CAA Records - DNS Certificate Control

Understand CAA DNS records and how they control which CAs can issue certificates for your domain. Interactive demo with examples.

Interactive Demo

Domain Name

Custom CA (optional)

Wildcard Certificate Policy (issuewild)Same as regular certs

Incident Reporting Email (iodef) - optional

example.com. CAA 0 issue "letsencrypt.org"

example.com. CAA 0 issuewild "letsencrypt.org"

Read our comprehensive guide on CAA records and DNS security