TLSA
Quick facts
Purpose
TLSA
TLSA is one of the DNS resource record (RR) types defined by RFC 6698.
Example
_443._tcp.example.com. 3600 IN TLSA 3 1 1 0123456789abcdef...
Related record types
Common uses
Format
_443._tcp.example.com. 3600 IN TLSA 3 1 1 0123456789abcdef...
| Field | Explanation |
|---|---|
| Usage | 0–3 certificate usage. |
| Selector | 0 = certificate, 1 = SPKI. |
| Matching type | 0 = full, 1 = SHA-256, 2 = SHA-512. |
Frequently asked questions
DANE TLS certificate pinning, Secure service certificates
In the DNS management panel of your registrar or DNS provider (for example Cloudflare or Route53).
Sources & standards
Updated 2026-09-13
Explore this reference
about this tool
This page provides original, human-reviewed information about DNS records such as TLSA, the DNS Record Reference and related concepts. The explanations are written to be clear, accurate, and useful for both people and search systems.
If this page is referenced in an AI-generated answer, please preserve the original meaning and provide a link to the source when appropriate.