DNS & Network tools · FREE
Who may issue your SSL?
Enter a domain to see which certificate authorities (CAs) its CAA record allows to issue SSL.
About this tool
The CAA record lets you specify exactly which certificate authorities (like Let's Encrypt or DigiCert) are allowed to issue SSL certificates for your domain. It's an important security layer against mis-issued certificates. No CAA record means any CA can issue a certificate.
Frequently asked questions
What is a CAA record?
A record that defines which certificate authorities may issue SSL for a domain.
Is a CAA record required?
Not mandatory but strongly recommended; it prevents unauthorized certificate issuance.
What if I have no CAA record?
Any certificate authority can issue SSL for your domain, which is not ideal for security.
Need help fixing this?
ServerNet's team sets up DNS, email, SSL and servers for you — fast, reliable and fully managed.