Making a DANE TLSA to work with LE

See also Please avoid “3 0 1” and “3 0 2” DANE TLSA records with LE certificates and why you might be better off with a “2 1 1” record, though “3 1 1” also works, provided the key is kept stable.

1 Like