Generate TLS certificates from TLSA DNS records that are safe to add to a root CA trust store - View it on GitHub