Skip to content

CAA

No description available in the specification.

FieldTypeRequiredDescription
typetypeyes(A, AAAA, CNAME, CAA, ALIAS, TXT, MX)
namefqdn_or_subdomainyesFully Qualified Domain Name (FQDN) or subdomain. You can use the @ symbol to represent your apex domain (e.g., example.com). Wildcards are supported.
ttlttlnoTime To Live in seconds (60-86400)
annotationstringnoA custom note for this particular record.
flagsintegeryesindicates criticality, with a value of 1 meaning that the record must be understood and respected by the CA before issuing a certificate, while 0 means it’s optional. (0, 1)
tagstringyesSpecifies the type of authorization or reporting policy, such as allowing specific CAs to issue certificates (issue), wildcard certificates (issuewild), or report issues (iodef). (issue, issuewild, iodef)
datastringyesUse the CA’s domain to authorize a specific CA or to include a URI when used with iodef.
{
"type": "A",
"name": "www",
"ttl": 600,
"annotation": "string",
"flags": 1,
"tag": "issue",
"data": "letsencrypt.org"
}