Articles on: FAQ's

Why is the validation record not updating in ActiveDEMAND? CAA (Certificate Authority Authorisation)

Why is the validation record not updating in ActiveDEMAND? CAA (Certificate Authority Authorisation)



Have you set a validation record in your DNS but are not seeing it update in ActiveDEMAND after 24 hours?

Your domain may have a CAA record that prevents an SSL certificate from being issued.


What is a CAA?



CAA (Certificate Authority Authorization) is a DNS record that allows the domain owner to specify which certificate authorities are allowed to issue an SSL certificate for your domain.


Why is this Important?



Adding a CAA record to your domain gives you an extra level of security. It prevents unauthorised or fraudulent certificates to be issued for your domain. We recommend all domains are setup with a CAA record.


What you need to do



When you are setting up SSL in ActiveDEMAND, you will need to add AWS to your CAA trusted list. To do this, add the following to your record:

0 issuewild "amazon.com"
0 issuewild "amazontrust.com"
0 issuewild "awstrust.com"
0 issuewild "amazonaws.com"

Updated on: 09/02/2023

Was this article helpful?

Share your feedback

Cancel

Thank you!