How do you get LetsEncrypt to work?

A client has pointed their domain to my server using an “A Record”.

However, when I try to run certbot to install an SSL certificate for them, I get the following error:

CAA record for prevents issuance

What do I tell them to do to fix the issue?

I have asked them to switch their domain to DNS-Only from Proxy - still doesn’t work.

I expect that adding a CAA record would help.


Never heard of CAA records before, what values should be added for the record?

Also, this is supposed to exist alongside the A Record right? Or not?

What values for the CAA record?

They’re right there in the page I linked to.

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.