Certificate security
0.8.120.20 CAA records
Cached CAA record analysis for this domain.
Something went wrong
invalid domain
Tool switcher
Continue with another check
Same target (0.8.120.20) — open the next tool without retyping.
- SSL Certificate CheckerSame targetCertificate chain, SAN and TLS version0.8.120.20Open
- DNS CheckerSame targetAll major record types in one pass0.8.120.20Open
- DIGSame targetOne record type, resolver-style answer0.8.120.20Open
- Domain IP LookupSame targetA and AAAA IP addresses for a domain0.8.120.20Open
- Domain Age CheckerSame targetCreation date, age, registrar and expiry0.8.120.20Open
- WHOISSame targetRegistrar, expiry and domain status0.8.120.20Open
- HTTP Header CheckerSame targetResponse headers, redirects and caching0.8.120.20Open
- HTTP/2 TesterSame targetHTTP/2 support, ALPN and TLS negotiation0.8.120.20Open
- Blacklist CheckerSame targetDNSBL reputation for IP and domain0.8.120.20Open
- Punycode ConverterUnicode ↔ Punycode for IDN domainsOpen
- URL SplitterSame targetBreak a URL into parts and query paramshttps://0.8.120.20/Open
- Base64 CodecEncode and decode Base64 textOpen
- Password GeneratorStrong random passwords for ops workOpen
- Password Strength CheckerEntropy, crack time and password suggestionsOpen
- Passphrase GeneratorMemorable random word phrases for safer sharing testsOpen
- BIN CheckerSame targetCard brand, bank and country from BIN/IIN0812020Open
- IP CalculatorSame targetSubnet math for IPv4 and IPv6 CIDR0.8.120.20Open
- Browser Update CheckerBrowser version, update status and Client HintsOpen
- SPF ValidatorSame targetValidate SPF TXT records, mechanisms and terminal all0.8.120.20Open
- DMARC AnalyzerSame targetDMARC policy, alignment and reporting checks0.8.120.20Open
Guides
Related articles
Practical guides for common CAA Record Checker tasks — DNS records, troubleshooting steps, and links to our free tools.
caa record basics, caa record checker, caa dns
CAA record basics at the domain apex
CAA record basics at the domain apex. CAA restricts which publicly trusted certificate authorities may issue TLS certificates for a domain by publishing DNS CAA records at the apex. DN01 returns parsed tags, warnings, recommendations, and a shareable result URL for the same domain after DNS edits.
Read article →issue tag authorized cas, caa record checker, caa dns
issue tag and authorized certificate authorities
issue tag and authorized certificate authorities. CAA restricts which publicly trusted certificate authorities may issue TLS certificates for a domain by publishing DNS CAA records at the apex. DN01 returns parsed tags, warnings, recommendations, and a shareable result URL for the same domain after DNS edits.
Read article →issuewild wildcard certificates, caa record checker, caa dns
issuewild and wildcard TLS certificates
issuewild and wildcard TLS certificates. CAA restricts which publicly trusted certificate authorities may issue TLS certificates for a domain by publishing DNS CAA records at the apex. DN01 returns parsed tags, warnings, recommendations, and a shareable result URL for the same domain after DNS edits.
Read article →iodef incident reporting, caa record checker, caa dns
iodef incident reporting for certificate policy violations
iodef incident reporting for certificate policy violations. CAA restricts which publicly trusted certificate authorities may issue TLS certificates for a domain by publishing DNS CAA records at the apex. DN01 returns parsed tags, warnings, recommendations, and a shareable result URL for the same domain after DNS edits.
Read article →caa before ssl renewal, caa record checker, caa dns
CAA checks before SSL certificate renewal
CAA checks before SSL certificate renewal. CAA restricts which publicly trusted certificate authorities may issue TLS certificates for a domain by publishing DNS CAA records at the apex. DN01 returns parsed tags, warnings, recommendations, and a shareable result URL for the same domain after DNS edits.
Read article →shareable caa record checker results, caa record checker, caa dns
Shareable CAA record checker result pages
Shareable CAA record checker result pages. CAA restricts which publicly trusted certificate authorities may issue TLS certificates for a domain by publishing DNS CAA records at the apex. DN01 returns parsed tags, warnings, recommendations, and a shareable result URL for the same domain after DNS edits.
Read article →