The configuration of CAA records is needed to indicate what certification authorities are allowed to issue SSL certificates for a given domain. If no CAA record in the DNS zone exists, then every certification authority can issue SSL certificates for a given domain.
Before configuring CAA records, please ask your certification authority to provide you with the necessary values according to the SSL certificate you would like to have.
Afterwards, please follow these steps to configure CAA records:
- In your account go to DOMAIN NAMES > ACTIVE.
- Move the cursor over the concerned domain and click on Manage on the right.
- Click on MANAGE ZONE.
- Click on NEW RECORD.
- Select CAA (Certification Authority Authorization) in the "Type" dropdown menu.
- Enter the values: host, flag, value and type provided by your certification authority. Select the priority value as well.
- Click on SAVE RECORD.
- Click on SAVE ZONE.
Important: This option is only available if the domain is using name servers (default name servers: ns1 / ns2).