TLSA
Quick facts
Purpose
TLSA
TLSA is one of the DNS resource record (RR) types defined by RFC 6698.
Example
_443._tcp.example.com. 3600 IN TLSA 3 1 1 0123456789abcdef...
Related record types
Common uses
Format
_443._tcp.example.com. 3600 IN TLSA 3 1 1 0123456789abcdef...
| Field | Explanation |
|---|---|
| Usage | 0–3 certificate usage. |
| Selector | 0 = certificate, 1 = SPKI. |
| Matching type | 0 = full, 1 = SHA-256, 2 = SHA-512. |
Frequently asked questions
DANE TLS certificate pinning, Secure service certificates
In the DNS management panel of your registrar or DNS provider (for example Cloudflare or Route53).
Sources & standards
Updated 2026-08-18
Explore this reference