CAA record for prevents issuance

Help
#1

I was using an SSL from another site and I have cancelled the subscription because the certificated expired. Now when I am trying to renew my certificate using cerbot for generating an SSL from Let's Encrypt. I am getting the following error

  • The following errors were reported by the server:

Domain: bhunaksha.uk.gov.in
Type: caa
Detail: CAA record for bhunaksha.uk.gov.in prevents issuance

My domain is bhunaksha.uk.gov.in

2 Likes
#2

The administrator of uk.gov.in has configured that domain to only allow Sectigo to issue certificates for it:

uk.gov.in.              3600    IN      CAA     0 issue "sectigo.com"

You have two choices:

  • Setup your own CAA record at bhunaksha.uk.gov.in which permits letsencrypt.org, or
  • Ask the administrator of uk.gov.in to expand or remove the existing CAA record
4 Likes