CAA DNS Record

Every domain that uses our name servers has a CAA record by default.
The CAA record improves the security of your domain. It prevents certificate authorities from issuing an SSL certificate for your domain without authorisation.
By default, this record is defined so that only Let’s Encrypt certificates can be issued:

example.com. IN CAA 0 issue “letsencrypt.org”

If you would like to buy a certificate, please add your certificate authority as an additional CAA record.
Examples:

example.com. IN CAA 0 issue “comodoca.com”
example.com. IN CAA 0 issue “digicert.com”
example.com. IN CAA 0 issue “letsencrypt.org”
example.com. IN CAA 0 issuewild “comodoca.com”
example.com. IN CAA 0 issuewild “digicert.com”
example.com. IN CAA 0 issuewild “letsencrypt.org”