How this tool works
DNS tools validate the input name, query the relevant record type, and present normalized answers instead of raw resolver output. This helps compare records after DNS changes, hosting moves, or service onboarding.
DNS Records
CAA Lookup
Query CAA records to see which CAs may issue certificates for a domain.
What is CAA Lookup for?
Shows which certificate authorities are allowed to issue SSL/TLS certificates for a domain. The output is organized for quick review, copying, and cross-checking with nearby tools in the DNS Records group.
Part of this tool group
Open nearby tools in the same group to cross-check, inspect deeper, or complete a small workflow.
Open DNS Records hubFrequently asked questions
When should I use CAA Lookup?
Shows which certificate authorities are allowed to issue SSL/TLS certificates for a domain. Use it when you need a quick, readable result before cross-checking with production data or related tools in the DNS Records group.
Should I verify the result before applying changes?
Yes. Treat the output as an operational aid: review the source input, compare it with authoritative systems, and test changes in the correct environment before rollout.
