Certificate security

vercel.app CAA records

Cached CAA record analysis for this domain.

Check another domain

CAA record check

CAA records found

Valid CAA policy

Query name

vercel.app

CAA record count

CAA records

0 issue pki.goog0 issue letsencrypt.org

issue tags

0 issue pki.goog0 issue letsencrypt.org

Recommendations

consider adding an iodef record for certificate policy violation reportingre-run after DNS TTL when migrating CAs or tightening issuance policyuse DNS Checker or DIG to inspect the raw CAA answer alongside this parsed view

Tool switcher

Continue with another check

Same target (vercel.app) — open the next tool without retyping.

SSL Certificate CheckerSame targetCertificate chain, SAN and TLS versionvercel.appOpen
DNS CheckerSame targetAll major record types in one passvercel.appOpen
DIGSame targetOne record type, resolver-style answervercel.appOpen
Domain IP LookupSame targetA and AAAA IP addresses for a domainvercel.appOpen
Domain Age CheckerSame targetCreation date, age, registrar and expiryvercel.appOpen
WHOISSame targetRegistrar, expiry and domain statusvercel.appOpen
HTTP Header CheckerSame targetResponse headers, redirects and cachingvercel.appOpen
HTTP/2 TesterSame targetHTTP/2 support, ALPN and TLS negotiationvercel.appOpen
Blacklist CheckerSame targetDNSBL reputation for IP and domainvercel.appOpen
Punycode ConverterSame targetUnicode ↔ Punycode for IDN domainsvercel.appOpen
URL SplitterSame targetBreak a URL into parts and query paramshttps://vercel.app/Open
Base64 CodecEncode and decode Base64 textOpen
Password GeneratorStrong random passwords for ops workOpen
Password Strength CheckerEntropy, crack time and password suggestionsOpen
Passphrase GeneratorMemorable random word phrases for safer sharing testsOpen
BIN CheckerCard brand, bank and country from BIN/IINOpen
IP CalculatorSubnet math for IPv4 and IPv6 CIDROpen
Browser Update CheckerBrowser version, update status and Client HintsOpen
SPF ValidatorSame targetValidate SPF TXT records, mechanisms and terminal allvercel.appOpen
DMARC AnalyzerSame targetDMARC policy, alignment and reporting checksvercel.appOpen

Full tool catalog →

Guides

Practical guides for common CAA Record Checker tasks — DNS records, troubleshooting steps, and links to our free tools.

caa record basics, caa record checker, caa dns
CAA record basics at the domain apex
CAA record basics at the domain apex. CAA restricts which publicly trusted certificate authorities may issue TLS certificates for a domain by publishing DNS CAA records at the apex. DN01 returns parsed tags, warnings, recommendations, and a shareable result URL for the same domain after DNS edits.
Read article →
issue tag authorized cas, caa record checker, caa dns
issue tag and authorized certificate authorities
issue tag and authorized certificate authorities. CAA restricts which publicly trusted certificate authorities may issue TLS certificates for a domain by publishing DNS CAA records at the apex. DN01 returns parsed tags, warnings, recommendations, and a shareable result URL for the same domain after DNS edits.
Read article →
issuewild wildcard certificates, caa record checker, caa dns
issuewild and wildcard TLS certificates
issuewild and wildcard TLS certificates. CAA restricts which publicly trusted certificate authorities may issue TLS certificates for a domain by publishing DNS CAA records at the apex. DN01 returns parsed tags, warnings, recommendations, and a shareable result URL for the same domain after DNS edits.
Read article →
iodef incident reporting, caa record checker, caa dns
iodef incident reporting for certificate policy violations
iodef incident reporting for certificate policy violations. CAA restricts which publicly trusted certificate authorities may issue TLS certificates for a domain by publishing DNS CAA records at the apex. DN01 returns parsed tags, warnings, recommendations, and a shareable result URL for the same domain after DNS edits.
Read article →
caa before ssl renewal, caa record checker, caa dns
CAA checks before SSL certificate renewal
CAA checks before SSL certificate renewal. CAA restricts which publicly trusted certificate authorities may issue TLS certificates for a domain by publishing DNS CAA records at the apex. DN01 returns parsed tags, warnings, recommendations, and a shareable result URL for the same domain after DNS edits.
Read article →
shareable caa record checker results, caa record checker, caa dns
Shareable CAA record checker result pages
Shareable CAA record checker result pages. CAA restricts which publicly trusted certificate authorities may issue TLS certificates for a domain by publishing DNS CAA records at the apex. DN01 returns parsed tags, warnings, recommendations, and a shareable result URL for the same domain after DNS edits.
Read article →

Back to CAA Record Checker

CAA record check

Valid CAA policy

Continue with another check

Related articles

CAA record basics at the domain apex

issue tag and authorized certificate authorities

issuewild and wildcard TLS certificates

iodef incident reporting for certificate policy violations

CAA checks before SSL certificate renewal

Shareable CAA record checker result pages