3.8 Saving Certificates to DNS
RFC 2538 specifies the method used for saving certificates and CRL in DNS. Certificates and CRL are saved in CERT records. Saving certificates and CRL according to X.509 as well as saving PGP and SPKI certificates is supported. It is important to stress that DNS here is aimed at distributing the certificates and CRL. CERT records are not aimed at securing DNS.