Skip to content
CyberVigil
Tools
Website security scanDMARC checkerSPF checkerSSL checkerSecurity headers checker
Guides
Website securityEmail securitySmall business basicsBy industryCompliance & insuranceFix guides
How it worksPricingGet started free
Back to report
Worth improving

CAA could be stronger

Your domain doesn't restrict which certificate authorities can issue certificates for it.

What is a CAA record?

A CAA record is a DNS setting that names the certificate authorities (like Let's Encrypt) allowed to issue certificates for your domain.Authorities must check it before issuing, so it's a cheap extra safeguard. Make sure to include the authority your website already uses.Learn more about CAA

What we found

No CAA records
Any certificate authority may issue certificates for your domain.

Recommended fix

Add a CAA record

Authorize only the certificate authority you actually use.

Typical time: About 5 minutes

Step-by-step instructions

  1. 1
    Confirm your certificate authority
    We've filled this in from your current certificate.
  2. 2
    Add the CAA record
    If Cloudflare manages your DNS, it automatically adds CAA records for the authorities it uses for your Universal SSL certificate.
  3. 3
    Re-check your website
    Come back and re-check to confirm.

Instructions for GoDaddy

  1. 1Sign in to your GoDaddy account.
  2. 2Open your Domain Portfolio, select yourbusiness.com, and choose DNS.
  3. 3Click Add New Record and choose CAA as the type.
  4. 4Enter the values below exactly as shown. Leave TTL at the default.
  5. 5Click Save. Changes usually show up within an hour.
  • TypeCAA
    Name / Host@
    Value0 issue "godaddy.com"Your current certificate comes from GoDaddy.com, so this authorizes godaddy.com. Some hosts split this into Flag (0), Tag (issue) and Value fields.
Take the first step

See your own results

Run the same free check on your website. It takes about 15 seconds.

  • Free check
  • No signup
  • No changes to your website