DNS

CAA Lookup

Resolves a domain's CAA records: which certificate authorities are authorized to issue TLS certificates for it.

Explicitly authorizes which certificate authorities are allowed to issue TLS certificates for this domain.

If set, a CA not listed here must refuse to issue a certificate for this domain: a defense against certificate mis-issuance. No CAA record means any CA may issue.