What is a CAA record?
A CAA record lists which certificate authorities may issue SSL certificates for your domain. A wrong one can block certificate renewals.
A CAA record (Certification Authority Authorization) names the companies allowed to issue SSL certificates for your domain. Before a certificate authority issues a certificate, it checks your CAA records. If CAA records exist and that authority is not listed, it must refuse. Many domains have no CAA record, which means any authority may issue. Adding one is an extra safety step against someone getting a certificate for your domain without permission.
Why it matters for your business: If your host switches certificate providers and an old CAA record does not allow the new one, your site's certificate can fail to renew and visitors will see security warnings.
Related articles
More in Glossary
Still need help?
Ask our team