My quiz does not open on my domain
DNS is correct, but the page hangs or shows a security error: nine times out of ten a CAA record is blocking the certificate. Here is what to add, and where.
What is happening
The first time your domain is loaded, Tiquiz requests a free HTTPS certificate from Let's Encrypt on your behalf. It is automatic, there is nothing to install.
Some domains carry an allow-list of certificate authorities, the CAA records. It is often added without anyone noticing, by a hosting or CDN wizard, at the root of the domain, and it governs every subdomain.
If Let's Encrypt is not on that list, no certificate can be issued. The browser then has nothing to show: it hangs (ERR_TIMED_OUT) or it reports a security error.
How to know this is your case
In Tiquiz, open Settings, Domain tab: if this is it, the domain is no longer marked verified and the reason is written under its name, with the record to add.
The other telltale sign: your address answers over HTTP but never over HTTPS, while DNS points to us correctly.
The record to add
It goes on the ROOT of your domain, never on the quiz subdomain: a name that already carries a CNAME cannot carry any other record, and a CAA on the root already covers every subdomain.
A CAA record is ADDED: your existing authorisations stay in place. You break neither your site, nor your email, nor a certificate already issued elsewhere.
@ IN CAA 0 issue "letsencrypt.org"
- Type
CAA- Name
@- Flags
0- Authorisation type
issue- Allowed authority
letsencrypt.org- TTL
300
Field names change, values do not
Every host names these fields its own way, but there are always the same three values, in this order: 0, then issue, then letsencrypt.org.
On Hostinger for instance: Type set to CAA, Name set to @, the first small field to 0, the middle dropdown to issue, and letsencrypt.org in the last field. On Cloudflare the same three values are called Flags, Tag and CA domain name.
If your host offers a single text field, paste the full line shown above the table.
Where to edit your DNS
Open your domain's DNS zone at your host, then add the record. The links below go straight to the right console.
After adding it
Allow 5 to 10 minutes for the change to propagate. The TTL of 300 helps: it tells servers not to keep the old answer for more than five minutes.
Then go back to Tiquiz, click Check, and reload your address. The certificate is obtained on the first load, and renews itself afterwards.
If it still does not work
Send us your exact address: we will read your records and tell you precisely which one is still blocking. Contact us