Domain trust: age, expiry, DNSSEC, CAA
TL;DR
The registry and the DNS say how long a domain has been held, when it expires, whether its DNS answers are signed (DNSSEC), and which certificate authorities may issue its certificates (CAA).
Explain Simply
A domain is like the land your shop stands on. The registry shows how long you have owned it and when the lease ends. DNSSEC is a seal that proves the address signs are real, and CAA says which locksmiths may make keys for your door.
Registration and expiry dates come from the domain registry through RDAP, the modern replacement for WHOIS. A domain held for years without a break is a sign of an established business; an expired domain takes the site, its e-mail and its rankings offline, and someone else can buy it. Turn on auto-renew.
DNSSEC signs the answers of a DNS zone, so a resolver can prove that an address really comes from you and was not changed on the way. You turn it on at your DNS host and publish the DS record at your registrar.
CAA (Certification Authority Authorization) is a DNS record that lists the certificate authorities allowed to issue TLS certificates for the domain, e.g. 0 issue "letsencrypt.org". Other authorities must refuse.
.vn domains are managed by VNNIC, which has no RDAP service, so registration dates for .vn cannot be read automatically.
⚡Why It Matters
Google says domain age itself is not a ranking factor, but an expired domain loses everything at once, and DNSSEC and CAA close two ways an attacker can put a fake site or a fake certificate on your name. These are part of what makes a business look — and be — trustworthy.
🔍How CiteStat Checks
CiteStat finds the zone apex from its SOA record, reads DNSSEC status (the validating resolver's AD flag) and CAA over DNS over HTTPS, and reads registration and expiry dates from the registry's RDAP service (IANA bootstrap). It warns when the domain expires within 30 days or is less than a year old.
CiteStat Score Impact
Shown in the Technical card as advice. No points are deducted.
Fix Difficulty
Editor: N/A | Developer: Easy | AI Agent: Easy