CAA records
What it can report
- ! low no CAA record anywhere up the tree How to fix it
- ! low CAA exists but restricts no issuance (no issue tag; issuewild alone limits wildcards only) How to fix it
- ! low a CAA tag no CA understands (typo such as "isue") How to fix it
- ! medium a CAA record that cannot be parsed How to fix it
How it counts
The score is computed by fixed rules from the checks that ran, and this check has a weight of 1 within DNS. A check that errors or is skipped is shown as "could not check" and left out of the score, never counted as a pass. Fixes and the AI summary are written after scoring and never change it.
Related checks
Scan your own domain and see this check run.