If this is the first time you've heard of CAA records, note that the "dig" command isn't yet aware of these records types, so you need to tell it to use "type25

If this is the first time you've heard of CAA records, note that the "dig" command isn't yet aware of these records types, so you need to tell it to use "type257" as the record type: $ dig empty.basic.caatestsuite.com type257 More resources here: https://support.dnsimple.com/articles/caa-record/ https://support.dnsimple.com/articles/caa-record/ https://caatestsuite.com/ https://caatestsuite.com/