FAQ: Domain and custom domains
Enter one hostname in Settings → General (prefer www), add the CNAME and TXT records shown, wait a few minutes after TXT for HTTPS, then Verify until Connected—apex and www are different hosts; redirect the one you are not using. Without a custom domain, visitors stay on yoursub.artinstack.com.
Frequently asked questions about custom domains. For the full setup walkthrough, see Connect a custom domain.
Why is my custom domain showing a “403 Forbidden”, “525”, or “Not Authorized” error?
Usually DNS is not pointing at ArtInStack yet, the hostname in the dashboard does not exactly match DNS, or SSL is still validating.
| Check | Action |
|---|---|
| Domain spelling | Settings → General → Custom Domain must match the host at your DNS provider (www.example.com and example.com are different) |
| DNS records | Copy every CNAME and TXT from the dashboard—especially _acme-challenge TXT values |
| SSL timing | After TXT is correct, allow a few minutes before relying on HTTPS |
| Propagation | CNAME can take longer worldwide (often minutes; up to 24–48 hours) |
| Plan | Custom domain must appear under Included Features on Subscription |
A 525 / SSL handshake error on www while apex works (or the reverse) usually means only one hostname was connected—add a redirect for the other, or connect the hostname you actually typed in the dashboard.
Can I use an apex domain, or do I have to use a www subdomain?
You can use either as the one hostname you enter in Settings → General. Prefer www when your DNS host supports a normal CNAME.
| Host style | Notes |
|---|---|
www.example.com | Recommended; CNAME to the dashboard target (production: service.artinstack.com) |
example.com (apex) | Often needs ALIAS/ANAME or flattening—not a plain CNAME on every registrar |
After the primary host is Connected, set a 301 redirect from the unused host to the primary. Only the hostname you Set domain for gets ArtInStack HTTPS automatically.
After verification, visitors who open yoursub.artinstack.com are typically redirected to your custom domain.
What does SSL pending_validation mean?
Routing: active · SSL: pending_validation means the edge sees your hostname setup path but is still waiting on certificate validation (the TXT / _acme-challenge records). Keep those TXT records in place, wait a few minutes, then Verify. Ordinary HTTPS for visitors is not reliable until SSL is active and status is Connected.
How long does it take for a newly mapped domain to go live?
| Address | Typical timing |
|---|---|
Platform subdomain (yoursub.artinstack.com) | Available soon after signup when pages are published |
| Custom domain HTTPS | Often a few minutes after TXT is correct; full CNAME propagation can take longer |
Publishing pages is separate from DNS—a domain can resolve while individual pages are still draft. Drafts are not public without a valid preview link.
Do preview links on my custom domain show drafts to everyone?
No. Dashboard preview may open https://your-custom-domain/?preview=true&… on the live hostname, but only signed preview access (or an accepted owner session) sees drafts. Everyone else sees published content—or Access Denied on a preview-only URL.
My subdomain works but my custom domain does not—what should I check?
- Confirm status Connected in Settings → General.
- Open your domain in a private/incognito window.
- Compare registrar DNS with the dashboard—especially www vs apex and all TXT values.
- Follow Connect a custom domain.