CAA record for prevents issuance

I was using an SSL from another site and I have cancelled the subscription because the certificated expired. Now when I am trying to renew my certificate using cerbot for generating an SSL from Let's Encrypt. I am getting the following error

  • The following errors were reported by the server:

Type: caa
Detail: CAA record for prevents issuance

My domain is


The administrator of has configured that domain to only allow Sectigo to issue certificates for it:              3600    IN      CAA     0 issue ""

You have two choices:

  • Setup your own CAA record at which permits, or
  • Ask the administrator of to expand or remove the existing CAA record

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.