How does Virtualmin>System Settings>Virtualmin Configuration>SSL Settings> Create TLSA DNS records for SSL certificates work?

I note that in the default template, this is set to "No"

Does it work when DNS for Domain is not enabled?

how does this function actually work?

What does it do?

Does it work when the Virtual server uses the same ip address as the host in a shared hosting environment where many domains are being hosted on the system?

Does this have any bearing on email client programs throwing errors when the host is supplying the postfix SSL cert rather than use the domains own cert?