Generators
CAA Record Generator
Build CAA records
Choose the certificate authorities allowed to issue certificates for your domain, then generate ready-to-publish CAA records.
Optionsbuild one or more CAA records, then publish them at your DNS provider
Domain name
Authorized CAs
CAIssueWildDisallowTTL
letsencrypt.org
Violation reports (iodef)
Tool Features
Take control of certificate issuance for your domain with CAA records
Control Issuance
Restrict which CAs may issue certificates for your domain
Popular CAs Built In
Pick from Let's Encrypt, DigiCert, Sectigo, Google and more
Per-CA Tags
Toggle issue, issuewild, or disallow with custom TTLs
Violation Reports
Add an iodef contact so CAs report policy violations