CAA Record Lookup
A CAA record holds which certificate authorities may issue certificates for the domain. Enter a domain to see its CAA records as resolvers see them.
- Free
- No Sign-Up
- Live Lookup
Examples:
DNS Lookup
The CAA record
TypeCAA
HoldsWhich certificate authorities may issue certificates for the domain
Used toLimit who can issue SSL certificates for your domain.
Exampleexample.com. 3600 IN CAA 0 issue "letsencrypt.org"
Command Linedig +short example.com CAA
With no CAA record any CA may issue. Once you add one, every CA you use must be listed, including the one your CDN uses.
Records are cached for their TTL, so a changed CAA record can take up to the old TTL to show everywhere. Lower the TTL a day before planned changes.
Record Types
Questions
What is a CAA record?
A DNS record that holds which certificate authorities may issue certificates for the domain. Example: example.com. 3600 IN CAA 0 issue "letsencrypt.org"
How do I check a CAA record?
Enter the domain above, or run dig +short example.com CAA in a terminal.
How long does a CAA record change take?
Up to the record's previous TTL, as resolvers keep their cached copy until then. Most are visible within minutes to an hour.
Free Tools
More tools
DNS LookupA, AAAA, MX, NS, TXT, CNAME, SOA and CAA records for any domain.Reverse DNS LookupPTR record for an IP, and whether it is forward-confirmed.SPF CheckerValidate an SPF record and count its DNS lookups against the limit of 10.DMARC CheckerRead a domain's DMARC policy, reporting address and alignment.
Stop abuse leaving your servers
Frabs watches every VM's outbound traffic and stops spam, scans and floods before the abuse report arrives.