CAA Record Checker

CAA Record Checker looks up a domain's Certification Authority Authorization DNS record, which restricts which certificate authorities are allowed to issue SSL certificates for that domain at all.

Check this after locking a domain down to a specific certificate authority to confirm the record is actually published correctly, or when investigating why a certificate request from a particular provider is being rejected.

Not having a CAA record is common and is not itself a fault, it simply means every publicly trusted certificate authority is allowed to issue for the domain, which is the default and was the only option before CAA records existed.