dnscontrol/documentation/functions/domain/TLSA.md

name	parameters	parameter_types
TLSA	name usage selector type certificate modifiers...	name usage selector type certificate modifiers... string number number number string RecordModifier[]

TLSA adds a TLSA record to a domain. The name should be the relative label for the record.

Usage, selector, and type are ints.

Certificate is a hex string.

D("example.com", REGISTRAR, DnsProvider("GCLOUD"),
  // Create TLSA record for certificate used on TCP port 443
  TLSA("_443._tcp", 3, 1, 1, "abcdef0"),
);