CAA Checker
Verify which Certificate Authorities are authorized for your domain.
CAA Checker
Query the Certification Authority Authorization (CAA) records for a domain to check which CAs are allowed to issue certificates.
Enter a domain above to instantly resolve and grade its CAA DNS records.
What is a CAA Record?
A Certification Authority Authorization (CAA) record is a DNS resource record that allows a domain name holder to specify which Certificate Authorities (CAs) are authorized to issue certificates for that domain.
How it works
Before issuing a certificate, a CA will check the domain's CAA records. If the CA's name is not listed in the domain's CAA records, the CA is prohibited from issuing a certificate. This prevents unauthorized CAs from issuing fraudulent certificates for your domain.
Common Tags
- issue: Explicitly authorizes a single CA to issue a standard certificate for the domain.
- issuewild: Explicitly authorizes a single CA to issue wildcard certificates for the domain.
- iodef: Specifies a URL to which a CA may report policy violations.
Related Guides
Deepen your understanding with our expert articles.