From 539f1ba3a5e8c9c5669d8e39affd097dc6fc6155 Mon Sep 17 00:00:00 2001
From: Aaron Gable <aaron@letsencrypt.org>
Date: Mon, 23 Feb 2026 15:22:20 -0800
Subject: [PATCH] VA: ensure wildcard hostname is lowercased

---
 va/caa.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/va/caa.go b/va/caa.go
index 475aa57b6eb..3a75a48148f 100644
--- a/va/caa.go
+++ b/va/caa.go
@@ -297,7 +297,7 @@ func (va *ValidationAuthorityImpl) checkCAARecords(
 	// If this is a wildcard name, remove the prefix
 	var wildcard bool
 	if strings.HasPrefix(hostname, `*.`) {
-		hostname = strings.TrimPrefix(ident.Value, `*.`)
+		hostname = strings.TrimPrefix(hostname, `*.`)
 		wildcard = true
 	}
 	caaSet, err := va.getCAA(ctx, hostname)