I had some issues trying to get the certificates with the WWW domain not being recognized, but eventulally got the command to issue them to work. However now when I try to dry run the renewal I get error either with the WWW domain or both. My domain is: advocatesays.click and www.advocatesays.click …

I don't have much experience in this area. Do I just set it up as Type: CAA, Name: @, Content: letsencrypt.org ?

No. Read here for more info and how to generate your record: [image] Certificate Authority Authorization (CAA) - Let's Encrypt CAA is a type of DNS record that allows site owners to specify which Certificate Authorities (CAs) are allowed to issue certificates containing their domain n…

Ok, following the guide you linked the first step that I must do when encountering SERVFAIL is run my domain names through https://dnsviz.net/ . I seem to be getting warnings about DNSSEC specification prohibiting signing with DS records that use digest algorithm 1 (SHA-1) and that DNSSEC specificati…

[image] genesis-root: Not really sure how to follow those warnings. I don't know if that's an actual issue, and you might not have any control about it. [image] genesis-root: Based on some examples in the article do I need to put my two domain names as Name for CAA records? just put t…

Ok, I tried putting in Type: CAA, Name: advocatesays.click and Content: "0 issue letsencrypt.org " (same as example value in that field in the UI) and I got a warning back "failed to add record". Is there some logical error with the record I am trying to add or should I contact the njalla support?

You should probably read here first, and then contact njalla. [image] DNS problem: SERVFAIL looking up CAA (solved) Help H…

If you're not able to add the CAA record due to some error in the DNS zone editor then yes, you should consult with your DNS service provider on how to actually add the CAA record. Nothing we can help you with in that regard. As for your intermittend SERVFAILs: currently Unboundtest does not return…

This is the response I got from the support: The domain resolves, SSL you do on the server side and letsencrypt.org have all the documentation.

What did you ask specifically? Usually to get a correct, sensible answer, the question needs to be correct too.

If you're not able to add the CAA record due to some error in the DNS zone editor then yes, you should consult with your DNS service provider on how to actually add the CAA record. Well, I was asking to confirm if it was that or if what I was inputting doesn't make sense. And also the fact the …

Intermittent SERVFAIL looking up CAA

Help

9peppe February 1, 2022, 10:47am 8

You should probably read here first, and then contact njalla.

Topic		Replies	Views
Certbot renew failing to renew my certificates - SERVFAIL looking up A for my site Help	46	2758	October 2, 2020
DNS problem: SERVFAIL looking up CAA Help	39	3779	April 29, 2022
CAA servfail with register.com Help	28	2169	January 3, 2023
Intermittent CAA SERVFAILs Across Two DNS Providers Help	25	1924	August 16, 2021
Netregistry DNS CAA Problem - Renewal Doesn't Work Swapping to Different Registar Fixed Issue Help	24	6846	April 27, 2017

Intermittent SERVFAIL looking up CAA

Related topics