I suggest you ...

Add CAA DNS Records

https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization#Mandatory_checking
Mandatory checking
Originally the implementation of CAA was voluntary: CAs could decide whether they would check for the records or not. However, in March 2017 the CA/Browser Forum voted in favor of a rule that will make CAA mandatory for all certificate authorities.[6] Starting September 2017 all certificate authorities have to implement CAA checking.

3 votes
Vote
Sign in
Check!
(thinking…)
Reset
or sign in with
  • facebook
  • google
    Password icon
    I agree to the terms of service
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Anonymous shared this idea  ·   ·  Admin →
    completed  ·  Ryan KekosAdminRyan Kekos (Admin, GearHost) responded  · 

    While it is mandatory for a CA to check for a CAA record if no record is found the CA still must issue the cert. Basically if the record exists it must follow that procedure otherwise if no record exists it can continue as intended. This has been completed.

    2 comments

    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      Submitting...

      Feedback and Knowledge Base