Certification Authority Authorization (CAA) is a DNS record that allows domain owners to define which Certificate Authorities (CAs) can issue certificates for their domains. This enhances security by preventing unauthorized issuance of SSL/TLS certificates.


Everything is ok

Type Authority Flags
issue digicert.com 0

This domain has authorized several Certificate Authorities

This domain has multiple CAA values in its DNS records, it indicates that the domain owner has authorized several Certificate Authorities (CAs) to issue SSL/TLS certificates for that domain. This setup provides flexibility, allowing the domain owner to use different CAs for various types of certificates, such as regular SSL or Extended Validation certificates. It also offers redundancy and reliability, ensuring continuous certificate availability even if one CA faces issues. Additionally, this approach aids in risk management and compliance with organizational policies by diversifying the sources of SSL/TLS certificates.