CAA Lookup
See which certificate authorities are allowed to issue certificates for a domain.
About the CAA Lookup tool
See which certificate authorities are allowed to issue certificates for a domain.
Tip: from any lookup box on the site you can type caa:example.com to run this tool directly.
Results are generated live by querying the authoritative name servers of the domain, so changes you just published show up immediately. Each finding is graded as an error, warning or pass and explained so that you know what to fix and why it matters.
Monitor this automatically
Get alerted when this check starts failing, when you land on a blacklist or when a certificate or domain is about to expire.
Start free monitoring