---
updatedAt: 2026-03-22T12:07:51.000Z
agentTools:
  projectIndex: https://docs.servertastic.com/llms.txt
---

# CAA Records

Setting a CAA record on your domain can prevent certificates being issued

Before issuing a certificate the Certificate Authority checks the domains DNS record for the domain for a CAA record.

> ❗️ CAA Record not required
>
> A CAA record is NOT REQUIRED to be able to issue a certificate. If you already have a CAA record on your domain then you must ensure that either DigiCert or Sectigo are able to issue certificates for your domain.

The CA can only issue a certificate if **one** of the following conditions are met:

* There is no CAA record for the domain
* A CAA record exists on the domain authorizing the CA to issue a certificate.

To allow the issuance of Sectigo and PositiveSSL certificates you must add the following CAA record

```text Sectigo CAA Record
CAA 0 issue "sectigo.com"
```

To allow the issuance of DigiCert, RapidSSL, Geotrust or Thawte certificates you must add any of the following CAA records

```text DigiCert CAA Record
CAA 0 issue "digicert.com"
CAA 0 issue "geotrust.com"
CAA 0 issue "rapidssl.com"
CAA 0 issue "thawte.com"
```

You can check which CAA records exist on a domain by using the [Servertastic CAA Validator.](https://tools.servertastic.com/caa-validator)

If a CAA record exists and none of the above are listed on the domain then we are unable to issue a certificate for the domain.

# Sibling pages

* [Managing HTTPS Orders](https://docs.servertastic.com/docs/https-orders.md)
* [Domain Control Validation](https://docs.servertastic.com/docs/domain-control-validation.md)
* [Obtain Site Seal](https://docs.servertastic.com/docs/obtain-site-seal.md)
* [Manage Site Seal](https://docs.servertastic.com/docs/manage-site-seal.md)
* [Renew HTTPS Certificates](https://docs.servertastic.com/docs/renew-https-certificate.md)
* [Reissue HTTPS Certificates](https://docs.servertastic.com/docs/reissue-https-certificates.md)
* [Multi-Year HTTPS Certificates](https://docs.servertastic.com/docs/multi-year-https-certificates.md)
* [Changes to Maximum Certificate Validity](https://docs.servertastic.com/docs/changes-to-maximum-certificate-validity.md)
* [Cancel HTTPS Order](https://docs.servertastic.com/docs/cancel-https-order.md)