Free certificate and lifecycle evidence
Check who may issue, and when the domain may expire.
Resolve the effective RFC 8659 CAA policy across public resolvers, then use the official IANA bootstrap to retrieve the authoritative RDAP lifecycle object over pinned HTTPS.
Loading public checker…
CAA is issuance policy
The result shows the first CAA RRset found while walking parent labels. It does not validate or revoke certificates that already exist.
RDAP is registry evidence
Expiration and registrar fields reflect the registry response at lookup time. A 404 is not proof that a name is available, and an expiration event is not a billing guarantee.