Let's Encrypt/CA: CAA record for example.com prevents issuance

1003 Cloudflare Error 1003: Direct IP access not allowed 1004 Cloudflare Error 1004: Host Not Configured to Serve Web Traffic 1014 Cloudflare Error 1014: CNAME Cross-User Banned 1016 Cloudflare Error 1016: Origin DNS error 1018 Cloudflare Error 1018: Could not find host 1023 Cloudflare Error 1023: Could not find host 1034 Cloudflare Error 1034: Edge IP Restricted 523 Cloudflare Error 523: Origin is unreachable 530 Cloudflare HTTP 530 (with Error 1016 Origin DNS error / 1033 tunnel error) 81053 Cloudflare DNS: An A, AAAA, or CNAME record with that host already exists (code 81053) AH01909: server certificate does NOT include an ID which matches the server name Apache: [ssl:warn] AH01909: example.com:443:0 server certificate does NOT include an ID which matches the server name Certificate pinning failure! Android/OkHttp: javax.net.ssl.SSLPeerUnverifiedException: Certificate pinning failure! Peer certificate chain: sha256/... Pinned certificates for api.example.com Challenge failed for domain Let’s Encrypt / Certbot: Challenge failed for domain example.com — Invalid response from http://example.com/.well-known/acme-challenge/x: 404 DEPTH_ZERO_SELF_SIGNED_CERT Node/OpenSSL: Error: self signed certificate (code: DEPTH_ZERO_SELF_SIGNED_CERT) DNS problem: NXDOMAIN looking up A Certbot: Detail: DNS problem: NXDOMAIN looking up A for www.example.com - check that a DNS record exists for this domain ERR_HTTP2_INADEQUATE_TRANSPORT_SECURITY Chrome: ERR_HTTP2_INADEQUATE_TRANSPORT_SECURITY — HTTP/2 requires a modern TLS cipher ERR_SSL_KEY_USAGE_INCOMPATIBLE Chrome: ERR_SSL_KEY_USAGE_INCOMPATIBLE — the certificate's key usage doesn't allow the negotiated cipher HTTPSConnectionPool: Max retries exceeded (SSLError) Python requests: HTTPSConnectionPool(host='api.example.com', port=443): Max retries exceeded with url: /v1 (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] ...'))) incomplete certificate chain SSL Labs: Chain issues: Incomplete — Extra download (intermediate certificate missing) Incorrect TXT record found at _acme-challenge Certbot: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.example.com / Incorrect TXT record Invalid response from .well-known/acme-challenge: 404 Certbot: Detail: Invalid response from http://example.com/.well-known/acme-challenge/abc: 404 MySQL: SSL connection error: SSL is required but the server doesn't support it MySQL: ERROR 2026 (HY000): SSL connection error: SSL is required but the server doesn't support it NSURLErrorServerCertificateUntrusted (-1202) iOS: Error Domain=NSURLErrorDomain Code=-1202 "The certificate for this server is invalid. You might be connecting to a server that is pretending to be 'example.com'" root certificate file "root.crt" does not exist PostgreSQL: root certificate file "/home/user/.postgresql/root.crt" does not exist. Either provide the file or change sslmode SSLCertificateFile: file does not exist Apache: AH02240: Server should be SSL-aware but has no certificate configured / SSLCertificateFile: file '/etc/ssl/x.crt' does not exist or is empty sudo: unable to resolve host sudo: unable to resolve host <hostname>: Name or service not known Temporary failure in name resolution ping: google.com: Temporary failure in name resolution Timeout during connect (likely firewall problem) Let's Encrypt: Fetching http://example.com/.well-known/acme-challenge/token: Timeout during connect (likely firewall problem) UNABLE_TO_VERIFY_LEAF_SIGNATURE Node.js: Error: unable to verify the first certificate (code: UNABLE_TO_VERIFY_LEAF_SIGNATURE) wildcard certificate does not cover a.b.example.com Browser: *.example.com certificate does not match a.b.example.com (ERR_CERT_COMMON_NAME_INVALID)