I am trying to add ssl certificates for a secure connection https for the domain and subdomains, but the problem I get is the following:

DNS problem: SERVFAIL looking up CAA for DOMAIN DNS problem: SERVFAIL looking up CAA for SUBDOMAIN.

Finding out I found that I have to add a new CAA record so that it works for me, but I do not know how to add it. I currently use powerdns and administer it with poweradmin.

This I must do to fix the previous error:

Domain name: DOMAIN Record Type: CAA Value: 0 issuewild "letsencrypt.org"

Basically I have to do this but I do not know how to enter it.

Should I add?

Type: CAA
Content: issuewild "letsencrypt.org"
Priority: 0
TTL: 86400

PowerAdmin Zone IMAGE

PD: For the console does not work, pdnsutil does not work this command does not find it, impossible to add it manually.


The quick and short answer is you add your records as:

Name            Type          Content
[[:blank:]]     CAA           0 issue "letsencrypt.org"
*               CAA           0 issue "letsencrypt.org"

Screen dump caa record for powerdns and poweradmin

A nice little CAA build helper can be found here: https://sslmate.com/caa/

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.