CAA Generator ​

The CAA Generator helps you to create a suitable CAA DNS record for a Certificate Authority of your choice. For this purpose you have to enter a desired name and select the appropriate Certificate Authority. The switches Non-Wildcard or Wildcard can be used to define which kind of certificate is allowed.

If no switch is activated, all certificate authorities are blocked.

Basically, several CAA records can be placed in one zone for different certificate authorities. However, it is recommended to decide for one certificate authority and then store the appropriate CAA records for this authority.

The generated CAA records are displayed as BIND and can be exported.