CAA_ISSUER_NOT_AUTHORIZED

error

The certificate authority we use is not listed in this domain's CAA policy, so it cannot issue a certificate.

Something is wrong and mail or certificates are affected.

How we know

caa.test
Tree climbing and property semantics. deep.nested climbs two labels to the apex; sub publishes its own policy that must not be merged with the apex's; split has different CAs for issue and issuewild; critical carries an unknown property with the critical bit, which blocks issuance despite also naming a CA.