Every domain on your account gets a free certificate that is issued and renewed automatically. When a browser still shows a warning, it is almost always one of four things.
1. The domain does not point at us yet
Certificates are issued only after the domain resolves to your HostLift service. Check your DNS records first; issuance normally completes within fifteen minutes of DNS being correct.
2. Mixed content
The page loads over HTTPS but pulls an image, script or stylesheet over plain HTTP. The padlock disappears and browsers block the resource. Open the browser console, find the HTTP URLs and update them to HTTPS.
3. A CAA record is blocking issuance
If your DNS zone has a CAA record naming a different certificate authority, issuance will fail. Either remove the record or add our authority to it.
4. www and root are not both covered
Make sure both the root domain and the www hostname resolve to your service before requesting issuance, so both end up on the certificate.