CAA DNS Records
Certificate Authority Authorization records specify which CAs are allowed to issue certificates for your domain.
Results in 1–3 minutes · Free · No signup required
Want the result for your own site? Free DNS Security Checker — paste your domain, get the report.
Why It Matters
CAA prevents unauthorized certificate issuance. If an attacker compromises a CA you don't use, they still can't get certificates for your domain.
How We Check
We query CAA DNS records and verify they restrict certificate issuance to your intended CAs.
How to Fix
Add CAA records specifying allowed CAs: example.com. CAA 0 issue 'letsencrypt.org'. Add iodef for violation reporting.
Frequently Asked Questions
What is CAA DNS Records?
Certificate Authority Authorization records specify which CAs are allowed to issue certificates for your domain.
Why does CAA DNS Records matter for website security?
CAA prevents unauthorized certificate issuance. If an attacker compromises a CA you don't use, they still can't get certificates for your domain.
How do I fix CAA DNS Records issues?
Add CAA records specifying allowed CAs: example.com. CAA 0 issue 'letsencrypt.org'. Add iodef for violation reporting.
Related Security Checks
Related Tool
DNS Security Checker
Run all 6 related checks with our free dns security checker
Check Your Website Now
Run a free security scan to check for CAA DNS Records issues and 62+ other security vulnerabilities.
Scan Your Website Free