dnstools.oxmo.org

CAA

Which authorities may issue a certificate for this domain, and generation.

Build a set of records

A CAA is not one record but a set: one line per authority and per tag.

Authorised authorities
Options

The issue tag does NOT cover *.example.com certificates. Without issuewild, an otherwise authorised CA will refuse to issue one, with a terse message that is hard to trace back.

Where the authority should report a refused, suspicious request.