Manage CAA Records

Last updated

Table of Contents


You can manage CAA records in DNSimple using the DNS record editor.

The instructions in this article assume you are familiar with the CAA record format and usage.

Record fields editor and simple editor

The CAA form has two tabs:

  • Record fields editor (the default) has separate fields for the tag and value.
  • Simple editor has a single Content field, where you enter the whole record value, for example 0 issue "letsencrypt.org". Use it if you are copying a CAA record from another provider.

For more about the two editors, see Understand DNSimple’s Record Editors: Simple vs. Field-Specific.

Adding a CAA record

To add a CAA record

  1. If you have more than one account, select the relevant one from the account switcher at the top-right corner of the screen.
  2. On the header, click the tab.
  3. Locate the relevant domain, and click on the name to access the domain page.
  4. Click at the top right of the domain page.
  5. Click , and select .
  6. On the tab, enter the CAA record information. Add CAA record form on the Record fields editor tab, with Name blank, the issue tag, and letsencrypt.org in Value

    • Name: the subdomain you want to create the record for, without the domain name. For example, if you want to represent www.example.com enter www. Leave it blank to represent the root domain example.com.
    • Tag: what the record controls:
      • issue: a certificate authority (CA) allowed to issue certificates, for example letsencrypt.org or sectigo.com.
      • issuewild: a CA allowed to issue wildcard certificates.
      • issuemail: a CA allowed to issue email (S/MIME) certificates.
      • iodef: where CAs report requests that break your policy, for example mailto:security@example.com.
      • contactemail and contactphone: an email address or phone number CAs can use to contact you about domain validation.
    • Value: the value for the tag you chose. See the CAA record format for the exact syntax.

    As with any other DNS record, you can configure:

    Once you are ready, click .

  7. The record editor opens with the message , and the new record is in the list.

    Record editor filtered to the CAA record

Note

Some hosting providers label fields differently than DNSimple does, which can be confusing if you are copying DNS settings from another provider.

  • In DNSimple, Name = what others might call Host.

Updating a CAA record

To update a CAA record

  1. If you have more than one account, select the relevant one from the account switcher at the top-right corner of the screen.
  2. On the header, click the tab.
  3. Locate the relevant domain, and click on the name to access the domain page.
  4. Click at the top right of the domain page.
  5. Locate the CAA record you want to update in the list.
  6. Click the three-dot actions menu at the end of the record row, then select .

    CAA record actions menu with an arrow pointing to Edit

  7. Update the information and click to save the record.

Removing a CAA record

To remove a CAA record

  1. If you have more than one account, select the relevant one from the account switcher at the top-right corner of the screen.
  2. On the header, click the tab.
  3. Locate the relevant domain, and click on the name to access the domain page.
  4. Click at the top right of the domain page.
  5. Locate the CAA record you want to remove in the list.
  6. Click the three-dot actions menu at the end of the record row, then select .

    CAA record actions menu with an arrow pointing to Delete

  7. In the dialog, add a note if you want to record why, then click .

Have more questions?

If you have additional questions or need any assistance with your CAA records, just contact support, and we will be happy to help. You can also read more about DNS hosting at DNSimple.