Adding DNS CAA record for your domain alias

When you're adding an alias for your Helprace portal you may get an error saying "Issuing a SSL certificate for this domain alias failed". This guide should help you resolve this.

SSL is enabled at all times in Helprace for the greater security. When you're adding your own domain alias we're generating an SSL certificate for it using Let's Encrypt service and apply it instantly. In most cases is works smoothly. However, if you received an error when adding an alias, this indicates that your domain's DNS records do not authorize Let's Encrypt to generate SSL certificates for it.

The solution is simple - you need to add a DNS CAA record in your domain control panel:

help.acme.com.    IN      CAA     0       issue "letsencrypt.org"

where help.acme.com must be replaced with your domain alias for your Helprace portal.

What is a CAA record?

A Certification Authority Authorization (CAA) record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

The purpose of the CAA record is to allow domain owners to declare which certificate authorities are allowed to issue a certificate for a domain.