The DNS Studio story
DNS Studio builds focused tools for checking the technical signals behind trusted domains. It began with dns.studio and grew into a family of six standalone tools that share one design system, one calm voice, and one idea: clear tools for trusted domains.
Each tool keeps its own strong domain and identity, but they all sit between raw technical tooling and approachable explanation. Not a glossy marketing platform, not a dense sysadmin-only console — a practical studio for checking how internet infrastructure behaves.
What TLS Studio does
TLS Studio focuses on the protocol level: the certificates, chains, handshakes, and headers behind HTTPS. Test a domain's TLS configuration, decode an X.509 certificate, generate a Certificate Signing Request in your browser, visualise a certificate chain from leaf to root, and generate the security headers your server should send. Everything that can run client-side does, so private keys and certificate data never leave your device.
Prefer a beginner-friendly certificate check — is it valid, when does it expire — without the protocol detail? That is SSL Studio, our sibling tool.
One studio. Six focused tools.
DNS Studio builds focused tools for checking DNS, mail authentication, TLS, SSL, and domain trust.
- DNS Studio dns.studio Check records, nameservers, propagation, and common configuration issues.
- DNSSEC Studio dnssec.studio Check signing status, DS records, DNSKEYs, and validation chains.
- DKIM Studio dkim.studio Find DKIM records, inspect keys, and check email signing configuration.
- BIMI Studio bimi.studio Check BIMI records, logo requirements, and certificate signals.
- TLS Studio tls.studio Inspect TLS versions, certificates, chains, and configuration.
- SSL Studio ssl.studio Check SSL certificate status, expiry, and browser-facing trust.
- Propagation Studio propagation.studio See how a DNS change has spread worldwide, checked live from dozens of locations.
- MTA-STS Studio mtasts.studio Check MTA-STS policies and TLS-RPT reporting that protect inbound mail in transit.
- HSTS Studio hsts.studio Check your HSTS header and whether the domain qualifies for the browser preload list.
- STARTTLS Studio starttls.studio Test whether a mail server offers STARTTLS and negotiates a trusted, modern connection.
- CNAME Studio cname.studio Follow CNAME chains to their final answer, and check apex-alias and flattening setups.
- Redirects Studio redirects.studio Trace every hop of an HTTP redirect chain, with status codes, timing and the final URL.
Privacy first
No logins, no accounts, and no tracking of the certificates or domains you check. The browser-based tools process everything locally; the two live checks (HTTPS testing and certificate-chain fetching) only make the request you ask for and store nothing. See our privacy policy for the detail.