Use the result to make the next technical decision.
CAA lets a domain publish which certificate authorities may issue certificates. Separate issue and issuewild tags make wildcard policy explicit.
DNS generator
Build a CAA policy you can review before publishing.
Generate certificate-authority authorization records for normal and wildcard issuance, with an optional incident-reporting address.
Generated values
Review before publishing
Read observations in context.
The CA identifier must match the authority you intend to use. Publishing the wrong identifier can block issuance, so validate before changing production DNS.
Marketing analytics never receive the target.
DotMoose records only the tool name and a coarse success/error outcome for marketing analytics. Active server diagnostics use bounded operational security logs without placing the entered domain, IP, URL, DNS answer or report contents into marketing telemetry.
Related tools