CERT Record

A CERT record stores a certificate or a certificate revocation list directly in DNS, as defined in RFC 4398. This lookup shows any CERT records published on a name.

When to use this: You are verifying a deployment that distributes PGP keys or X.509 certificates through DNS.

Example:

About the CERT Record

Check for CERT records (RFC 4398), which store certificates or certificate revocation lists in DNS.

FAQ

Is this the same as a TLS certificate check?
No. To inspect the certificate a website serves, use the HTTPS / TLS check.
What about DANE?
DANE uses TLSA records, not CERT records.