Emerald Red Team

ERT-CONFIG-016

Missing CAA DNS record

Info

Why it matters

CAA limits which certificate authorities can issue certificates for your domain.

How to fix it

Add a CAA record for your certificate authority (e.g. 0 issue "letsencrypt.org").

How we test it

Passive — runs in the free check, looks only at what a browser can see.

Does your app have this problem?

The free Quick Check tests for it.

Scan my app — free