// IPSonic MONITORING TOOLKIT / DOCUMENTATION
ipsonic-probe rainbow unicorn

ipsonic-probe ✦

YAML-driven infrastructure validation. Platform-agnostic checks. Zero cloud dependencies.

DNSTCPHTTP / TLSYAML CONFIGCLI FIRSTKISSOFFLINE READY

Part of the ipsonic project ↗ Visit the main website

CAA permitted and forbidden issuers

76-dns-caa-forbidden.yaml

DNS

What this example does

DNS infrastructure verification: CAA permitted and forbidden issuers. It helps detect resolution, delegation or published-record problems.

Checks and behavior

  • Queries DNS records or resolver behavior ([{'type': 'CAA', 'contains': ['issue letsencrypt.org'], 'not_contains': ['issue digicert.com']}]).

Adapt example domains, addresses, credentials and thresholds to your environment before use.

YAML configuration

Download original YAML

# Copyright (c) 2026 mati peterson. Maintainer: mati peterson <ipsonic@mailbox.org>. Project: https://ipsonic.com/probe/. Disclaimer: Provided AS IS, without warranty of any kind. Use at your own risk; validate checks and configurations before production use.
# Example template: replace example.com and documentation IPs before use.
name: CAA permitted and forbidden issuers
dns:
  name: example.com
  records:
  - type: CAA
    contains:
    - issue letsencrypt.org
    not_contains:
    - issue digicert.com