lb/Analyze Failed Caa Check

Analyze domains in “FAILED_CAA_CHECKING” or “FAILED_CAA_FORBIDDEN” state.

Product: Load balancing
Step Type: AUTOMATED STEP

Description

None

Failure Reason

The following domains are in FAILED_CAA_CHECKING or FAILED_CAA_FORBIDDEN state: {domains} for SSL certificate “{name}”. This indicates misconfigured CAA records. CAA records authorize specific Certificate Authorities to issue certificates for your domain.

Failure Remediation

Please ensure the CAA records are configured correctly and try again. See the documentation for instructions on configuring CAA records: https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa