diff --git a/domains/fusion.json b/domains/fusion.json
index be7aeddf0af..1b677147c56 100644
--- a/domains/fusion.json
+++ b/domains/fusion.json
@@ -6,7 +6,11 @@
   },
   "records": {
     "CNAME": "system-4dz.pages.dev",
-    "TXT": ["google-site-verification=gTwPak7dIPqmH6Ro6cUrM9q5ZY3OtIZegGseNNxTqxU"]
+    "TXT": ["google-site-verification=gTwPak7dIPqmH6Ro6cUrM9q5ZY3OtIZegGseNNxTqxU"],
+    "CAA": [
+      { "flags": 0, "tag": "issue", "value": "pki.goog" },
+      { "flags": 0, "tag": "issue", "value": "letsencrypt.org" }
+    ]
   },
   "proxied": true
 }