CAA record for gpmc.ph prevents issuance but CAA record seems ok

We are facing CAA record error for residents.gpmc.ph

challenge error: (problem (type \"urn:ietf:params:acme:error:caa\") (instance \"\") (id <nil>) (title \"\"): (detail \"CAA record for gpmc.ph prevents issuance\")

However CAA record looks good to me

āžœ  ~ dig CAA gpmc.ph +short
0 issue "letsencrypt.org"
0 issue "pki.google.com"

Let's debug test result is Ok.

Would you give us some guidance how we can debug from here?

We are using Go SDK to issue certificate.

gopkg.in/hlandau/acmeapi.v2 v2.0.2
2 Likes

We had retried certificate issue and now it works.
I guess this might be temporary DNS propagation issue.

1 Like