Checks

CAA missing iodef contact

CAA records exist but none is an iodef contact.

Why it matters

iodef is the address CAs can use to report an issuance request you did not expect.

What to do

Add a CAA iodef record with a mailto: or https: contact you monitor.

Reference

CAA restricts which certificate authorities may issue certificates for the domain.

RFC 8659 — CAA