Domain with active CAA record in DNS

Issuance Policy
5

@sca_le, it looks like there’s a bug in Boulder. Filed at

We are using a more restrictive interpretation of the Issuer Critical flag than was prescribed by

https://tools.ietf.org/html/rfc6844#section-3

Thanks for pointing this out.