DNS Certification Authority Authorization (CAA) uses your DNS records to let you specify which certificate authorities are allowed to issue certificates for the domains you own. Read More...
✔ All looks good
---
0 issue "amazon.com"
0 issue "amazonaws.com"
0 issue "amazontrust.com"
0 issue "awstrust.com"
0 issue "comodoca.com"
0 issue "digicert.com; cansignhttpexchanges=yes"
0 issue "letsencrypt.org"
0 issue "pki.goog; cansignhttpexchanges=yes"
0 issue "sectigo.com"
0 issue "ssl.com"
0 issuewild "amazon.com"
0 issuewild "amazonaws.com"
0 issuewild "amazontrust.com"
0 issuewild "awstrust.com"
0 issuewild "comodoca.com"
0 issuewild "digicert.com; cansignhttpexchanges=yes"
0 issuewild "letsencrypt.org"
0 issuewild "pki.goog; cansignhttpexchanges=yes"
0 issuewild "sectigo.com"
0 issuewild "ssl.com"
128 iodef "mailto:sysadmin-team@stackoverflow.com"
If you're not quite ready to test your DNS CAA record yet, then perhaps worth a visit to: