CAA Check ​

A Certification Authority Authorization (CAA) DNS record is a type of DNS resource record that allows domain owners to specify which certificate authorities (CAs) are authorized to issue SSL/TLS certificates for their domain. CAA records are used to enhance the security of the SSL certificate issuance process and to give domain owners more control over the issuance of certificates for their domains.

The CAA Check tool can be used to query CAA DNS records for a specified hostname. The DNS resolver from Google is used. If CAA records are found, they are output in BIND format.

If common subdomains are also to be checked, the following subdomains are also checked for CAA records in addition to the host name entered:

• www.
• autodiscover.
• owa.
• mail.