diff --git a/cacert.org b/cacert.org
index 7f76a7a..91594c2 100644
--- a/cacert.org
+++ b/cacert.org
@@ -127,6 +127,8 @@ code.cacert.org	43200	IN	SSHFP	3 1 e8021534def77726741a874945ec578ed6d84f31
 code.cacert.org	43200	IN	SSHFP	3 2 54e42fd9ac210cd6bd3ec1ca75b80bf4585eb47606a40b4627d1916f355dcb9f
 code.cacert.org	43200	IN	SSHFP	4 1 33305c1b89678caa80ef42a31e29b3e8dc70ccb9
 code.cacert.org	43200	IN	SSHFP	4 2 cce03a264ec4b947d4a30ddc2b86fe80fc73d51f751baa834ff1ec848181b8eb
+code.cacert.org	43200	IN	CAA	0 issue "cacert.org"
+code.cacert.org	43200	IN	CAA	0 issue "letsencrypt.org"
 
 ; public CRL service
 crl.cacert.org	43200	IN	A	213.154.225.236