diff --git a/get-certs.sh b/get-certs.sh
index 77b4ccf..f1ee7f8 100755
--- a/get-certs.sh
+++ b/get-certs.sh
@@ -165,7 +165,6 @@ else
 fi
 
 # launch main dnsmasq process
-letsencrypt_CAA="000569737375656c657473656e63727970742e6f7267"
 touch $tmp_conf_file \
   && dnsmasq \
     --conf-file=$tmp_conf_file \
@@ -173,7 +172,7 @@ touch $tmp_conf_file \
     -p $alternative_dns_port \
     --address="/$domain/$my_ygg_ip" \
     --address="/$domain/$bridge46_ipv4" \
-    --dns-rr=$domain,257,$letsencrypt_CAA \
+    --caa-record=$domain,0,issue,letsencrypt.org \
     --server="/_acme-challenge.$domain/127.0.0.1#$acme_challenge_port" \
     1>&- 2>&- &
 main_dnsmasq_pid=$!