CAA record

Tells CAs which authorities are allowed to issue certs for this domain.

CAA records (0 issue "letsencrypt.org") instruct certificate authorities to refuse issuance unless they're on the allowlist. Defense against misissuance.

Try the Ssl Checker tool →