• 1.200 domeinnaam extensies

  • Telefonische support

  • ISO 27001 certificatie

  • 100% Belgisch

  • Eerlijke prijzen

Contacteer ons

Hulp nodig?

Hieronder vind je de meest gestelde vragen

SSL-certificates

what is a CAA-record?

CAA stands for Certification Authority Authorization. It is a DNS record that specifies which Certificate Authorities (CAs) are authorized to issue an SSL certificate for a particular domain name.

A CAA record helps prevent the issuance of incorrect or fraudulent SSL certificates, providing an additional layer of security for your domain.

Since 2017, all Certificate Authorities have been required to check a domain's CAA record before issuing an SSL certificate.

What are the options?

You can configure a CAA record for your primary domain as well as for each individual subdomain. This can be useful if you want to apply stricter security policies to specific pages, such as login or payment pages.

You can also configure an alert to receive an email notification whenever an incorrect or fraudulent SSL certificate is issued for your domain.

What does a CAA record look like?

In its basic form, a CAA record looks like this:

nomeo.be    CAA    0    issue       "letsencrypt.org"

The example above means that Let's Encrypt is the only Certificate Authority authorized to issue an SSL certificate for nomeo.be. In the following example, two Certificate Authorities are authorized:

nomeo.be    CAA    0    issue       "letsencrypt.org"
nomeo.be    CAA    0    issue       "comodo.com"

You can also configure a CAA record for a wildcard certificate:

nomeo.be    CAA    0    issue       "letsencrypt.org"
nomeo.be    CAA    0    issuewild   "comodo.com"

In this example, Let's Encrypt is authorized to issue an SSL certificate for the primary domain nomeo.be, while Comodo is authorized to issue certificates for all subdomains.

Finally, you can configure an alert. In that case, the Certificate Authority will notify you by email if an incorrect or fraudulent certificate is issued, using the email address specified in the record:

nomeo.be    CAA    0    iodef       "mailto:waarschuwmij@nomeo.be"


Related questions

Hulp nodig?
Aarzel niet om ons te contacteren.

0800 26 800
welkom@nomeo.be Contacteer ons
nomeo support team
X