Certificate Manager, CAA check not passing while it's properly configured

Question

Hello,

I need a certificate for a domain that I'll keep secret sorry, but let's say

*.salon.foobar.fr

When I try to generate the certificate with CM I've got this error:

![Enter image description here](/media/postImages/original/IMIQEQEvgKRze2zCt6CgSQQA)

When I check the CAA record for: test.salon.foobar.fr on this website (again remember, fake domain), https://caatest.co.uk/ I have this result:

![Enter image description here](/media/postImages/original/IMefjzY3BnRcOZ65WDFiAXbQ)

So everything looks good and AWS should be able to validate the domain.
What's wrong ?

rePost-User-0240761 · Answer

I deleted all the CAA records from my DNS and it stills indicate the same problem. No CAA but CAA check failed ....

Sedat Salman · Answer

DNS changes can take some time to propagate. It might take up to 48 hours for the changes to be visible everywhere. If you've recently added or modified your CAA records, you might need to wait a bit before AWS can validate the domain. Use a DNS checking tool to make sure there are no errors with your DNS configuration. There are many free tools available online, such as Google's public DNS checker. Remember that CAA records apply to subdomains as well. If you're trying to issue a certificate for a subdomain and the parent domain has a CAA record, the subdomain will inherit that record unless it has its own CAA record. Make sure your CAA records are correctly configured for both the parent domain and any subdomains.

Certificate Manager, CAA check not passing while it's properly configured

Relevant content