DNS Insight
LoginRegister

TLSA/DANE

TLSA/DANE Lookup - DNS-based Certificate Auth

Look up TLSA records for DANE (DNS-based Authentication of Named Entities) to verify TLS certificates.

How It Works

TLSA records are published at _port._protocol.domain (e.g., _443._tcp.example.com for HTTPS). They contain certificate constraints that clients can verify against the actual certificate presented.

Understanding Results

Results show TLSA records with usage type (how to match), selector (what to match), and matching type (how to verify). DANE requires DNSSEC to be secure.