The DNS record type CAA (Certification Authority Authorization) instructs Certificate Authorities (CAs) on whether to issue SSL/TLS certificates for a domain or not. This record reduces the risk of unauthorized certificates being issued for a domain.

If you are using CAA records, you need to add both of the following CAA records in order to allow Strattic (via Amazon) to issue your SSL certificate for your live site.

CAA DNS Settings

Type: CAA.

Name: example.com

Tag: issue

CA domain name: amazon.com

Type: CAA.

Name: example.com

Tag: issuewild

CA domain name: amazon.com

Did this answer your question?