS routing has propagated globally.
However, the portal status inside the admin dashboard still shows pending validation for the custom SSL certificate, and accessing the custom URL triggers a certificate trust warning.
Are there any specific CAA records or DNS configurations required on external registrars to ensure the auto-generated SSL certificate validates without hitting CA authorization locks?
Advance Thanks for any insights!


