CAA

CAA is a DNS record that lists which certificate authorities are allowed to issue certificates for a domain. Certificate authorities are required to check and honor these records before issuing. It reduces the risk of mistaken or malicious certificate issuance by unauthorized CAs.