How to add DNS CAA record in a hosted DNS

Oct 11, 2022

How to add DNS CAA record in a hosted DNS


This article will provide the guidelines in adding a Certification Authority Authorization (CAA) record in a hosted DNS. If this is not the solution you are looking for, please search for your solution in the search bar above. Note: If you have any issues or questions whether CAA is supported with your setup, contact your DNS manager for further details. 

DNS Services which support DNS CAA records

Starting August 25, 2017, GlobalSign will be implementing the CAA Checking for SSL Certificates. As such, we have compiled a list of supported hosted DNS services as shown below: 

  • Free DNS
  • BIND
  • BuddyNS
  • Cloudflare (in beta)
  • ClouDNS
  • CloudXNS
  • Constellix DNS
  • Digital Ocean
  • DNS Made Easy
  • DNSimple
  • Domeneshop (Domainnameshop)
  • Dyn Managed DNS
  • easyDNS
  • Gandi
  • Google Cloud DNS
  • Google Domains DNS
  • GratisDNS
  • Hurricane Electric Free DNS
  • INWX
  • Linode
  • Mythic Beasts
  • Knot DNS
  • Idns
  • Neustar UltraDNS
  • NS1
  • NSD
  • Nucleus NV
  • OpenDNSSEC
  • PowerDNS
  • Route 53
  • Simple DNS Plus
  • tinydns
  • Vultr
  • Windows Server 2016
  • Zilore


DNS Services all have their own management interfaces and ways to add DNS CAA records. As such, you have to contact your DNS manager for details. However, we have listed the available guidelines below for your reference. 

Add, Update and Remove a DNS CAA record


1. Ballot 187 - Make CAA Checking Mandatory

Related Articles

GlobalSign System Alerts

View recent system alerts.

View Alerts

Atlas Discovery

Scan your endpoints to locate all of your Certificates.

Sign Up

SSL Configuration Test

Check your certificate installation for SSL issues and vulnerabilities.

Contact Support