Remember CAA
Full name: Certification Authority Authorization
Memory aid: Certificate Authorities need Authorization.
CAA constrains issuance policy; it does not revoke an already issued certificate.
Study area: Protocols & logical ports · Batch 7
Relevant study for: CompTIA A+ Core 1 220-1201 · CompTIA Network+ N10-009 · CompTIA Security+ SY0-701 · Cisco CCNA 200-301 · ISC2 CISSP 2024 outline
Practice with exam flashcards →Networking & Connectivity / Knowledge library
CAA — Certification Authority Authorization
Publishes which certificate authorities may issue certificates for a domain.
Why learn CAA — Certification Authority Authorization?
Publishes which certificate authorities may issue certificates for a domain.
Where it came from
CAA constrains issuance policy; it does not revoke an already issued certificate.
- Memory aid (a learning cue, not the expansion): Certificate Authorities need Authorization.
Build your understanding
Work through these exercises in order. Try the task before opening a reference.
- Without looking, expand CAA: Certification Authority Authorization.
- Recall this memory aid: Certificate Authorities need Authorization.
- Explain the practical use: Publishes which certificate authorities may issue certificates for a domain.
- Explain this distinction: CAA constrains issuance policy; it does not revoke an already issued certificate.
- Identify CAA in a device specification, architecture diagram, or system inventory.
Documentation and sources
- IETF RFC 8659 (www.rfc-editor.org)