DNS-NO-CAA
No CAA record
What it means
CAA tells certificate authorities which of them may issue for your domain. Without it, any CA may, which widens the impact of a mis-issuance.
How to fix it
- 1Add "CAA 0 issue" records for the authorities you use (for example letsencrypt.org) and "CAA 0 iodef mailto:security@yourdomain" for reports.
Re-check after the change
DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.