Skip to main content
DNS Checker(beta)

CAA Record

A DNS record that specifies which certificate authorities are allowed to issue SSL certificates for a domain.

A CAA (Certificate Authority Authorization) record is a DNS record that tells certificate authorities (like Let's Encrypt or DigiCert) whether they are allowed to issue an SSL certificate for your domain. It is a security measure that prevents unauthorized parties from obtaining certificates for your domain. For example, if your CAA record only authorizes Let's Encrypt, other certificate authorities will refuse to issue certificates even if someone requests one.

Reference

Related terms

See also

Referenced on