- Unable to install Let's Encrypt extension:
DNS Problem: SERVFAIL looking up CAA for example.com
- External name server is specified in Domains > example.com > DNS Settings.
Plesk Onyx 17.0 or 17.5 does not support CAA. Since CAA is missing, the external server returns error.
- Determine the SOA server for the domain:
# dig SOA @22.214.171.124 example.com +short
ns1.exampleproviderserver.com. [email protected]. 17 900 600 86400 3600
- Contact the external name server owners to clarify why SERVFAIL error is returned. Normally, when a record like CAA is missing for domain, name servers return "no record" instead of SERVFAIL.
Note: CAA DNS records are supported in Plesk 17.8
Note: the issue may be temporary. Try to issue the certificate once again in an hour.