Look up TLSA DNS records for DANE (DNS-Based Authentication of Named Entities) across HTTPS, SMTP, and SMTPS services.
Enter a domain to look up DANE / TLSA records
DANE (DNS-Based Authentication of Named Entities, RFC 6698) uses DNSSEC-signed TLSA records in DNS to pin certificates for a service. Rather than relying solely on certificate authorities, DANE lets domain owners publish the exact certificate or public key hash that a client should accept. TLSA records are queried at _port._tcp.domain (e.g. _443._tcp.example.com). This checker queries HTTPS (443), SMTP (25), SMTPS (465), and submission (587) in parallel.
Sent to our server: Domain. We look it up in DNS. We connect to it. Part of this work runs on our own server. To answer a repeated check fast, we have to keep answers for 1 hour; then they are deleted. Also added to the page link, so you can share the result: Domain.