Glossary
What is a CAA Record?
Restricts the certificate authorities that may issue certificates for this domain.
Follow your certificate provider instructions when restricting which authorities may issue certificates for a domain. The issue property controls ordinary issuance, while issuewild provides a separate permission for wildcard certificates. If issuance fails, review the CAA policy at the domain and relevant parent names with your provider.
Example
example.com. 3600 IN CAA 0 issue "ca.example" — The authority name is illustrative; use the value specified by your certificate provider.
Common issue
An incorrect authority permission can block certificate issuance or renewal. Changing CAA does not automatically revoke an existing certificate or replace checks of its validity.