Certificate Security Articles
Use these articles when you want to understand how certificate issuance controls interact with DNS and broader security posture.
Search Articles
Start With The Right Tool
CAA Analysis
Review certificate authority authorization records and tags.
DNSSEC Checker
Check whether DNSKEY and DS records are present.
Featured Tools
Certificate Security
How Certificate Transparency Helps Find Subdomains
Learn how certificate transparency logs help find subdomains, what the data misses, and how to interpret CT-based hostname discovery safely.
What Is a Subject Alternative Name in TLS?
Learn what a subject alternative name is in a TLS certificate, why SANs matter for hostname validation, and how SAN data helps with discovery and troubleshooting.
What are CAA records?
Learn what CAA records contain, how issue and issuewild tags work, and how CAA helps control which certificate authorities can issue for your domain.