CAA records and SSL security

A CAA record (Certification Authority Authorization) lets you control which certificate authorities are allowed to issue SSL/TLS certificates for your domain. It is a security measure that helps prevent unauthorised certificates being issued for your name.

For example, a CAA record can state that only a specific authority may issue certificates for your domain. If no CAA record is present, any authority may issue one, which is the default.

To add a CAA record, open the DNS manager in your client area, choose the CAA type, and enter the authority you wish to permit.

Be careful: an incorrect CAA record can block legitimate SSL certificates, including the free ones we issue. If you are unsure, contact our team on WhatsApp +971 58 553 6767 or support@dirhamaday.ae before adding one.