CAA_ISSUANCE_DENIED

error

This domain's CAA policy forbids every certificate authority from issuing.

Something is wrong and mail or certificates are affected.

How we know

caa.test
Tree climbing and property semantics. deep.nested climbs two labels to the apex; sub publishes its own policy that must not be merged with the apex's; split has different CAs for issue and issuewild; critical carries an unknown property with the critical bit, which blocks issuance despite also naming a CA.