CAA Record Lookup
Find all certification authority authorizations for a domain name with this online DNS CAA lookup tool. For example, try zoho.com or reddit.com to view their CAA records.
About CAA Records
A Certification Authority Authorization (CAA) record is a type of DNS record that allows domain owners to specify which Certificate Authorities (CAs) are permitted to issue SSL/TLS certificates for their domain. If a domain has no CAA records, any CA can issue a certificate for it. If it has at least one CAA record, only the CAs listed in those records can issue certificates.
Common CAA Record Tags
- issue
- Authorizes a specific Certificate Authority to issue certificates for the domain (e.g. "letsencrypt.org").
- issuewild
- Authorizes a specific CA to issue wildcard certificates (e.g. *.example.com). This rule takes precedence over an `issue` record for wildcard requests.
- iodef
- Specifies a URL (often a "mailto:" address) where CAs can report invalid certificate requests.