Free DNS TLSA Record Checker Tool

Look up a host's published TLSA records and compare them with the certificate data returned by the check. TLSA records bind a TLS certificate or public key to a DNS name when the zone is protected by DNSSEC.

What the TLSA check shows

Published values: Review usage, selector, matching type, and certificate association data.
Certificate comparison: See whether the published association matches the certificate returned during the check.
DNS context: Review the authoritative nameservers returned for the queried host.

What is a TLSA record?

A TLSA record publishes a certificate or public-key association in DNS. DANE-aware clients can use it together with DNSSEC validation to verify the TLS endpoint independently of, or in addition to, the public certificate-authority system.

Benefits of Regular TLSA Record Checks:

Enhanced Security: Regular checks help maintain secure and authenticated TLS connections.
Increased Trust: Proper TLSA records build trust among users and clients by ensuring secure communications.
Protection Against Cyber Threats: Helps in defending against common security threats like interception and tampering.

How to manage TLSA records in our DNS interface

Create and review TLSA records alongside the other records in your DNS zone.