CAA
No description available in the specification.
Fields
Section titled “Fields”| Field | Type | Required | Description |
|---|---|---|---|
type |
type | yes | (A, AAAA, CNAME, CAA, ALIAS, TXT, MX) |
name |
fqdn_or_subdomain | yes | Fully Qualified Domain Name (FQDN) or subdomain. You can use the @ symbol to represent your apex domain (e.g., example.com). Wildcards are supported. |
ttl |
ttl | no | Time To Live (60-604800) |
annotation |
string |
no | A custom note for this particular record. |
flags |
integer |
yes | indicates criticality, with a value of 1 meaning that the record must be understood and respected by the CA before issuing a certificate, while 0 means it’s optional. (0, 1) |
tag |
string |
yes | Specifies the type of authorization or reporting policy, such as allowing specific CAs to issue certificates (issue), wildcard certificates (issuewild), or report issues (iodef). (issue, issuewild, iodef) |
data |
string |
yes | Use the CA’s domain to authorize a specific CA or to include a URI when used with iodef. |
Example
Section titled “Example”{ "type": "A", "name": "www", "ttl": 600, "annotation": "string", "flags": 1, "tag": "issue", "data": "letsencrypt.org"}