02-03-2021 03:50 AM - edited 02-19-2021 06:50 AM
We need to order a SSL certificate for domain e.g. selfcare-pre.onenet.onenet.de, when we do the request at the Certificate Authority (e.g. DigiCert) they will do a DNS query on this specific domain for the CAA record and are only allowed to provide a SSL certificate when the CAA record is present.
At this point only a CNAME record is present and what we need is that also a CAA record will be added to the domain (see highlighted entry).
selfcare-pre.onenet.onenet.de. IN CAA
selfcare-pre.onenet.onenet.de. 114 IN CNAME pdzmz27.x.incapdns.net.
selfcare-pre.onenet.onenet.de. 21599 IN CAA 128 issue "digicert.com"
may you advise us here ?
Regards and Thanks