Hostinger DNS

Failure Reason CAA Error

If you use Hostinger's DNS, you will likely not be able to add your custom domain using only the standard CNAME entry.

You must configure a Certification Authority Authorization (CAA) DNS record to specify that AWS Certificate Manager (ACM) is authorized to issue a certificate for your domain or subdomain. After validating your domain, ACM checks for the presence of CAA records to ensure it can issue a certificate for you.

Before adding the CNAME to authorize SSL issuance, configure the CAA below:

and then

Once done, configure the CNAME according to the instructions in your instance.

Update 08/31/2024

It is also necessary to point for AWS validation.

• Instructions:

  1. Access your domain's DNS records.

  2. Add a new record in the DNS settings by selecting CNAME as the record type.

  3. Return to the first window, copy the content of the "Record / Host" field.

  4. Paste the copied content into the "Record or Host" field of your DNS records.

  5. Go back to the first window and copy the content of the "Destination / Target" field.

  6. Paste the copied content into the "Destination or Target" field of your DNS records.

• Verification CNAME Record:

  • Record Type: CNAME

  • Record Name "Record / Host": A generated value appears (a unique alphanumeric code).

  • Value "Destination / Target": A specific generated value (also an alphanumeric code), pointing to an AWS domain for validation.

These instructions are to ensure the custom domain is validated correctly when configuring the CNAME record on the DNS server.