DNS Protocol Library
CAA Record Lookup Tool
Perform a free online CAA record lookup to check authorized Certificate Authorities (CAs) for a domain. Verify SSL/TLS issuance policies.
Query Live CAA Records
Perform a real-time network request to fetch active CAA mappings for any target domain.
Open Diagnostic ConsoleWhat is a DNS CAA Record?
A Certification Authority Authorization (CAA) record specifies which certificate authorities (CAs) are permitted to issue SSL/TLS certificates for a domain name.
RFC Zone File Example Format
In standard zone files, a CAA record is declared using the following syntax structure:
example.com. 3600 IN CAA 0 issue "letsencrypt.org"CLI Terminal Query Example
Verify this record type locally using standard terminal debugging tools:
dig example.com CAA