CAA record generator

A Certification Authority Authorisation (CAA) records allow you to control which Certification Authorities can issue certificates for your domain names.

From 8 September 2017, certification authorities must check CAA records for all domains before issuing any type of SSL certificate (Domain Validation, Organisation Validation and Extended Validation).

You can choose preferable Certification Authority and allow (or not) issuance of wildcard certificates.

Please enter your domain name:

Select certification authority:

Certification Authority	Non-Wildcard	Wildcard
Sectigo (Comodo)
DigiCert (Symantec, GeoTrust, Thawte, RapidSSL)
GlobalSign
Entrust