KB-2207 How to check the Appian Cloud Certificate Authority Authorization (CAA) record

Purpose

Appian maintains a Certificate Authority Authorization (CAA) record that lists the certificate authorities that are authorized to sign certificates for the appiancloud.com domain. This article outlines the current certificate authorities as well as the steps to check the CAA record directly.

Instructions

The CAA record is the authoritative source for the certificate authorities that Appian may use for signing appiancloud.com certificates. Appian reserves the right to change the list of authorized certificate authorities. As of January 2022, the authorized certificate authorities are:

  • GoDaddy (godaddy.com)
  • Amazon (amazon.com) 

To look up the value of the CAA record from a public DNS server, run one of the following commands:

  • dig caa appiancloud.com. @dns.google +short
  • nslookup -querytype=caa appiancloud.com. dns.google

If neither tool is available, find the value of the record by using an online DNS resolver site. Be sure to select the "CAA" type. An example of a website like this is DNS Checker.

Affected Versions

This article applies to all versions of Appian Cloud.

Last Reviewed: January 2022

Related
Recommended