How to resolve the CAA error when connecting your domain

Custom domains

Seeing a CAA error when connecting your domain? It means an SSL certificate (the padlock) could not be created for your domain, because of a CAA record in your DNS.

How to fix it

  1. In SleepPRO™, go to Settings, then Custom domains, and remove the domain showing the error.
  2. At your domain provider, add these 8 CAA records:
  • issue "amazon.com"
  • issue "amazontrust.com"
  • issue "awstrust.com"
  • issue "amazonaws.com"
  • issuewild "amazon.com"
  • issuewild "amazontrust.com"
  • issuewild "awstrust.com"
  • issuewild "amazonaws.com"

Use your root domain, such as yoursleepbusiness.com, as the name. AWS's own documentation on CAA records gives more detail.

  1. Check the records at dnschecker.org: search your domain and choose CAA as the record type.
  2. Connect your domain again. See How to connect your domain to SleepPRO™.
ScreenshotThe CAA records at a domain provider
On Cloudflare, set the tag to Only allow specific hostnames for issue records, and to Only allow wildcards for issuewild records.
Still stuck? We are here for you.

SleepPRO™ support is available 24/7 and usually replies within 12 hours, often sooner.

Send us an email