DNS · Website glossary

CAA record

Quick answer · What is CAA record?

A DNS Certification Authority Authorization record states which certificate authorities may issue certificates for a domain.

IN PRACTICE

CAA record: an example

An organization publishes a CAA policy naming its chosen certificate issuer.

KEEP IN MIND

CAA controls issuance policy; it does not install, renew, or revoke the site's certificate by itself.

Put the idea to work

Frequently asked questions

What is a practical example of CAA record?

An organization publishes a CAA policy naming its chosen certificate issuer.

Does a CAA record install or renew my certificate?

CAA controls issuance policy; it does not install, renew, or revoke the site's certificate by itself.

Which concepts should I read alongside CAA record?

TLS certificate: A signed digital document that associates an identity, such as domain names, with a public key used in TLS authentication.
Certificate authority: An organization or system that issues digital certificates within a trust framework.