yourDMARC Logo

Check CAA records: which CAs may issue, issuewild and iodef

CAA records tell certificate authorities which of them may issue TLS certificates for a domain. This check lists each record's tag and value: issue for ordinary certificates, issuewild for wildcards and iodef for the address that receives violation reports. No CAA record means any CA may issue.

See it in Action

How to read this result

  • issue: a CA allowed to issue ordinary certificates for the domain, by its CAA domain name (for example letsencrypt.org).
  • issuewild: a CA allowed to issue wildcard certificates. If absent, issue applies to wildcards too.
  • iodef: a mailto: or https: address that CAs report policy violations to.
  • No CAA record: any publicly trusted CA may issue. A CAA record that omits the CA you use makes renewals fail.
  • Flags of 128 mark a critical tag; CAs that do not understand it must refuse to issue.

Look up every record on the domain

FAQ

Frequently Asked Questions

A CAA (Certification Authority Authorization) record specifies which certificate authorities (CAs) are allowed to issue certificates for a domain.

To ensure that only authorized CAs can issue certificates for your domain, enhancing security and reducing the risk of certificate fraud.

By verifying that your CAA records are correctly configured and up-to-date, helping prevent unauthorized certificate issuance.

It provides details about which CAs are authorized to issue certificates for your domain, along with any potential misconfigurations or missing records.

Yes, the tool can identify and alert you to any incorrect or missing CAA records that could impact certificate issuance.

Regularly, especially after changes to your domain or CA settings, to ensure your records remain accurate and secure.

No, the tool is designed to be user-friendly and accessible, even for users with minimal technical expertise.

Yes, you can check CAA records for multiple domains using the tool, making it easy to manage and verify security across your domain portfolio.

Update your CAA records with the correct information based on the tool’s recommendations and consult your domain registrar or DNS provider for assistance.

Some tools and services offer automation features for managing and updating CAA records, streamlining the process and ensuring ongoing accuracy.

Emails Analyzed

0

DMARC Reports Processed

0

Sending Sources Checked

0

Domains Scanned

0

Used and Trusted by Industry Leaders

Badge BackdropUser Headshot

‘yourDMARC secures emails, saves our time. Our small healthcare practice struggled with email security. yourDMARC's DMARC/DKIM combo and real-time alerts are a lifesaver! HIPAA compliance is a breeze now, and their support team is top-notch. ‘

Anshul A. Healthcare Manager

Schedule a Demo

Discover more about yourDMARC and quickly book a demo with our sales representatives.

Go to schedule demo

Choose the Right Plan

Explore our flexible plans and pricing to find the perfect email security solution for your business today.

Go to pricing

Learn more

Explore our latest blogs for expert insights on spoofing prevention and email compliance best practices.

Go to blogs
DMARC Footer

With yourDMARC, boosting email campaign deliverability, safeguarding brand identity, and fortifying business reputation is a breeze.

As a global team, we’re always available. Let’s talk!
Tools
  • DMARC
  • SPF
  • DKIM
  • BIMI
  • MTA STS
  • TLS RPT
  • BLACKLIST
Solutions
  • Startup
  • Small/Mid Business
  • Pricing
  • Enterprise
  • DMARC Monitoring
  • Email Compliance
  • Hosted DMARC
  • DMARC Enforcement
  • Bulk Sender Requirements
  • DMARC by Platform
  • Compare DMARC Tools
  • Non-Profit
  • Healthcare
  • Education
  • Info Tech
  • Government
  • Retail
  • Finance
  • Marketing
  • Insurance
Management
  • Referral Program
  • MSP/MSSP Program
Partnership
  • Manage Services
  • Email Marketing
Resources
  • Blog
  • Free Tools
  • Changelog
contact@yourdmarc.com
Terms of ServicePrivacy Policy
FacebookLinkedInInstagramYouTube

© 2026 yourDMARC

Monitored by Opservo

Download to read the eBook

Ebook Support
Get Support

Contact Now

Try yourDMARC Sign Up