App Service Certificate deployment is failing

Question

I am trying to procure an app service certificate on the azure portal but it is getting failed. I am also not getting any detailed error. Please refer below and let me know how can I fix this:

And if the click on the 'Operation details' link in the screenshot then I get the following error

{
"status": "Failed",
"error": {
"code": "CertificateResellerWebService_CertificateValidationError",
"message": "The following validation errors were found",
"details": [
{
"message": "The following validation errors were found"
},
{
"code": "CertificateResellerWebService_CertificateValidationError"
},
{}
]
}
}

If I click on the 'Deployment failed. Click here for details' then I get this:

Answer 1

@Gaurav Kumar Thank you for reaching out to Microsoft Q&A. Apologize for the inconvenience caused on this. I am summarizing our discussion and sharing the below Answer.

Upon looking at the backend logs I see the certificate create operation failing with the below error.

"statusMessage": "{\"Code\":\"CertificateResellerWebService_CertificateValidationError\",\"Message\":\"The following validation errors were found\",\"Target\":null,\"Details\":[{\"Message\":\"The following validation errors were found\"},{\"Code\":\"CertificateResellerWebService_CertificateValidationError\"},{\"ErrorEntity\":[{\"code\":\"439\",\"message\":\"A DNS CAA record exists for domain(s) getb.ca## which forbids the issuance of this certificate\",\"path\":null}]}],\"Innererror\":null}",

The error reported to you is due the CAA records currently associated with your domain.

Please see the below recommendation from go daddy here. To resolve this issue, you must remove all CAA records from this domain as suggested in GoDaddy support page and attempt to create the certificate again.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

Answer 2

Hi ,

I am unable to buy SSL cert with autorenewal in azure portal while giving Domain name getting below error could you please help on this.