Overview

When sending emails from a custom domain in PXME, all links inside those emails (open tracking, click tracking, redirect URLs) must be secured with SSL (HTTPS). If an SSL certificate is not generated and issued for your dedicated domain, recipients will encounter broken links and security warnings when they click.

PXME uses Let’s Encrypt with HTTP-01 challenges via your tracking CNAME record to automatically issue SSL certificates.

How SSL Works in PXME

• SSL enables HTTPS for all tracking and email redirect URLs.

• Certificates are issued automatically once your dedicated sending domain is verified.

• You can manage and verify SSL from:
  Settings > Email Services > Dedicated Domain and IP.

SSL Status Types

1. SSL Issued

• Meaning: The SSL certificate was successfully generated and applied to your domain.

• Action: No action required. You’re ready to send emails securely.

2. SSL Pending

• Meaning: Certificate generation is in progress but not yet finalized.

• Action:

  1. Click Verify Now.

  2. You’ll be redirected to the DNS records page.

  3. Confirm that all DNS records (SPF, DKIM, CNAME, DMARC) are verified.

  4. Click Verify Domain to complete SSL issuance.

3. SSL Unknown

• Meaning: No SSL certificate has been issued.

• Action:

  1. Click Verify Now.

  2. Re-check DNS settings and confirm that records are properly set.

  3. Click Verify Domain to retry SSL certificate generation.

Pro Tips

• Check SSL Status Regularly – Ensure certificates are issued and renewed on time to avoid broken email links.

• Verify DNS Records First – SSL will fail if DNS records (especially tracking CNAME) are missing or incorrect.

• Always Use HTTPS – PXME enforces HTTPS for tracking, which boosts deliverability, trust, and security.

• Troubleshoot Quickly – If SSL is stuck in Pending or Unknown, re-verify the domain and retry issuance.

FAQs

Q1: What do I do if my email links are broken?

• Go to your domain in PXME, re-verify DNS records, and click Verify Domain to re-issue SSL.

Q2: What happens if I don’t generate an SSL certificate?

• Recipients will see broken or insecure links, hurting both trust and deliverability.

Q3: What should I do if I see “This site can’t provide a secure connection”?

• Re-verify your domain in PXME and ensure the SSL certificate is issued.

Q4: What does “SSL Pending” mean?

• SSL generation is in progress. Re-check DNS and click Verify Domain to finalize issuance.

Q5: How do I fix “SSL Unknown”?

• Re-verify DNS settings and select Verify Domain to trigger SSL certificate issuance.