CAA record problem

Help
2
  1. This forum is primarily for Let's Encrypt support, not Google PKI support (though yeah, Certbot for some reason directs people here regardless of which CA one is using).
  2. It's going to be hard for anyone to help you without knowing the actual domain name. But it looks like the error says that your CAA record is not allowing pki.goog to issue. So you need to ensure that your CAA record actually includes all CAs that you want to issue for your domain (or remove it if you're fine with all CAs issuing for you). You might want to try out SSLMate's CAA Tool.
8 Likes