Certificate authority policy lookup for Vendor screening: Return CAA records that constrain certificate issuance. DNS data only; does not send email or verify that an inbox exists.