🛡️ CAA Record Checker

Check which Certificate Authorities are authorized to issue SSL certificates for a domain

Enter a domain name to check its CAA records

📚 About CAA Records

CAA (Certificate Authority Authorization) records allow domain owners to specify which Certificate Authorities (CAs) are permitted to issue SSL/TLS certificates for their domain.

CAA Record Tags

Tag Purpose Example
issue Authorize CA for regular certificates 0 issue "letsencrypt.org"
issuewild Authorize CA for wildcard certificates 0 issuewild "digicert.com"
iodef Report policy violations 0 iodef "mailto:security@example.com"

Common Certificate Authorities

letsencrypt.org digicert.com sectigo.com globalsign.com godaddy.com amazon.com google.com