Look up a domain's A, CNAME, TXT and CAA records to confirm a validation record is live and see which CAs are allowed to issue.