Published using Google Docs
How to add CAA Record
Updated automatically every 5 minutes

CAA Resource record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain. CAA Resource Records, the new requirement in SSL validation process, allow a Certification Authority to implement additional controls to reduce the risk of unintended certificate mis-issue.

The DNS CAA Resource Record look like this:

rvglobalsoft.com. CAA 0 issue "symantec.com"

CAA Record will relate to a brand who issued the certificates. Then publish the generated DNS records on your domain's DNS

SSL Brand

Record Type

Priority

Value/Answer/Destination

Symantec

CAA

0

symantec.com

GeoTrust

CAA

0

geotrust.com

Thawte

CAA

0

thawte.com

RapidSSL

CAA

0

rapidssl.com