What are CAA records for SSL certificates?

Configuring CAA records in the DNS zone of your domain is necessary if you want to restrict the issuance of SSL certificates to a specific certification authority (CA). You can permit only one or a few CAs in your CAA records, or you can completely prohibit SSL certificate issuance for your domain.

CAA records for our Sectigo CA:
0 issue "sectigo.com"
0 issuewild "sectigo.com"

If you want to prohibit any CA from issuing certificates for your domain, use the following CAA record:
0 issue ""

CAA records must be configured by you or your IT administrator. As a security measure, Moreweb cannot configure these records for you. If your domain uses Moreweb name servers, you can find instructions on how to configure them here. If you are using name servers from another provider, please contact them for assistance.