Unverified CNAME record – missing certificate to use HTTPS

After correctly configuring the DNS records for your sending domain, the following message may appear for the CNAME record in your Boldem account (Settings/Domains/Domain details/Domain settings):

The CNAME record is configured correctly. However, to enable full functionality you still need to configure a certificate for HTTPS.

CNAME (domain router)

As a result, the domain remains inactive in Boldem and campaigns cannot be sent.

What does this message mean?

This message appears when the domain contains a CAA (Certification Authority Authorization) record. A CAA record allows domain owners or administrators to specify which certificate authorities are allowed to issue SSL certificates for the domain.

Boldem uses a Let’s Encrypt certificate, so you need to add a new record for the domain with this identifier. Leave any existing CAA records unchanged.

How do I add a CAA record for Let’s Encrypt?

Open your domain’s management panel and add a new DNS record with the following values:

  • Type: CAA
  • Name: (leave blank)
  • Flag: 0
  • Tag: issue
  • Value: “letsencrypt.org”

Example of correctly entered final values for provider Vedos.cz:

Final values on vedos.cz

Certificate issuance is attempted automatically with each periodic domain verification in Boldem — that is, every day — or when you click the Check settings button in the domain details.

Another option, if you don’t want to enable Let’s Encrypt for your domain, is to supply your own certificate. In that case, contact our customer support, which will generate a CSR (Certificate Signing Request, i.e. a certificate signing request) on our server and send it to you. Based on that request you can then issue, generate, or purchase a certificate and return it to our support team. We will install the prepared certificate on our server and assign it to the appropriate domain router so your sending domain can be successfully verified.

Random picture from Picsum Klára Šumberová
8. September 2025