See which certificate authorities are allowed to issue for a domain.
CAA Record Checker on RunTheTests — free browser-based connection tools, no sign-up.