DNS Tools
CAA Record Lookup
Look up a domain's CAA records - which Certificate Authorities are authorized to issue SSL certificates for it.
Enter a domain to look up its CAA records - which Certificate Authorities are authorized to issue SSL certificates for it.
JustChecker tracks your DNS records continuously and alerts you the moment something changes.
Frequently Asked Questions
A CAA (Certification Authority Authorization) record specifies which Certificate Authorities are allowed to issue SSL/TLS certificates for your domain - any CA not listed should refuse to issue one.
It's optional but recommended - without one, any publicly trusted CA can issue a certificate for your domain, which a CAA record can restrict as an extra security layer.
No CAA record means no restriction is in place - any CA following the CA/Browser Forum baseline requirements may issue a certificate for your domain.