CAA Record Generator
Control who can issue SSL certificates for your domain. Choose your authorities, then copy the records to your DNS provider.
Your DNS records will appear here
Enter your domain and choose at least one certificate authority to get started.
Your CAA records
Add each record separately in your domain’s DNS settings.
Automatic copying is unavailable. The zone records are selected below. Copy them manually.
- Name / Host
- Type
- CAA
- TTL (Seconds)
- 3600
Use @ only if this domain is the root of the DNS zone you are editing. For a subdomain, use its relative name or the full hostname, as your provider requires.
- Flags
- Tag
- Value
In separate DNS fields, paste the value without quotes. The zone file includes the required quotes and the final dot in the hostname.
In separate DNS fields, paste the value without quotes. The zone file includes the required quotes and the final dot in the hostname.
How CAA works
CAA limits future certificate issuance. It does not install or revoke certificates and it does not replace domain validation.