Skip to main content

How to add a Certification Authority Authorization (CAA) record in a hosted DNS

User-added image

If you use a hosted DNS service, here is how you add a CAA record.

Please refer to the table below for instructions. Please note that several hosted DNS service providers are yet to support CAA. This article will be continuously updated as Hosted DNS providers adopt CAA.

Hosted DNS provider: How to add a CAA record:
dnsimple See our technote here for complete process.
DNS Made Easy

See our technote here for complete process.

Dyn Managed DNS See our technote here for complete process.
Amazon Route 53 See our technote here for complete process.
Constellix DNS 1. Select Managed DNS and click on Domains.
2. Select the Domain Name you want to add an A record to.
3. Under the CAA Records section, select the + icon to add a record.

4. In this screen, you will add the record information. Follow the steps below:

A) Name: This will be the identifier for your record. It is important to note, the domain name is automatically appended to the “Name” field of the record.
B) TTL: Edit the TTL. Time to Live is measured in seconds and is the amount of time the record will cache in resolving name servers and web browsers.
C) Providers: In the drop down menu choose your CA (certificate authority) provider. The hostname of your provider will automatically populate the Value box. If your provider is not listed, then choose other, and enter the hostname of the provider in the Value box.
D) Tag: Tags allow you to choose how you want certificates to be issued by the CA. Each CAA record can contain only one tag-value pair. Refer to the Configuration section for more details on the kinds of tags.
E) Note: Add a helpful note with keywords so you can search for your records later.
F) Save and Close: Save your changes. Don’t forget to commit your changes.

Cloudfare See our technote here for complete process.
ClouDNS See our technote here for complete process.
Afraid.org Free DNS Afraid.org Free DNS does support CAA, however, in order to seek support with adding a CAA record, please contact them directly using the contact information provided here .
Neustar UltraDNS Neustar Ultra DNS does support CAA, however, in order to seek support with adding a CAA record, please contact them directly using the contact information provided here .
Gandi 1. Using the Gandi DNS, from the zone file edition page, choose a new version and then on the right, select the “expert mode” for editing your zone.

2. Add the CAA record to the zone file. To add Entrust, for example:
(using "example.com"):

example.com.   CAA 0 issue "entrust.net"

3. After you have saved your version of the zone, remember to activate it for it to take effect.
Domeneshop (Domainnnameshop) Domeneshop (Domainnnameshop) does support CAA, however, in order to seek support with adding a CAA record, please contact them directly using the contact information provided here .
Google Cloud DNS See our technote here for complete process.
GoDaddy See our technote here for complete process.
BuddyNS Supported - Please contact BuddyNS for instructions.
ezreg.com (Netregistry) Supported - Please contact ezreg.com for instructions.
Google Domains DNS Not yet supported.
Hurricane Electric Free DNS Supported- Please contact Hurricane Electric Free DNS for instructions.
Mythic Beasts Supported - Please contact Mythic Beasts for instructions.
NameBright Supported - Please contact NameBright for instructions.
Neustar UltraDNS Supported - Please contact Neustar UltraDNS for instructions.
NS1 Supported - Please contact NS1 for instructions.
Nucleus NV Supported - Please contact Nucleus NV for instructions.
Zilore Supported - Please contact Zilore for instructions.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: Smart Phone users may use 1-800 numbers for one-touch dialing.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.

Country Number
Australia 0011 - 800-3687-7863
1-800-767-513
Austria 00 - 800-3687-7863
Belgium 00 - 800-3687-7863
Denmark 00 - 800-3687-7863
Finland 990 - 800-3687-7863 (Telecom Finland)
00 - 800-3687-7863 (Finnet)
France 00 - 800-3687-7863
Germany 00 - 800-3687-7863
Hong Kong 001 - 800-3687-7863 (Voice)
002 - 800-3687-7863 (Fax)
Ireland 00 - 800-3687-7863
Israel 014 - 800-3687-7863
Italy 00 - 800-3687-7863
Japan 001 - 800-3687-7863 (KDD)
004 - 800-3687-7863 (ITJ)
0061 - 800-3687-7863 (IDC)
Korea 001 - 800-3687-7863 (Korea Telecom)
002 - 800-3687-7863 (Dacom)
Malaysia 00 - 800-3687-7863
Netherlands 00 - 800-3687-7863
New Zealand 00 - 800-3687-7863
0800-4413101
Norway 00 - 800-3687-7863
Singapore 001 - 800-3687-7863
Spain 00 - 800-3687-7863
Sweden 00 - 800-3687-7863 (Telia)
00 - 800-3687-7863 (Tele2)
Switzerland 00 - 800-3687-7863
Taiwan 00 - 800-3687-7863
United Kingdom 00 - 800-3687-7863
0800 121 6078
+44 (0) 118 953 3088