CAA Record Generator
Generate secure CAA DNS records with a few clicks. Select which Certificate Authorities are allowed to issue certificates for your domain.
Domain Name
Presets
Select CAs
Issue Wild
Certificate Authority CAA Identifier Partners (Recommended)
Popular CAs
Reporting (iodef)
Optional: Receive notification if someone attempts to issue certificates in violation of your rules.
DNS Result
Select Certificate Authorities above to generate CAA records.
What is a CAA record?
CAA (Certificate Authority Authorization) is a DNS record that lets you control which Certificate Authorities (CAs) are allowed to issue SSL certificates for your domain.
Since 2017, it has been mandatory for all CAs to check for CAA records before issuance. If you have a CAA record and a CA not on the list attempts to issue a certificate, the request will be rejected.
Need a new certificate?
See our selection of SSL certificates from €45/year.