What is CAA record?
A CAA (Certification Authority Authorization) record is a DNS record that lists which certificate authorities are allowed to issue certificates for your domain.
Why businesses care
It reduces the chance that a certificate is mistakenly or maliciously issued for your domain by an authority you do not use.
Example
0 issue "letsencrypt.org"How to check
Look up CAA records on your root domain, or run the domain security checker.
How to fix
Add a CAA record naming the authority you use. Confirm renewals still work afterwards.
Common mistakes
- Naming the wrong authority and breaking renewals
- Forgetting that subdomains inherit the parent’s CAA
Sources
Check it with Domain Security Checker
Review your domain’s DNS health: nameserver redundancy, CAA, DNSSEC and dangling CNAME indicators. Free domain security check.
Open Domain Security Checker