diff --git a/pkg/dnsclient/caa.go b/pkg/dnsclient/caa.go
index c7807bbc7..d5c3f69d4 100644
--- a/pkg/dnsclient/caa.go
+++ b/pkg/dnsclient/caa.go
@@ -233,8 +233,8 @@ func isCAAIssuerDomainName(name string) bool {
 		return false
 	}
 
-	labels := strings.Split(name, ".")
-	for _, label := range labels {
+	labels := strings.SplitSeq(name, ".")
+	for label := range labels {
 		if !isCAAIssuerLabel(label) {
 			return false
 		}