Add a CAA record
CAA (Certification Authority Authorization) records are used in your DNS zone file to specify which certificate authorities (CAs) are allowed to issue SSL certificates for a domain. When issuing a certificate, all publicly trusted CAs are required to check and respect CAA records. CAA record details can be found through your SSL provider.
- Sign in to your GoDaddy Domain Control Center. (Need help logging in? Find your username or password.)
- Select your domain to access the Domain Settings page.
- Select Manage DNS to access your zone file.
- Select Add to add a new record.
- Select CAA from the Type menu options.
- Enter the details from you SSL provider for your CAA record:
- Name: The domain or subdomain for the CAA record. Type @ to put the CAA record on your root domain.
- Flags: An unsigned integer between 0–255.
- Tag: An ASCII string that represents the identifier of the property represented by the record. This is typically entered as issue, issuewild or iodef, depending on your specific requirements.
- Value: The value associated with the chosen property tag.
- TTL: How long the server should cache information. The default setting is 1 hour.
- Select Add Record to save your new CAA record.
Most DNS updates take effect within an hour, but could take up to 48 hours to update globally.
- The lack of any CAA records authorizes normal unrestricted certificate issuance, and the presence of a single blank issue tag prevents all certificate issuance.
- Edit your CAA record any time.