CERT record definition
The CERT, or certificate, record is a DNS record type designed to store cryptographic certificates, such as TLS or S/MIME, for authentication purposes. This way, domains can associate certificates directly with their DNS data.
CERT records help distribute and verify digital certificates, and allow data to be automatically retrieved and verified to ensure secure communications. While these records offer a useful way to enhance security, their adoption has been limited due to more effective alternatives like Certificate Transparency and ACME protocols.
Other types of DNS records:
DNS records such as, CERT, provide different types of information and help the DNS services function properly. Other types of DNS records include:
- LOC record. An informational DNS record that specifies the geographical location of a domain or server, providing metadata about domains and hosts.
- RP record. Another informational DNS record that provides contact information for the responsible person managing a domain.
- NSEC record. A security DNS record used in DNSSEC to prove the nonexistence of specific DNS records.
- CAA record. Specifies which certificate authorities can issue certificates for a domain. Unlike CERT, CAA focuses on restricting certificate issuance rather than storing them
