0

CAA Error

I am getting the error "Domain is rejected due to CAA forbids issuance" from "/acme/new-order".

On my first try, i indeed had a wrong caa record. I did multiple tries after that with both, or one of the entries below. Before doing a retry, i waited at least double the ttl:

domain.example.               900     IN      CAA     0 issue "buypass.com"
domain.example.               900     IN      CAA     0 issue "buypass.no"

Also, i did retries over multiple days. Are the caa records maybe cached for a long time or can this error also have a different cause?

(I also always verified that the caa entries are indeed there by using dig locally and by using online verification tools)

The account is registered on the buypass test ca.

1reply Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
    • mkonofficial rep
    • QA
    • mkon
    • 17 hrs agoMon. April 7, 2025 - 12:00 pm
    • Reported - view

    Hi. The caa setup looks correct, but hard to check without the domain/tld. Most likely we can`t verify this fully, and stop the verification process of the domain.

    Like
Like Follow
  • 17 hrs agoMon. April 7, 2025 - 12:00 pmLast active
  • 1Replies
  • 22Views
  • 2 Following

Buypass Official Community

This is the official community of Buypass.  A Root CA located in Norway.

Sign-up using free email domains have been blocked due to increased spam. https://community.forumbee.com/t/63zsyt/blocked-email-domains

new reply
ViewNext unreadn/x
Latest reply