DNS Insight
CAA Lookup
CAA Record Lookup - Certificate Authority Authorization
Look up CAA records to see which Certificate Authorities are authorized to issue SSL certificates for a domain.
How It Works
This tool queries CAA records which contain policy information about which CAs can issue SSL/TLS certificates. The "issue" tag controls standard certificates, "issuewild" controls wildcard certificates, and "iodef" specifies where to report violations.
Understanding Results
Results show authorized CAs and policy settings. If no CAA record exists, any CA can issue certificates. Adding CAA records improves security by preventing unauthorized certificate issuance.