Edit a CAA record

CAA (Certification Authority Authorization) records are used in your DNS zone file to specify which certificate authorities (CAs) are allowed to issue SSL certificates for a domain. When issuing a certificate, all publicly trusted CAs are required to check and respect CAA records. CAA record details can be found through your SSL provider.

1. Sign in to your GoDaddy Domain Control Center. (Need help logging in? Find your username or password.)
2. Select your domain to access the Domain Settings page.
   
3. Select Manage DNS to access your zone file.
4. Select Edit next to the CAA record you're editing.
5. Enter the details from your SSL provider for your CAA record:
   
   • Name: The domain or subdomain for the CAA record. Type @ to put the CAA record on your root domain.
   • Flags: An unsigned integer between 0–255.
   • Tag: An ASCII string that represents the identifier of the property represented by the record. This is typically entered as issue, issuewild or iodef, depending on your specific requirements.
   • Value: The value associated with the chosen property tag.
     
   • TTL: How long the server should cache information. The default setting is 1 hour.
6. Select Add Record to save your new CAA record.

Related steps

• The lack of any CAA records authorizes normal unrestricted certificate issuance, and the presence of a single blank issue tag prevents all certificate issuance.
• Delete or add a CAA record at any time.

More info

• Create a template to quickly apply DNS records to your domains.
• Keep your domains organized with folders and preset profiles.