CAA reduces the chance that an unapproved certificate authority will issue a certificate for your domain.
Which value should you enter?
| Record type | CAA |
| Value | For example 0 issue letsencrypt.org |
| TTL | Use the default value unless a provider specifies otherwise. |
What should you consider?
- Add CAA only when you know which CA you use.
- Do not forget wildcard certificates; these may require issuewild.
- An incorrect CAA record can block certificate issuance.
DNS changes take time
After saving, an old value may temporarily remain in cache. Therefore, check not only in your browser but also with an external DNS checker.
Frequently asked questions
When will a change to CAA become visible?
This depends on the TTL and provider caches. The change is often visible within a few minutes, but old responses may be retained for longer.
Can I undo a DNS change?
Yes. Restore the previous value and save again. This correction may also temporarily be affected by DNS cache.
Do I need to change the TTL?
Usually not. For a planned migration, you can lower the TTL in advance so later changes are retrieved more quickly.
Still need help?
Email support@mosthosted.com and include your domain name, the required record and the value.