snag.page

Every check ยท DNS

CAA

dns/caa

What it checks

CAA records at the name or above it.

Why it matters

CAA limits which certificate authorities may issue certificates for the domain.

How to fix it

  1. Find who issues your certificates.
  2. Add a CAA record naming each of them.
DNS record
example.com. CAA 0 issue "letsencrypt.org"

Check a site for this and everything else: snag.page. More on dns: Private addresses IPv6 DNSSEC Domain expiry Transfer lock Subdomain takeover Subdomain takeover