Cloudflare Developers•10mo ago

Unable to add a custom domain

I'm trying to add a custom domain for my Pages project but it says inactive even though my CNAME record has propagated. I checked the network tab and I see an error that says -

SSL Validation encountered the following errors: CAA records block issuance. Please remove all CAA records or add records for this authority (pki.goog)

SSL Validation encountered the following errors: CAA records block issuance. Please remove all CAA records or add records for this authority (pki.goog)

I'm assuming that this is because my domain registrar (Vercel) has added a default CAA record on my domain which is automatically applied to all subdomains. The posts that I found said that I need to add another CAA record on my domain but I don't know what value I need to provide for the CAA record. Has anyone faced this issue before? If yes, please let me know how you fixed it! 🙂

3 Replies

Sanket NaikOP•10mo ago

Update: I was able to resolve the issue! I just had to add another CAA record on Vercel. Here's what I added -

Name - @
Type - CAA
Value - 0 issue "pki.goog"
TTL - 60

Name - @
Type - CAA
Value - 0 issue "pki.goog"
TTL - 60

Erisa•10mo ago

Yeah that's the one, glad you worked it out. The error message is supposed to tell you which one to add: "Please remove all CAA records or add records for this authority (pki.goog)" and its just a simple CAA issue record on the domain in question

Sanket NaikOP•10mo ago

Yup! I wasn't sure what the exact value was supposed to be but I was able to figure it out after messing around for a bit

Gaming

Programming

Unable to add a custom domain