Invalid SSL certificate on alis domain - Acme::Client::Error::Caa

Support
1

My site name is plurstation.netlify.app.

I have added two external registered domains and configured their nameservers correctly, pointing to Netlify nameservers.

My primary domain is plurstation.com and it has SSL enabled.
But the alias domain plurstation.com.br has an invalid SSL certificate.

This is the error message:

Acme::Client::Error::Caa: Error finalizing order :: Rechecking CAA for “plurstation.com” and 1 more identifiers failed. Refer to sub-problems for more information

From what I understood, both are Netlify DNS so they should have SSL certificates configured automatically.

image
image885×289 24.6 KB



PS: '-' below are just to remove links that are created automatically when posting here

plurstation.com- DNS records:

  • plurstation.com- 3600 IN CAA 0 issue amazon.com-

  • plurstation.com- 3600 IN CAA 0 issuewild amazon.com-

  • plurstation.com- 3600 IN CAA 0 issue letsencrypt.org-

  • plurstation.com- 3600 IN CAA 0 issuewild letsencrypt.org-

  • plurstation.com- 3600 IN NETLIFY plurstation.netlify.app

  • www.plurstation.com- 3600 IN NETLIFY plurstation.netlify.app

  • plurstation.com- 3600 IN NETLIFYv6 plurstation.netlify.app

  • www.plurstation.com- 3600 IN NETLIFYv6 plurstation.netlify.app

plurstation.com.br DNS records:

  • plurstation.com.br 3600 IN ALIAS apex-loadbalancer.netlify.com-

  • plurstation.com.br 3600 IN CAA 0 issue letsencrypt.org-

  • plurstation.com.br 3600 IN CAA 0 issuewild letsencrypt.org-

  • plurstation.com.br 3600 IN NETLIFY plurstation.netlify.app

  • www.plurstation.com.br 3600 IN NETLIFY plurstation.netlify.app

  • plurstation.com.br 3600 IN NETLIFYv6 plurstation.netlify.app

  • www.plurstation.com.br 3600 IN NETLIFYv6 plurstation.netlify.app

Redirection from the alias domain to the primary domain is working correctly but the SSL certificate is invalid. Do you have any ideas?

2

I added these records and now both certificates are valid.

The redirection from the alias to the primary is not working, but I’m fine with that.

plurstation.com- DNS records:

  • plurstation.com- 3600 IN CAA 0 issue letsencrypt.org-
  • plurstation.com- 3600 IN CAA 0 issuewild letsencrypt.org-

plurstation.com.br DNS records:

  • plurstation.com.br 3600 IN ALIAS apex-loadbalancer.netlify.com-
  • plurstation.com.br 3600 IN CAA 0 issue letsencrypt.org-
  • plurstation.com.br 3600 IN CAA 0 issuewild letsencrypt.org-
3

Alias is not supposed to redirect to primary automatically.

You’d have to use Netlify redirects for that if you want it to redirect.