ADVERT

CERT Record Checker

Display CERT records that embed public key certificates in DNS for experimental or legacy deployments.

How to use this tool

Query CERT records for the target domain or hostname.
Review certificate type, key tag, algorithm, payload, and TTL fields.
Export output for validation workflows and deployment documentation.

What to validate

Certificate type codes and algorithm compatibility with consumers.
Payload integrity and expected key identifiers before rollout.
Propagation behavior using TTL timing during certificate rotations.

Operational guidance

Some clients and resolvers have limited CERT record support.
Rotate published certificate material and clear stale DNS caches where needed.
Treat DNS-published cert data as distribution, not automatic trust.

FAQ

Which certificate formats can appear in CERT records?: CERT responses include a type code with payload data, commonly covering formats such as PKIX, SPKI, and PGP.
Does publishing CERT in DNS establish trust automatically?: No. Applications still need to validate signatures, policy, and trust chains independently.

ADVERT

DNS Record Lookup
Look up DNS A, AAAA, MX, TXT, CNAME, NS, and DNSSEC records instantly using Google's public resolver.
A Record Checker
Fetch IPv4 A records for any domain to verify hosting changes, check propagation, and troubleshoot routing or DNS misconfigurations with IPs at a glance.
AAAA Record Checker
Check AAAA records to confirm IPv6 addresses published for your domain and diagnose dual-stack issues.
MX Record Checker
List MX records to see which mail exchangers handle email for a domain and validate deliverability setups.
TXT Record Checker
Inspect TXT records for SPF, DKIM, DMARC, and verification tokens on any domain to validate email setups, third-party integrations, and deliverability.
CNAME Record Checker
Run a CNAME lookup to reveal aliases and see how hostnames map to canonical domains, CDNs, and services. Verify routing, redirects, and DNS setups during migrations.

ADVERT