Troubleshooting
CNAMEs
If you are having trouble getting your CNAMEs to work, it might mean that Cloudflare (our DNS provider) cannot validate your SSL certificate. Try adding CAA records to your DNS and re-verifying in MGR. More on this here: https://developers.cloudflare.com/ssl/edge-certificates/caa-records/
A Certificate Authority Authorization (CAA) DNS record specifies which certificate authorities (CAs) are allowed to issue certificates for a domain. This record reduces the chance of unauthorized certificate issuance and promotes standardization across your organization.
Try adding the following CAA records to your DNS:
| Name | Type | Flag | Tag | Value | TTL |
|---|---|---|---|---|---|
@ | CAA | 0 | issue | "pki.goog; cansignhttpexchanges=yes" | 60 |
@ | CAA | 0 | issuewild | "pki.goog; cansignhttpexchanges=yes" | 60 |
Last updated