apple pay domain verification failed: stripe apple-pay certificate not renewed

TL;DR

Apple Pay requires your domain to be verified with Apple, and Stripe manages this with a certificate that expires: if it was not renewed, domain verification fails and Apple Pay disappears from checkout. In the Stripe dashboard, open the Apple Pay settings, renew the domain verification (Stripe re-registers the domain with Apple), and confirm the verification file is served. Then re-test Apple Pay on the domain.

apple pay domain verification failed: stripe apple-pay certificate not renewed

Use this when

• Apple Pay domain verification fails and the method vanishes at checkout
• You use Stripe for Apple Pay on the web
• Verification worked before and expired

Not for this skill when

• Apple Pay fails on native iOS apps (that uses a merchant id, not domain verification)
• The failure is a Stripe API authentication error
• You are debugging Google Pay

Steps

1. In the Stripe dashboard, open Settings then Payments then Apple Pay and check the domain verification status. Expected: You confirm verification lapsed.

2. Renew or re-add the domain verification for the affected domain. Expected: Stripe registers the domain with Apple again.

3. Verify the domain serves the Apple verification file at the well-known path. Expected: Apple can fetch the file successfully.

4. Wait for propagation, then reload the checkout and check that Apple Pay is offered. Expected: Apple Pay appears for eligible devices.

5. Add a calendar reminder before the next expiry so renewal is not missed again. Expected: The lapse cannot recur silently.

Tool compatibility

Stripe Apple Pay domain verification; Apple Pay on the web. The certificate lifecycle is managed between Stripe and Apple.

Variant phrasings

stripe apple pay domain verification expired

The expiry cause stated directly.

apple pay not showing stripe checkout

The shopper-visible symptom.

renew apple pay domain verification stripe

The fix action as a search phrase.

Why it happens

Apple only allows Apple Pay on the web for domains the merchant has proven it controls, via a verification file Apple fetches from the domain. Stripe automates this registration, but the underlying certificate has a finite lifetime. When it expires without renewal, Apple stops trusting the domain and the payment sheet never offers Apple Pay. Nothing in your checkout code changed; the trust anchor lapsed. Renewal re-establishes the chain.

Edge cases / pitfalls

• Each subdomain needs its own verification; renewing the apex domain does not cover new subdomains.
• CDN or redirect rules can block Apple's fetch of the verification file; check the file is served with a 200.
• Test on a real Apple device; simulators and non-Apple browsers will not show Apple Pay regardless of verification.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_aezJSwV3VvJGxQ8uG66c7g