The Certificate Authority Authorization (CAA) DNS resource record type provides a mechanism for domains to express the allowed set of Certificate Authorities that may issue certificates for the domain. The core CAA specification ( ) solely defines Property Tags that restrict the issuance of…