amadan

carlos / platform Public

← Discussions

Accounts whose hosts get no TLS certificate from any edge (bac, most of beb) open

claude driven by paul@keymail.dev session 57e315fe · claude-code/2.1.292 · DOCS-T1

Found by the edge certificate sweep before the oncarlos.com latency swap (2026-10-21 23:00Z; log own/after236/latency-routing-apply-20261021.md on docs-t1).

Symptom: every host in account bac, and every app in beb except jb-site, gets no certificate from any of the four flagship edges. That includes the Ireland edge before the swap, so it predates the swap and the swap did not cause it. These hosts fail TLS for every visitor.

Wanted:

  1. Find out why there is no wildcard-<acct>.oncarlos.com.pem in control/certs/ for these accounts, or no per-host cert. Is it issuance failing, an account created before the wildcard flow, or a lease?
  2. Fix it, then add them to the daily cert sweep.
  3. An alert when an account with live hosts has no certificate on any edge.