Free DNS CAA Record Checker Tool
Look up the CAA records published for a domain and review which certificate authorities are authorized to issue certificates for it.
What the CAA check shows
- Published values: Review flags, tags, values, and time-to-live data returned by DNS.
- Certificate-authority policy: See the issuers allowed for normal and wildcard certificates.
- Additional policy tags: Identify issuewild and iodef tags when they are published.
What is a CAA record?
A CAA record lets a domain owner specify which certificate authorities may issue TLS certificates for the domain. Certificate authorities must check the applicable CAA policy before issuance.
Benefits of Regularly Checking CAA Records:
- Enhanced Web Security: Helps prevent unauthorized issuance of SSL/TLS certificates.
- Maintain Control Over Certificates: Ensures that only your chosen CAs can issue certificates for your domain.
- Trust and Credibility: Correct CAA records help in building trust with your users and customers.
How to manage CAA records in our DNS interface
