-
-
Notifications
You must be signed in to change notification settings - Fork 5.4k
Description
I'm trying to issue a new cert with them but get the following error:
/root/.acme.sh/acme.sh --issue -d poc.fast.za.net --post-hook "/root/restart-after-cert-update.sh" --server ssl.com --force --staging --test --dns dns_miab --dnssleep 0
[Thu Dec 4 16:36:38 SAST 2025] Using CA: https://acme.ssl.com/sslcom-dv-ecc
[Thu Dec 4 16:36:39 SAST 2025] Single domain='poc.fast.za.net'
[Thu Dec 4 16:36:43 SAST 2025] Getting webroot for domain='poc.fast.za.net'
[Thu Dec 4 16:36:43 SAST 2025] Adding TXT value: Gj67Lqk5d4pirINAMwFZgbUy3IK8HdPD-Fk4B4UOQVg for domain: _acme-challenge.poc.fast.za.net
[Thu Dec 4 16:36:46 SAST 2025] TXT record added successfully
[Thu Dec 4 16:36:46 SAST 2025] The TXT record has been successfully added.
[Thu Dec 4 16:36:46 SAST 2025] Sleeping for 0 seconds to wait for the the TXT records to take effect
[Thu Dec 4 16:36:47 SAST 2025] Verifying: poc.fast.za.net
[Thu Dec 4 16:36:50 SAST 2025] poc.fast.za.net: Challenge error: {"detail":"MPIC failed.. CAA record does not include ssl.com which is required to issue the certificate. If you need assistance, please contact support@ssl.com","type":"urn:ietf:params:acme:error:incorrectResponse"}
[Thu Dec 4 16:36:50 SAST 2025] Removing DNS records.
[Thu Dec 4 16:36:50 SAST 2025] Removing txt: Gj67Lqk5d4pirINAMwFZgbUy3IK8HdPD-Fk4B4UOQVg for domain: _acme-challenge.poc.fast.za.net
[Thu Dec 4 16:36:53 SAST 2025] TXT record removed successfully
[Thu Dec 4 16:36:53 SAST 2025] Successfully removed
[Thu Dec 4 16:36:53 SAST 2025] Please check log file for more details: /root/.acme.sh/acme.sh.log
[Thu Dec 4 16:36:53 SAST 2025] Running post hook: '/root/restart-after-cert-update.sh'
I contacted them via their webchat bot, which pointed out that CAA requirement for the domain, but that is present and replicated according to https://dnschecker.org/#CAA/poc.fast.za.net
The bot "Eva" referred me to a human, who doesn't seem to know about the service or what to do.
Anyone that has successfully done this?