TLS certificates

DNS CAA records: choosing who may issue your certificates

CAA records control which certificate authorities may issue for a domain. Check the live issuer and renewal path before changing the policy.