USC/ISI’s root service provides DNS over TLS support to b.root-servers.net. The Certificate Authority (CA) we use to anchor our PKIX (X.509) certificates can now be downloaded from our TLS web page.