CAA Record Check

A CAA record names the certificate authorities allowed to issue for your domain. Every CA is required to check it. With no record, any of them may issue — which is exactly how mis-issuance happens. The policy is inherited, so a record on the parent covers the subdomain too; this follows that climb.

Domain: Scheme and path are optional — https://example.com/page works too.

Check CAA