CAA Record Checker
Find which certificate authorities are permitted to issue TLS certificates for a domain.
IP & Network Tools
CAA Record Checker
Find which certificate authorities are permitted to issue TLS certificates for a domain.
This live lookup sends only the IP address or hostname you enter to the named public lookup service. Do not submit private hostnames or confidential infrastructure details.
About the CAA Record Checker
CAA Record Checker is a focused network utility for administrators, developers, support teams and people troubleshooting an internet connection. Find which certificate authorities are permitted to issue TLS certificates for a domain.
Live results use a public lookup service. Only the address or hostname submitted for lookup is sent to that service.
Results describe public network information and should not be treated as proof of a person's identity or exact physical location.
Key features
- CAA DNS lookup
- Authorized issuer display
- Clear missing-record result
How to use
- 1Enter a public domain.
- 2Select Check CAA.
- 3Review each certificate authority authorization record returned by DNS.
Examples
example.comPublished CAA issuers or no recordA missing CAA record does not mean HTTPS is disabled.
Frequently asked questions
- Is this tool free?
- Yes. It requires no account, payment or software installation.
- Are IP location results exact?
- No. IP geolocation is approximate and usually identifies a network region, not a home, person or precise device location.
- Does this tool expose private network data?
- Only the public IP address or hostname you deliberately submit is sent to the public lookup provider shown in the tool.
- Can I use it on mobile?
- Yes. Inputs, tables and results adapt to phones, tablets and desktop browsers.