Generator

CAA Record Generator

Generate Certificate Authority Authorization (CAA) DNS records to restrict which CAs can issue SSL certificates for your domain.

Domain

Let's Encrypt

DigiCert

Google Trust Services

Violation report email (iodef, optional)

DNS CAA records

example.com. CAA 0 issue "letsencrypt.org"
example.com. CAA 0 issuewild "letsencrypt.org"