Check CAA records: which CAs may issue, issuewild and iodef
CAA records tell certificate authorities which of them may issue TLS certificates for a domain. This check lists each record's tag and value: issue for ordinary certificates, issuewild for wildcards and iodef for the address that receives violation reports. No CAA record means any CA may issue.







