CAA records, or Certification Authority Authorization records, provide additional confirmation for certification authorities (CAs) to validate or issue SSL certificates for a domain.
You can use CAA records to reduce the risk of unintentionally issuing a certificate incorrectly.