Skip to content
arcinbox.

Free CERT record lookup

Find the CERT records a domain publishes, with the type, key tag and algorithm of each certificate.

  • Free, with no signup
  • Runs in your browser

What your result means

Certificates found

The domain publishes certificates or keys in DNS, each with its type.

No certificates

The domain publishes no CERT records. Most domains do not.

Questions about the CERT lookup

What is a CERT record?

A record that stores a certificate or a key, such as an X.509 certificate or an OpenPGP key, in DNS (RFC 4398).

Is a CERT record the same as an SSL certificate?

No. A website sends its TLS certificate over the connection. CERT records are used by a few systems that look up keys in DNS.

What does the type mean?

PKIX is an X.509 certificate and PGP is an OpenPGP key. The other types are variants of these or links to them.

Found a problem? We will check the rest.

Book a deliverability audit and we will look at every domain and mailbox you send from.

Book a deliverability audit
Deliverability audit

Find out what is costing you replies.

Thirty minutes on a call. We go through your domains, mailboxes and sending with you, and name what is putting your replies at risk.

For senders on Google, Microsoft, Azure and custom SMTP

Trouble loading? Open Calendly