MWA Live - Audits

How to resolve the CAA record blocking certificate issuance?

CAA is a DNS record type. In the DNS zone of your domain, it determines which certification authority can issue a certificate for it. It is used to prevent a fake certificate from being issued by an authority other than the one you have chosen. However, this tool often prevents our customers from issuing a certificate from LetsEncrypt. Please see the steps below on how to resolve this. In the domain’s DNS zone file, add a CAA entry allowing the LetsEncrypt to install SSL for your selected white label domain. Here is an example for Godaddy DNS: Type Select CAA Name: Enter the subdomain that you created for My Web Audit. Flags: Enter 0 Tag: Type issue (This specifies, only allow LetsEncrypt.org to generate SSL for this specific subdomain) Value: Enter letsencrypt.org TTL: Custom (600) If you have any questions, please reach out to us at support@mywebaudit.com.
Was this article helpful?

Still puzzling over something?

The agent has read this article — and everything around it. Ask a follow-up and it answers in seconds.