Non-existent "TLSA Records" (DANE) for naked domain name ""

I wonder if there is any chance to add certificate that would correspond to TLSA record for the naked domain name.

I am using ADD-ON in Firefox that would display if DNSSEC/TLSA are set properly.

But at the moment when I go to “” DNSSEC and TLSA are set properly,
but when I go to “” (which is easier) then I would get “Non-existent TLSA Record”.

It is shorter to type “” rather than “”

So would it be possible to create as well TLSA record for naked domain name “”?
Is it possible to create TLSA record for naked domain name “”?

I found this article
that explains how to generate DNS TLSA records (DANE)

but when looking at the certificate /home/user-data/ssl/
there is two in that file, which cert is it, the top one or bottom?

This topic was automatically closed after 61 days. New replies are no longer allowed.