AI support for SSL, domains, and DNS
How Panelbot diagnoses "site not secure" warnings, expired certificates, and domains that will not open by checking routing and HTTPS validity.
Updated
SSL, domains, and DNS
When a browser says “your connection is not private” or a domain simply will not open, customers panic, and understandably so, because to a visitor it looks like the whole business is gone. The cause is usually one of a few specific things: an expired or misconfigured certificate, a domain pointing at the wrong place, or nameservers managed somewhere else entirely. Panelbot works out which one it is from the outside in, then fixes what it safely can and points clearly at the rest.
What your customers report
These issues arrive in fairly consistent language:
- “The browser says my site is not secure.”
- “My SSL certificate expired.”
- “I get a ‘your connection is not private’ warning.”
- “There is a certificate name mismatch warning.”
- “My domain does not open at all.”
- “The domain shows the wrong website.”
- “HTTPS does not work but the plain address does.”
- “DNS is not updating after I changed nameservers.”
A customer cannot usually tell a certificate problem from a routing problem, since both can end in a scary browser warning. Panelbot starts from the domain and establishes the real picture.
How Panelbot looks into it
Panelbot runs read-only checks that need only the domain, so this runs automatically, and the order matters. It first establishes where the domain points, then, only if the domain actually reaches your server, it examines the certificate. That sequencing keeps it honest: there is no point diagnosing a certificate on a domain whose traffic never arrives at your server in the first place.
In plain terms, it confirms:
- Whether the domain resolves at all, and if it does not, whether that points at the domain registration (an expired domain, for instance) or its nameservers rather than your server.
- Where the domain actually points, and whether that is your server or a different host.
- Whether the domain runs through a service like Cloudflare, in which case certificate and routing behaviour is usually configured on that service’s side, and Panelbot recognises that rather than mistaking it for a server problem.
- Whether HTTPS is valid for the domain: whether the certificate is present, expired, self-signed, missing its full trust chain, or issued for a name that does not match, and whether the secure port is answering at all.
None of this changes anything. It gives Panelbot the evidence to say precisely why the browser is complaining.
What it can fix, and what needs your approval
Many certificate faults have a clean, low-risk remedy: issue or renew a proper free certificate for the domain. When you have enabled action-taking for your account, Panelbot can offer to do exactly that for cases like an expired certificate, a self-signed placeholder, a missing trust chain, or a domain that resolves to your server but has no HTTPS set up yet. Where the domain’s DNS is authoritative on your server, Panelbot can also offer to correct a record that is pointing traffic at the wrong place.
Both kinds of change are presented for confirmation, never applied silently, and Panelbot only proposes a DNS edit when your server actually controls the domain’s DNS. Where action-taking is disabled, Panelbot still produces the whole diagnosis and the specific fix to apply, then steps back and leaves that change with you.
When a human takes over
Some SSL and DNS problems are outside what an automatic certificate reissue or record edit can settle, and Panelbot escalates rather than pretend otherwise. It brings in your team when, for example:
- The domain is managed at an outside provider, so the real fix lives in that provider’s console. Panelbot names where the change belongs.
- Neither the secure nor the plain address answers, which is a down web service or a firewall issue, not a certificate one, and no certificate can fix it.
- A certificate is installed but the wrong one is still being served, which points to a deeper vhost or binding problem that a reissue will not correct.
- The symptoms trace back to a proxy or external SSL setting rather than anything on your server.
Each time it escalates, the customer is told that a technician on your team has been brought in, and your staff receive the findings Panelbot has already gathered. The everyday certificate faults get resolved in chat. Anything managed off your server gets a clear pointer to where the fix really lives, rather than a change Panelbot has no business making.
See it in action
Real conversation flows through the widget, on a sample account under the fictional Vornalis Hosting brand. Nothing loads until you press play.
All 28 scenarios are in the video demo library.
Related guides
- Websites down or showing errors when the domain resolves but the site itself is failing.
- Email deliverability and sending for the DNS records behind email.
- When a human takes over for how escalation reaches your team.
- Safety and permissions for how ownership and approvals gate DNS changes.