DNS problem: SERVFAIL looking up CAA ... but resolves to the right IP

Help
1

While trying to activate Let’s Encrypt for an hostname, we are getting the error below:

2017/07/27 02:25:42 http: TLS handshake error from 178.241.133.1:8255: [stats.coolcalc.com] failed to get certificate: acme: Error 400 - urn:acme:error:connecti
on - DNS problem: SERVFAIL looking up CAA for stats.coolcalc.com
Error Detail:
Validation for stats.coolcalc.com:443
Resolved to:
69.162.67.141
Used: 69.162.67.141

When searched this forum, I see that this error is expected if the DNS to the hostname is not resolved. Yet, the response above states that it resolves. And, I can’t see any issues when checked with http://intodns.com/coolcalc.com .

I would love to get your help on clarifying the reason behind the issue. Thanks so much,

2

http://dnsviz.net/d/stats.coolcalc.com/dnssec/

The DNS service being used by that domain has an assortment of problems, particularly with CAA.

The service needs to be fixed, or the domain needs to be moved to a different DNS provider.

1 Like
3

Thanks very much for the fast response and we’ll be checking the issue now.

4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.