CAA Resource record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain. CAA Resource Records, the new requirement in SSL validation process, allow a Certification Authority to implement additional controls to reduce the risk of unintended certificate mis-issue.
The DNS CAA Resource Record look like this:
rvglobalsoft.com. CAA 0 issue "symantec.com"
CAA Record will relate to a brand who issued the certificates. Then publish the generated DNS records on your domain's DNS
SSL Brand | Record Type | Priority | Value/Answer/Destination |
Symantec | CAA | 0 | symantec.com |
GeoTrust | CAA | 0 | geotrust.com |
Thawte | CAA | 0 | thawte.com |
RapidSSL | CAA | 0 | rapidssl.com |