The CAA issuer name, as expected in the DNS resource record. Real-world examples include:

  • entrust.net
  • pki.goog

The name is owned and defined by the issuer and registered in DNS for any CA to check.

Mandatory: Yes