How to verify Hostinger domains for ZeroSSL certificate using DNS(CNAME)?

ZeroSSL is a free ssl certificate provider. I had follow all the instructions on their official website to configure my hostinger domain, but it’s not enough. At the domain verification step, it declared that Invalid CAA Records eventhough my CNAME record was configured correctly. Seemingly, Hostinger CCA’s default value is missing something.

The solution is that you need to check the CCA section belonging to DNS Zone. It’s a must to have following yellow records in your CAA list.

If you dont have those records, you need to add it manually one by one. Although, you submit new CAA records, it could take up to 30 minutes for verification.

|------+---------------------------+-------|
| name | content                   |   TTL |
|------+---------------------------+-------|
| @    | 0 issue "sectigo.com"     | 14400 |
| @    | 0 issuewild "sectigo.com" | 14400 |
|------+---------------------------+-------|

Reference: https://help.zerossl.com/hc/en-us/articles/360015629499-Verification-error-Invalid-CAA-Records