dns

Generate a DANE TLSA record

Hash a CERTIFICATE or SubjectPublicKeyInfo PUBLIC KEY PEM block into a TLSA record. Private keys and unsupported PEM labels are rejected. Profile 3 1 1 is recommended for SMTP; DANE requires a DNSSEC-signed zone.

post/dns/tlsa/generate

Request

  • Base URL: https://intodns.ai/api
  • URL: https://intodns.ai/api/dns/tlsa/generate
  • Auth: none required

Request body

pemstring required
usage0 | 1 | 2 | 3
selector0 | 1
matching0 | 1 | 2
hoststring
portinteger

Example request

{
  "host": "mail.example.com"
}

Response

Generated TLSA record, hash, decoded profile, warnings, and DNS entry

object required

Changes

No recorded changes to this operation across all 1 revision of this API.