How to resolve the CAA error when connecting your domain

This page will teach you how to fix the CAA error while trying to integrate your custom domain root with systeme.io

What you'll need:

a systeme.io account
a domain name with the CAA error

When trying to integrate a domain root with your systeme.io account, you may get this error message "CAA error"

This means that the integration of your domain name cannot be carried out because systeme.io could not generate an SSL certificate. The problem lies in your DNS - CAA record.

There are three important steps you can take to fix this:

1. Remove the domain name integration that displays the CAA error from the custom domain name settings in your systeme.io account.

2. Add the following 10 CAA records at the DNS zone level of your hosting provider:

issue "amazon.com"

issue "amazontrust.com"

issue "awstrust.com"

issue "amazonaws.com"

issue "SomeCA.com"

issuewild "amazon.com"

issuewild "amazontrust.com"

issuewild "awstrust.com"

issuewild "amazonaws.com"

issuewild "SomeCA.com"

Example:

Domain: to have the domain name "example.com" only, you just have to put "@".

Tag: 0

Value: issue "amazon.com".

For more information, we invite you to check the following article: https://docs.aws.amazon.com/acm/latest/userguide/setup-caa.html

Once you have entered the 10 CAA records, you can check their propagation by going to DNS Checker and searching for your domain name, and choosing the DNS type "CAA"

3. Redo the integration of your domain name by following the steps in the article " How to integrate your domain root into systeme.io".

Important :

if your host is Cloudflare, to add a CAA record, please follow these steps :

To add "ISSUE" CAA record, select the tag "Only allow specific hostnames"

To add "ISSUEWILD" CAA record, select the tag "Only allow wildcards"