Sample CAA Records

example.tld.zone

$TTL 14400
@   IN    SOA   nsd01.prd.btv.example.tld.   hostmaster.example.tld.  (
                                    2017051601  ; Serial number YYYYMMDDNN
                                    2d          ; Refresh
                                    2h          ; Retry
                                    30d         ; Expire
                                    5m          ; Min TTL
                                  )

$ORIGIN example.tld.  ; Default zone domain

                    NS            nsd01.prd.nyc.example.tld.
                    NS            nsd01.prd.sea.example.tld.

                    MX      10    mta01.prd.nyc.example.tld.
                    MX      100   mta01.prd.sea.example.tld.

@             IN    A             203.0.113.10
@             IN    AAAA          2001:db8::10

@             IN    TXT           v=spf1 mx -all
@             IN    LOC           71 53 20 S 05 09 30 E 1000m 10m 100m 10m

@             IN    CAA           0 issue "letencrypt.org"
@             IN    CAA           0 iodef "mailto:[email protected]"
@             IN    CAA           0 iodef "https://security.example.tld/api/v1/caa_report"

_ldap._tcp    IN    SRV           10 0 389   ldap01.prd.nyc.example.tld

_443._tcp           IN    TLSA    3 1 1      92ba7e82c1cda2ff08138905d5fd3c32c9b00527a4060174f5fb45c0072867a5
_443._tcp.security  IN    TLSA    3 1 1      bba70d2750080383e2dc3119e21555347cdd48b4968fdad50a0ab1fe95fc0c5c

security      IN    CNAME         www01.prd.nyc.example.tld

www           IN    CNAME         @

$ORIGIN prd.nyc.example.tld.  ; Site specific zone

@             IN    CAA           0 issuewild "letsencrypt.org"
@             IN    CAA           0 issuewild "globalsign.org"

_dane.mta01         IN    TLSA    3 1 1      a06b4224c68f79aa710b445d94263d0ebbeaf1a9df6dcb62d72feee9bdeaeb00
_25._tcp.mta01      IN    CNAME   _dane.mta01.prd.btv.example.tld.
_587._tcp.mta01     IN    CNAME   _dane.mta01.prd.btv.example.tld.
_993._tcp.mta01     IN    CNAME   _dane.mta01.prd.btv.example.tld.

ldap01        IN    A             203.0.113.89
mta01         IN    A             203.0.113.124
mta01         IN    AAAA          2001:db8::ba
www01         IN    A             203.0.113.125
www01         IN    AAAA          2001:db8::bb

$ORIGIN prd.sea.example.tld.  ; Site specific zone

@             IN    CAA           0 issuewild "globalsign.org"

mta01         IN    A             198.51.100.17
mta01         IN    AAAA          2001:db8::56