Skip to content
Back

SSL Certificate Failure - Using Appwrite DNS

  • 0
  • Web
  • Cloud
Hex Echerie
11 May, 2026, 23:51

When we attempt to apply our custom domain to our appwrite site, we consistently receive the following error.

[23:44:49] Processing SSL certificate issuance. [23:44:50] SSL certificate is being issued. This usually takes a few minutes — no action needed on your end. We'll periodically check and update the status. [23:45:43] Found conflicting CAA record(s). Expected certainly.com [23:45:43] SSL certificate issuance failed.

Looking at the .txt DNS export we can see the following:

; Zone file for periodentalimplants.ca ; Generated on 2026-05-11 23:32:20 $ORIGIN periodentalimplants.ca. $TTL 300 ; SOA Record @ 300 IN SOA ns1.appwrite.zone. team.appwrite.io. ( 0 ; serial 3600 ; refresh 600 ; retry 86400 ; expire 300 ) ; minimum ; NS Records @ 3600 IN NS ns1.appwrite.zone. @ 3600 IN NS ns2.appwrite.zone. ; A Records @ 3600 IN A a.a.a.a ; AAAA Records @ 3600 IN AAAA b🅱️🅱️b:b ; CNAME Records

  • 3600 IN CNAME appwrite.network.

; CAA Records @ 3600 IN CAA 0 issue "certainly.com"

And so the CAA record above is already default by Appwrite. We did not add an additional CAA record to avoid any problems.

I can see this type of issue has occured before for other users, but cannot find the exact solution.

Thanks

TL;DR
Developers are receiving SSL certificate issuance failure when applying custom domain on Appwrite site due to conflicting CAA records. The CAA record "issue" value should be changed from "certainly.com" to the domain specified by Appwrite.
Reply

Reply to this thread by joining our Discord

Reply on Discord

Need support?

Join our Discord

Get community support by joining our Discord server.

Join Discord

Get premium support

Join Appwrite Pro and get email support from our team.

Learn more