A while ago, we added the CAA protection mechanism to our DNS, and more recently, we enhanced the LetsEncrypt-related CAA record with account restriction. Now is already the second time that I ran into renewal issues because of this - as in: LE (correctly) refused a renewal because I forgot that no…

Must have more CAA records or fewer accounts

Bruce5051 March 4, 2023, 9:57pm 4

Oh, @hagman I just noticed, picking just one for example,

You are referring to ACME v1 in the accounturi; ACME v1 is End of Life (EOL)

Please move forward to ACME v2

1 Like

Topic		Replies	Views
The future of CAA Feature Requests	6	1220	June 22, 2018
CAA Record time-to-live? Help	6	646	February 23, 2023
Multiple CAA Records -> Not working Help	3	587	July 30, 2020
CAA record issue while renewing Help	7	910	May 20, 2020
What CAA records should use for Let's Encrypt? Help	8	27773	April 15, 2020