Generate a TLSA record for DANE

Scroll down to use this service!

TLSA option registrations

Confirm service:

The domain name will be returned from your certificate!

Usage:
  • PKIX-TA : is the constraint on the 'CA
  • PKIX-EE : is the constraint on the certificate
  • DANE-TA : ensures that the CA is compliant, at the DNS level
  • DANE-EE : ensures the conformity of your service certificate, by your DNS
  • CERT : uses the complete certificate
  • SPKI : uses the public key linked to the certificate
Match:
  • FULL : does not use hash
  • SHA256 : uses hash based on algo SHA256
  • SHA512 : uses hash based on algo SHA512
Enter your x509 certificate: