Why is the validation record not updating in ActiveDEMAND? CAA (Certificate Authority Authorisation)

Have you set a validation record in your DNS but are not seeing it update in ActiveDEMAND after 24 hours?

Your domain may have a CAA record that prevents an SSL certificate from being issued.

What is a CAA?

CAA (Certificate Authority Authorization) is a DNS record that allows the domain owner to specify which certificate authorities are allowed to issue an SSL certificate for your domain.

Why is this Important?

Adding a CAA record to your domain gives you an extra level of security. It prevents unauthorised or fraudulent certificates to be issued for your domain. We recommend all domains are setup with a CAA record.

What you need to do

When you are setting up SSL in ActiveDEMAND, you will need to add AWS to your CAA trusted list. To do this, add the following to your record:

0 issuewild "amazon.com"
0 issuewild "amazontrust.com"
0 issuewild "awstrust.com"
0 issuewild "amazonaws.com"

Updated on: 09/02/2023