Caa record preventing issuance of ssl cert

[OlgitH]

PLEASE help us help you by writing a good post!

Research that helps brands grow | The Nursery

This site is down because netlify can’t reissue the ssl cert. I am getting an error in netlify saying “caa record prevents issuance”

The domain administrator stated there was a caa record in place on the apex domain. This is for another service running on a subdomain, however he doesn’t want to remove it. Instead he changed the host in the caa record from @ to the name of the subdomain they use - but I am still seeing the caa record show up for the apex domain.

What do I need to do to allow netlify to reissue the ssl cert? Is there a way around this?

[dig]

@OlgitH

This site is down

The site is working fine for me. And it has an SSL certificate.

@OlgitH

Instead he changed the host in the caa record from @ to the name of the subdomain they use

This sounds ike a good idea.

@OlgitH

but I am still seeing the caa record show up for the apex domain.

DNS record propagation takes time.

@OlgitH

What do I need to do

Nothing. It’s working now!

[OlgitH]

Thanks. I eventually got him to remove the caa record and that it wouldn’t bring down the other site, and this fixed the problem.