Change a CAA record

Adding a CAA record to a domain allows you to reduce the likelihood of someone obtaining an unauthorized SSL certificate for your domain. You create a special DNS record that the Certificate Authority (CA) checks before issuing a certificate. You can create notification rules for when a certificate is requested from a CA that isn’t permitted. As of Sept 8, 2017, all publicly trusted CAs are required to check and respect CAA records.

Note: If your domain is registered at another company, see the Domains registered at another company section below for instructions.

1. Log in to your My Products page.
2. If you aren't automatically directed there, make sure to select the My Products tab.
3. Next to the domain you want to use, click DNS.
4. On the DNS Management page, in the Records section, click the (pencil icon) next to CAA.
5. Make any changes to the record, and click Save when finished.

To change a CAA Record for domains registered at another company

1. Log in to your My Products page.
2. If you aren't automatically directed there, make sure to select the My Products tab.
3. Click Manage All.
4. From the top menu, click the DNS tab, and select Manage Zones.
5. Enter the domain name you want to use and click Search.
6. On the DNS Management page, in the Records section, click the (pencil icon) next to CAA.
7. Make any changes to the record, and click Save when finished.

More info

• Add a CAA record
• Manage DNS zone files