In order to determine what value to use, you must first determine whether you use Generic, standard zone file or legacy zone file value.
For more information on Certification Authority Authorization (CAA) records, go here.
Generic and standard values
Generic value general format: <record name URL>. 0 issue <CertificationAuthority Value>
Standard Zone File general format: <record name URL>. IN CAA 0 issue <CertificationAuthority Value>
| Certification Authority | CertificationAuthority Value |
| AC Camerafirma | "camerfirma.com" |
| ACCV (Government of Spain) | "accv.es" |
| Actalis | "actalis.it" |
| Amazon | "amazon.com" |
| Asseco (Unizeto, Certum) | "certum.pl" |
| Buypass | "buypass.com" |
| CA Disig | "disig.sk" |
| CATCert (Consorci AOC) | "aoc.cat" |
| Certinomis (Docapost) | "www.certinomis.com" |
| Certizen (Honkong Post) | "hongkongpost.gov.hk" |
| CertSign | "certsign.ro" |
| CFCA (China Financial) | "cfca.com.cn" |
| Chungwa Telecom | "cht.com.tw" |
| Comodo | "comodo.com" |
| D-TRUST | "d-trust.net" |
| Digicert | "digicert.com" |
| DocuSign (Keynectis, OpenTrust, Certplus) | "docusign.fr" |
| e-tugra | "e-tugra.com" |
| EDICOM | "edicomgroup.com" |
| Entrust | "entrust.net" |
| Firmaprofesional | "firmaprofesional.com" |
| FNMT (Government of Spain) | "fnmt.es" |
| GlobalSign | "globalsign.com" |
| GoDaddy (Starfield Technologies) | "godaddy.com" |
| Google Trust Services | "pki.goog" |
| GRCA (Government of Taiwan) | "gca.nat.gov.tw" |
| HARICA | "harica.gr" |
| IdenTrust | "identrust.com" |
| Izenpe | "izenpe.com" |
| Kamu SM | "kamusm.gov.tr" |
| Let's Encrypt | "letsencrypt.org" |
| Microsec e-Szigno | "e-szigno.hu" |
| NetLock | "netlock.hu" |
| PKloverheid | "www.pkioverheid.nl" |
| PROCERT | "procert.net.ve" |
| QuoVadis | "quovadisglobal.com" |
| SECOM | "secomtrust.net" |
| Sertifitseerimiskeskuse | "sk.ee" |
| StartCom | "startcomca.com" |
| SwissSign | "swisssign.com" |
| Symantec (GeoTrust, Thawte, RapidSSL) | "symantec.com" |
| T-Systems (DFN-PKI) | "telesec.de" |
| Telia | "telia.com" |
| Trustwave | "trustwave.com" |
| Web.com | "web.com" |
| WISeKey | "wisekey.com" |
| WoSign | "wosign.com" |
Legacy Zone File value
Generic value general format: <record name URL>. IN TYPE257 \# <CertificationAuthority Value>
| Certification Authority | CertificationAuthority Value |
| AC Camerafirma | 21 0005697373756563616D65726669726D612E636F6D |
| ACCV (Government of Spain) | 14 00056973737565616363762E6573 |
| Actalis | 17 00056973737565616374616C69732E6974 |
| Amazon | 17 00056973737565616D617A6F6E2E636F6D |
| Asseco (Unizeto, Certum) | 16 0005697373756563657274756D2E706C |
| Buypass | 18 00056973737565627579706173732E636F6D |
| CA Disig | 15 0005697373756564697369672E736B |
| CATCert (Consorci AOC) | 14 00056973737565616F632E636174 |
| Certinomis (Docapost) | 25 000569737375657777772E63657274696E6F6D69732E636F6D |
| Certizen (Honkong Post) | 26 00056973737565686F6E676B6F6E67706F73742E676F762E686B |
| Certsign | 18 00056973737565636663612E636F6D2E636E |
| CFCA (China Financial) | 17 000569737375656368742E636F6D2E7477 |
| Chungwa Telecom | 17 00056973737565636F6D6F646F2E636F6D |
| Comodo | 18 00056973737565642D74727573742E6E6574 |
| D-TRUST | 19 0005697373756564696769636572742E636F6D |
| Digicert | 18 00056973737565646F63757369676E2E6672 |
| DocuSign (Keynectis, OpenTrust, Certplus) | 18 00056973737565652D74756772612E636F6D |
| e-tugra | 22 00056973737565656469636F6D67726F75702E636F6D |
| EDICOM | 18 00056973737565656E74727573742E6E6574 |
| Entrust | 27 000569737375656669726D6170726F666573696F6E616C2E636F6D |
| Firmaprofesional | 14 00056973737565666E6D742E6573 |
| FNMT (Government of Spain) | 21 00056973737565676C6F62616C7369676E2E636F6D |
| GlobalSign | 18 00056973737565676F64616464792E636F6D |
| GoDaddy (Starfield Technologies) | 15 00056973737565706B692E676F6F67 |
| Google Trust Services | 21 000569737375656763612E6E61742E676F762E7477 |
| GRCA (Government of Taiwan) | 16 000569737375656861726963612E6772 |
| HARICA | 20 000569737375656964656E74727573742E636F6D |
| IdenTrust | 17 00056973737565697A656E70652E636F6D |
| Izenpe | 20 000569737375656B616D75736D2E676F762E7472 |
| Kamu SM | 22 000569737375656C657473656E63727970742E6F7267 |
| Let's Encrypt | 18 00056973737565652D737A69676E6F2E6875 |
| Microsec e-Szigno | 17 000569737375656E65746C6F636B2E6875 |
| NetLock | 25 000569737375657777772E706B696F766572686569642E6E6C |
| PKloverheid | 21 0005697373756570726F636572742E6E65742E7665 |
| PROCERT | 25 0005697373756571756F7661646973676C6F62616C2E636F6D |
| QuoVadis | 21 000569737375657365636F6D74727573742E6E6574 |
| SECOM | 12 00056973737565736B2E6565 |
| Sertifitseerimiskeskuse | 21 000569737375657374617274636F6D63612E636F6D |
| StartCom | 20 0005697373756573776973737369676E2E636F6D |
| SwissSign | 19 0005697373756573796D616E7465632E636F6D |
| Symantec (GeoTrust, Thawte, RapidSSL) | 17 0005697373756574656C657365632E6465 |
| T-Systems (DFN-PKI) | 16 0005697373756574656C69612E636F6D |
| Telia | 20 000569737375657472757374776176652E636F6D |
| Trustwave | 14 000569737375657765622E636F6D |
| Web.com | 18 00056973737565776973656B65792E636F6D |
| WISeKey | 17 00056973737565776F7369676E2E636F6D |
| WoSign | 12 0009697373756577696C643B |
If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:
Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list here)