How to add a CAA record
A CAA record limits which certificate authorities may issue an HTTPS certificate for your domain. Without it, any certificate authority may issue one.
The example names Let's Encrypt. List the authority you actually use (your host's or Cloudflare's, for example), or your next certificate renewal will fail.
How to fix it
DNS registrar
Where: your DNS provider — add a CAA record on the root domain
Type: CAA Name: @ Flags: 0 Tag: issue Value: "letsencrypt.org"
CAA restricts which certificate authorities may issue TLS certs for your domain (list the CA you actually use).
How to confirm: Verify with an online CAA lookup.
Not sure your site needs this fix? A scan checks this and dozens of other things and shows what yours is missing.
Scan your site free