CAA Record Checker

Look up CAA records for a domain, identify allowed certificate authorities, and flag missing or restrictive certificate rules.

This tool uses DNS-over-HTTPS from the browser. If a resolver blocks browser requests, paste the records into the report box and ask ITT for help interpreting them.
Results will appear here.

Free Online CAA Record Checker

Look up CAA records for a domain, identify allowed certificate authorities, and flag missing or restrictive certificate rules. This security utility runs in your browser and avoids asking for sensitive credentials or passwords.