SSL certificate for domain but only allowed to provide a SSL certificate when the CAA is present [ Edited ]

[#1]

Hi,

We need to order a SSL certificate for domain e.g. selfcare-pre.onenet.onenet.de, when we do the request at the Certificate Authority (e.g. DigiCert) they will do a DNS query on this specific domain for the CAA record and are only allowed to provide a SSL certificate when the CAA record is present.

At this point only a CNAME record is present and what we need is that also a CAA record will be added to the domain (see highlighted entry).

;QUESTION

selfcare-pre.onenet.onenet.de. IN CAA

;ANSWER

selfcare-pre.onenet.onenet.de. 114 IN CNAME pdzmz27.x.incapdns.net.

selfcare-pre.onenet.onenet.de. 21599 IN CAA 128 issue "digicert.com"

may you advise us here ?

Regards and Thanks

[#2]

any ideas here ?