Managing CAA Records

Table of Contents


You can manage CAA records in DNSimple using the DNS record editor.

The instructions in this article assume you’re familiar with the CAA record format and usage.

CAA records are only supported on the DNSimple name servers. We don’t support transferring CAA records to secondary name servers.

Standard mode vs custom mode

The DNSimple interface allows you to manage CAA records using two different modes:

  • The standard mode provides a pre-populated interface to help enter the appropriate values for the CAA record.
    • Provider allows you to create a CAA record to allow a certificate authority.
    • Reports allows you to create a CAA record to specify the email for reporting policy violations.
  • The custom mode (Custom) allows you to modify the CAA record tag/value values directly.

We don’t support the ability to specify via interface the destructured CAA record value representation. You cannot enter the following text:

0 issue "letsencrypt.com"

Adding a CAA record

To add a CAA record to allow a Certificate Authority

  1. Use the account switcher at the top right corner of the page to select the appropriate account.
  2. From the Domain Names list, click the domain you want to manage.
  3. On the domain page, click DNS at the top-right to open the Record Editor.
  4. In the record editor, click Add, and select CAA to add a new CAA record.
  5. Select the Provider tab.
  6. Enter the CAA record information. screenshot: Showing create new CAA record form

    • Name: the subdomain you want to create the record for, without the domain name. For example, if you want to represent www.example.com enter www. Leave it blank to represent the root domain example.com.
    • Provider: the Certificate Authority you want to allow.
    • Certificate type: the type you want to allow.

    As with any other DNS record, you can configure:

    Once you’re ready, click to confirm and create the record.

  7. The record is created and visible in the record list.

    screenshot: Showing a CAA record

Some hosting providers label fields differently than DNSimple does, which can be confusing if you’re copying DNS settings from another provider.

  • In DNSimple, Name = what others might call Host.

Updating a CAA record

To update a CAA record

  1. Use the account switcher at the top right corner of the page to select the appropriate account.
  2. From the Domain Names list, click the domain you want to manage.
  3. On the domain page, click DNS at the top-right to open the Record Editor.
  4. Locate the CAA record you want to update in the list.
  5. Click the edit icon (🖊️) at the end of the record row to edit it.

    screenshot: Showing button for edit CAA record

  6. Update the information and click Update Record to save the record.

Removing a CAA record

To remove a CAA record

  1. Use the account switcher at the top right corner of the page to select the appropriate account.
  2. From the Domain Names list, click the domain you want to manage.
  3. On the domain page, click DNS at the top-right to open the Record Editor.
  4. Locate the CAA record you want to remove in the list.
  5. Click the trash icon at the end of the row to delete it.

    screenshot: showing delete button for CAA record

  6. Confirm the dialog to delete the record.

Have more questions?

If you have additional questions or need any assistance with your CAA records, just contact support, and we’ll be happy to help.