Fix the unreadable CAA record on Cloudflare

Why it matters

A CAA record has a value that cannot be parsed, so a certificate authority may treat it as an error and refuse to issue or renew your certificates. A stray quote, space or missing value is enough.

Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.

The fix

1. Open DNS then Records, find the CAA record and edit it. Choose the tag from the dropdown and enter only the CA's domain in the value field, without quotes.
2. Run a certificate renewal test afterwards.

Read the documentation ↗(opens in a new tab)

Related

• Reported by the CAA records check
• Add a CAA record that names your certificate authority
• Add an issue tag to your CAA record
• Fix the misspelled CAA tag