DNS

CAA Lookup

Resolves a domain's CAA records — which certificate authorities are authorized to issue TLS certificates for it.

Explicitly authorizes which certificate authorities are allowed to issue TLS certificates for this domain.

If set, a CA not listed here must refuse to issue a certificate for this domain — a defense against certificate mis-issuance. No CAA record means any CA may issue.