ADVERT
📜 CERT Record Checker
Display CERT records that embed public key certificates in DNS for experimental or legacy deployments.
CERT Record Checker
Display certificate data stored directly in DNS using the CERT resource record type.
What you'll see
- Certificate type, key tag, and algorithm identifiers for each record.
- Base64-encoded certificate blobs ready for DANE, PGP, or custom tooling.
- TTL values so you can schedule rotations and cache flushes appropriately.
Common use cases
- Verify DANE or TLSA deployments that rely on certificates published in DNS.
- Distribute PGP public keys or S/MIME certificates without hosting additional infrastructure.
- Archive short-lived certificates used in experimental security projects.
DNS Resolver
Display CERT records storing public key certificates directly in DNS for experimental deployments.
Prepared query:
example.comTroubleshooting tips
- Large certificates may be split across multiple records—ensure clients can concatenate the data.
- Confirm consuming applications support the CERT type; many legacy resolvers ignore it by default.
- Rotate certificates regularly and monitor TTLs so stale credentials are not cached by recipients.
FAQ
- What certificate formats appear in CERT responses?
- DNS servers return the certificate type number (1 = PKIX, 2 = SPKI, 3 = PGP, etc.) along with the raw Base64 payload.
- Can I validate trust directly from the DNS entry?
- CERT records only publish the material. You still need to verify signatures or chain of trust within your application.
ADVERT
ADVERT