📜 Certificate Authorities

CAA records tell certificate authorities whether they may issue TLS certificates for a domain. This page shows which CAs .dk domains authorise, and each value links to the domains using it. Data comes from our own scanners, which re-resolve every .dk domain in the zone roughly once a week.

13,335 .dk domains (1.0% of the zone) publish CAA records, which limit which certificate authorities may issue TLS certificates for them. 3,158 also ask CAs to report violations (iodef), 4,392 restrict wildcard certificates separately, and 459 forbid issuance entirely.