How to Complete Email SSL Verification
Use this recommended solution if you see the error "Your connection is not private" when clicking the "Unsubscribe link" or any other "Link" in an email sent through MSG91
Step 1: Log in to MSG91 Panel
Log in to your MSG91 account.
Navigate to Email Settings / Domain Settings (as applicable in your panel).
Locate the option for SSL Verification.

Step 2: Request SSL Verification
Click on Request SSL.
After requesting, a CNAME record value will be generated.

Step 3: Carefully Check the CNAME Value
The generated CNAME value may end with a dot (
.) as shown in the screenshot.
⚠️ Important Note:
Some DNS providers automatically remove the trailing dot (
.).Some DNS providers do not remove it, which may cause SSL validation to fail.
✅ To ensure successful validation, always remove the dot (.) at the end of the CNAME value before saving the DNS record.
Step 4: Add CNAME Record in DNS
Log in to your DNS provider panel.
Add a new CNAME record with the details provided by MSG91.
Ensure:
Host/Name is correct
Value does NOT end with a dot (
.)
Save the record.
Step 5: Validate SSL in MSG91
Return to the MSG91 panel.
Click on Validate after adding the DNS record.
Wait for a few seconds.
✅ Upon successful validation, a success popup will appear and the SSL setup will show a verified status.

Troubleshooting Tips
If validation fails:
Recheck the CNAME value for any trailing dot (
.)Ensure DNS propagation is complete (may take a few minutes)
Confirm the record type is CNAME, not TXT or A record
Additional troubleshooting steps:
If CAA records are not configured, you may proceed with the above SSL verification steps.
If CAA records are present and AWS is not authorized, SSL validation may fail.
In such cases, allow AWS in your CAA records by referring to the official guide:
https://docs.aws.amazon.com/acm/latest/userguide/troubleshooting-caa.html
If you still have queries, you can reach out to support@msg91.com