A TLSA certificate-association record (DANE, RFC 6698).
The association data as a lowercase hex string.
Matching type (0=exact, 1=SHA-256, 2=SHA-512).
Selector (0=full cert, 1=SubjectPublicKeyInfo).
Certificate usage (0-3).
A TLSA certificate-association record (DANE, RFC 6698).