SystemeScale
πŸ“– Help Pages Back to platform Support
Help Centerβ€ΊGeneral Settingsβ€ΊHow to resolve the CAA error when connecting your domain
βš™οΈ General Settings

How to resolve the CAA error when connecting your domain

πŸ“… Last updated: June 2026
⏱ 4 min read
βœ… All plans

This article explains how to fix the CAA error that can appear when connecting your root domain to SystemeScale.

What you will need:

  • A SystemeScale account
  • A domain name showing the CAA error
  • Access to your domain DNS settings through your registrar, hosting provider, or DNS manager

Step 1: Understand the CAA error

When trying to connect a root domain to your SystemeScale account, you may see an error message that says CAA error.

This means SystemeScale could not generate an SSL certificate for your domain. The issue is caused by your domain's DNS configuration, specifically the CAA records.

⚠️
The problem is in the DNS records
The domain connection cannot be completed until the correct CAA records are added to your DNS settings.

Step 2: Remove the domain from SystemeScale

Before editing your DNS records, remove the domain that is currently showing the CAA error.

1
Open Custom domains
Go to Settings > Custom domains in SystemeScale.
2
Remove the failed domain
Remove the domain name that is showing the CAA error.

Step 3: Add the required CAA records

Go to your domain's DNS settings through your registrar or hosting provider, then add the following 10 CAA records.

CAA issue records

  • issue "amazon.com"
  • issue "amazontrust.com"
  • issue "awstrust.com"
  • issue "amazonaws.com"
  • issue "SomeCA.com"

CAA issuewild records

  • issuewild "amazon.com"
  • issuewild "amazontrust.com"
  • issuewild "awstrust.com"
  • issuewild "amazonaws.com"
  • issuewild "SomeCA.com"
🧾
Example CAA record format
Name or Host: @ β€” this represents your root domain, such as example.com.
Type: CAA
Flag: 0
Tag: issue or issuewild
Value: "amazon.com"

For more information, refer to the AWS documentation on CAA records.

Step 4: Verify DNS propagation

After adding the records, verify that they have propagated correctly.

1
Open DNS Checker
Go to DNS Checker or your preferred DNS lookup tool.
2
Search your domain
Enter your domain name in the search field.
3
Select the CAA record type
Choose CAA as the record type and confirm that the records you added are visible.
⏳
Propagation can take time
DNS changes may not appear instantly. If the records do not show immediately, wait and check again before reconnecting the domain.

Step 5: Reconnect your domain

After the CAA records have propagated, reconnect your root domain to SystemeScale.

πŸ”—
Need the domain connection steps?
Follow the domain connection guide to reconnect your root domain after fixing the CAA records.
Read Domain Guide β†’

Step 6: Add CAA records in Cloudflare

If you use Cloudflare, the CAA record setup has specific tag labels.

1
Add an issue record
To add an issue record, set the Tag to Only allow specific hostnames.
2
Add an issuewild record
To add an issuewild record, set the Tag to Only allow wildcards.
βœ…
Use the same CAA values
Whether your DNS is managed in Cloudflare or another DNS provider, the required values remain the same: Amazon, Amazon Trust, AWS Trust, Amazon AWS, and SomeCA.
Was this article helpful?
Related articles
πŸ“„How to connect your domain to SystemeScaleβ†’πŸ“„How to connect your Cloudflare domain to SystemeScaleβ†’πŸ“„How to connect your Namecheap domain to SystemeScaleβ†’