Skip to main content
We only recommend adding CAA records if you have the technical knowledge to do so.
If you’re using CAA records for your domain, then you need to add the following records to your domain’s DNS settings:
TypeNameValueNotes
CAA@0 issue "pki.goog"
CAA@0 issuewild "pki.goog"Only add this if you’re already using other issuewild records
CAA@0 issue "letsencrypt.org"
CAA@0 issuewild "letsencrypt.org"Only add this if you’re already using other issuewild records
We use a mix of Google Trust Services (pki.goog) and Let’s Encrypt (letsencrypt.org) for our SSL certificates, so it’s important to add both CAs to the allowlist.
Last modified on June 4, 2026