A working website does not confirm that DNS is complete
DNS connects a domain to several independent services. A nameserver move can leave the website working while breaking business email or a verification record. SSL is the familiar label for certificates used with modern TLS encryption. We review routing, certificate renewal and mail dependencies together; no fixed propagation time or zero-downtime migration is guaranteed.
Change DNS with its dependencies intact
A domain can serve websites, email and verification records at once. Inventory the zone and authoritative provider before changing records. Certificate validity, hostname coverage, origin configuration and renewal are separate checks.
- Identify registrar, DNS authority and approver.
- Record current values and dependencies.
- Check hostnames, website and mail after changes.
- Document renewal ownership and cache limitations.
Identify the DNS or certificate failure
Send the affected hostname and exact warning. Do not delete unfamiliar records or repeatedly switch nameservers during diagnosis. Keep rollback values, recognizing that caches delay reversal. Renewals and supplier charges remain separate.
| Symptom | Check | Limit |
|---|---|---|
| Hostname fails | Authoritative answer and destination | Application may still fail |
| Certificate warning | Name, expiry and chain | Does not validate redirects |
| Mail stopped | MX and sender records | Does not migrate messages |
Example: move the website while preserving email
A website moves while email stays with its provider. The record identifies changed web records, preserved mail records and test results for both paths. This is an illustrative scenario, not a customer case or a promised result.