What is an CAA record and how it is configured

What is an CAA record and how it is configured

A CAA record (Certification Authority Authorization) allows you to specify which Certificate Authorities (CA) can issue SSL certificates for your domain or subdomains.

 

CAA records are configured to prevent incorrect certificates from being issued for a domain or subdomains. The Certificate Authority (CA) must check if a CAA record exists before issuing a certificate.

 

Only the Certification Authorities (CA) configured in the record can issue certificates for the domain or subdomain. In other words, if you have a CAA record, only the specified Certification Authorities can issue certificates for your domain or subdomain.

 

How to configure a CAA record

 

Access your cdmon control panel and click on the DNS option for the domain where you want to configure the CAA record.

 

In the "DNS Records" screen, click on New record.

 

In the "Record type" dropdown, select CAA.

 

Once in the CAA record configuration panel, you will be able to configure the following parameters:

• TTL value: by default the value is 900 seconds.
• Redirect: you must indicate which records you want to be certified. The main record (@), the WWW subdomain, or a specific subdomain.
• Value: you must choose what the CAA record will allow the Certification Authority (CA) to do.
• CA domain: you must indicate the domain of the Certification Authority, for example: letsencrypt.org.

 

Finally, click Save record once all parameters have been configured.

 

For more information, you can contact us .