AI support for SSL, domains, and DNS

How Panelbot diagnoses "site not secure" warnings, expired certificates, and domains that will not open by checking routing and HTTPS validity.

Updated

SSL, domains, and DNS

When a browser says “your connection is not private” or a domain simply will not open, customers panic, and understandably so, because to a visitor it looks like the whole business is gone. The cause is usually one of a few specific things: an expired or misconfigured certificate, a domain pointing at the wrong place, or nameservers managed somewhere else entirely. Panelbot works out which one it is from the outside in, then fixes what it safely can and points clearly at the rest.

What your customers report

These issues arrive in fairly consistent language:

  • “The browser says my site is not secure.”
  • “My SSL certificate expired.”
  • “I get a ‘your connection is not private’ warning.”
  • “There is a certificate name mismatch warning.”
  • “My domain does not open at all.”
  • “The domain shows the wrong website.”
  • “HTTPS does not work but the plain address does.”
  • “DNS is not updating after I changed nameservers.”

A customer cannot usually tell a certificate problem from a routing problem, since both can end in a scary browser warning. Panelbot starts from the domain and establishes the real picture.

How Panelbot looks into it

Panelbot runs read-only checks that need only the domain, so this runs automatically, and the order matters. It first establishes where the domain points, then, only if the domain actually reaches your server, it examines the certificate. That sequencing keeps it honest: there is no point diagnosing a certificate on a domain whose traffic never arrives at your server in the first place.

In plain terms, it confirms:

  • Whether the domain resolves at all, and if it does not, whether that points at the domain registration (an expired domain, for instance) or its nameservers rather than your server.
  • Where the domain actually points, and whether that is your server or a different host.
  • Whether the domain runs through a service like Cloudflare, in which case certificate and routing behaviour is usually configured on that service’s side, and Panelbot recognises that rather than mistaking it for a server problem.
  • Whether HTTPS is valid for the domain: whether the certificate is present, expired, self-signed, missing its full trust chain, or issued for a name that does not match, and whether the secure port is answering at all.

None of this changes anything. It gives Panelbot the evidence to say precisely why the browser is complaining.

What it can fix, and what needs your approval

Many certificate faults have a clean, low-risk remedy: issue or renew a proper free certificate for the domain. When you have enabled action-taking for your account, Panelbot can offer to do exactly that for cases like an expired certificate, a self-signed placeholder, a missing trust chain, or a domain that resolves to your server but has no HTTPS set up yet. Where the domain’s DNS is authoritative on your server, Panelbot can also offer to correct a record that is pointing traffic at the wrong place.

Both kinds of change are presented for confirmation, never applied silently, and Panelbot only proposes a DNS edit when your server actually controls the domain’s DNS. Where action-taking is disabled, Panelbot still produces the whole diagnosis and the specific fix to apply, then steps back and leaves that change with you.

When a human takes over

Some SSL and DNS problems are outside what an automatic certificate reissue or record edit can settle, and Panelbot escalates rather than pretend otherwise. It brings in your team when, for example:

  • The domain is managed at an outside provider, so the real fix lives in that provider’s console. Panelbot names where the change belongs.
  • Neither the secure nor the plain address answers, which is a down web service or a firewall issue, not a certificate one, and no certificate can fix it.
  • A certificate is installed but the wrong one is still being served, which points to a deeper vhost or binding problem that a reissue will not correct.
  • The symptoms trace back to a proxy or external SSL setting rather than anything on your server.

Each time it escalates, the customer is told that a technician on your team has been brought in, and your staff receive the findings Panelbot has already gathered. The everyday certificate faults get resolved in chat. Anything managed off your server gets a clear pointer to where the fix really lives, rather than a change Panelbot has no business making.

See it in action

Real conversation flows through the widget, on a sample account under the fictional Vornalis Hosting brand. Nothing loads until you press play.

0:57
Fix a broken padlock. A "Not secure" warning turns out to be an expired certificate; AutoSSL reissues it.
0:38
Add a TXT record. A Google verification record is added to the zone and confirmed.
1:04
Switch MX to Google Workspace. Mail routing is a destructive change, so Panelbot confirms before replacing the records, then verifies the new MX set.
0:41
Explain DNS propagation. "I changed nameservers and my site is gone." Panelbot checks the actual state and explains what is propagating and how long it takes.
0:50
Create a subdomain. app.panelbot-test.xyz is created with its document root ready to use.

All 28 scenarios are in the video demo library.