CAA Records: Controlling SSL/TLS Certificate Issuance for Domains
Prevent unauthorized SSL certificate issuance by publishing Certification Authority Authorization (CAA) records.
Securing Certificate Issuance
CAA records declare which Certificate Authorities (such as Let's Encrypt or DigiCert) are legally permitted to issue SSL certificates for your hostnames.