A CAA (Certificate Authority Authorization) record tells certificate authorities which CAs are authorized to issue certificates for a domain.
cPanel's Zone Editor supports CAA values including:
- issue — authorize a CA for normal certificates.
- issuewild — authorize a CA for wildcard certificates.
- iodef — provide a reporting URI for policy violations.
If no CAA records exist, CAA does not restrict certificate issuance. Incorrect or conflicting CAA records can prevent an otherwise valid certificate request from succeeding.
Only add or modify CAA records when you know which certificate authority must be allowed.
