Symptoms
Adding a complex CAA record results in the following error.
You must enter a valid zone name or a single semicolon.
Description
The DNS Zone Manager does not allow for a CAA record to be created with complex permissions, as it only allows for hosts or a single semicolon to be specified in the Value field.
We've opened an internal case for our development team to investigate this further. For reference, the case number is CPANEL-46575. Follow this article to receive an email notification when a solution is published in the product.
Workaround
The CAA record will need to be added manually via the command line. Additionally, the serial number will need to be updated.
How to manually update a DNS Zone serial for a single domain or for all domains