Zone (*) | DNSSEC - Informations |
---|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 3 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 5613, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20038, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 11.07.2024, 00:00:00 +, Signature-Inception: 20.06.2024, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: wiki
|
|
wiki
| 1 DS RR in the parent zone found
|
|
|
|
|
| DS with Algorithm 8, KeyTag 27157, DigestType 2 and Digest xyR4pJhqUzD7IaLkJ4I1UxMdcMOZ3bz+3uOVEDyoVD0=
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner wiki., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 05.07.2024, 05:00:00 +, Signature-Inception: 22.06.2024, 04:00:00 +, KeyTag 5613, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 5613 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 3 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 10870, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 27157, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 57159, Flags 256
|
|
|
|
|
| 2 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner wiki., Algorithm: 8, 1 Labels, original TTL: 7200 sec, Signature-expiration: 17.07.2024, 03:45:47 +, Signature-Inception: 17.06.2024, 02:54:33 +, KeyTag 27157, Signer-Name: wiki
|
|
|
|
|
| RRSIG-Owner wiki., Algorithm: 8, 1 Labels, original TTL: 7200 sec, Signature-expiration: 17.07.2024, 03:45:47 +, Signature-Inception: 17.06.2024, 02:54:33 +, KeyTag 57159, Signer-Name: wiki
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 27157 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57159 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 27157, DigestType 2 and Digest "xyR4pJhqUzD7IaLkJ4I1UxMdcMOZ3bz+3uOVEDyoVD0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: matematyka.wiki
|
|
matematyka.wiki
| 1 DS RR in the parent zone found
|
|
|
|
|
| DS with Algorithm 8, KeyTag 18865, DigestType 2 and Digest JIB3WEpLWRnRU6kRfJtF7OyrcQ75CUnH3NzUtK9AAXo=
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner matematyka.wiki., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 16.07.2024, 20:27:55 +, Signature-Inception: 16.06.2024, 20:13:43 +, KeyTag 57159, Signer-Name: wiki
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57159 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 18865, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 59175, Flags 256
|
|
|
|
|
| 2 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner matematyka.wiki., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 18865, Signer-Name: matematyka.wiki
|
|
|
|
|
| RRSIG-Owner matematyka.wiki., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 18865 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 59175 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 18865, DigestType 2 and Digest "JIB3WEpLWRnRU6kRfJtF7OyrcQ75CUnH3NzUtK9AAXo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 91.121.168.46
Validated: RRSIG-Owner matematyka.wiki., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| RRSIG Type 16 validates the TXT - Result: 1|www.matematyka.wiki
google-site-verification=l_TVCOISFUNWk7RQvYETLzE9MNNlXv0rH9G4BpO-eDo
Validated: RRSIG-Owner matematyka.wiki., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| RRSIG Type 257 validates the CAA - Result: 5|iodefmailto:brylka@jelenia.com
5|issueletsencrypt.org
Validated: RRSIG-Owner matematyka.wiki., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "80eul3bhjmd0bnh97h8t4o9mug4ogvib" equal the hashed NSEC3-owner "80eul3bhjmd0bnh97h8t4o9mug4ogvib" and the hashed NextOwner "hdnruq23ic43ja9aaiiima38nfls2i96". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM, CAA Validated: RRSIG-Owner 80eul3bhjmd0bnh97h8t4o9mug4ogvib.matematyka.wiki., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
|
|
| AAAA-Query sends a valid NSEC3 RR as result with the hashed query name "80eul3bhjmd0bnh97h8t4o9mug4ogvib" equal the hashed NSEC3-owner "80eul3bhjmd0bnh97h8t4o9mug4ogvib" and the hashed NextOwner "hdnruq23ic43ja9aaiiima38nfls2i96". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM, CAA Validated: RRSIG-Owner 80eul3bhjmd0bnh97h8t4o9mug4ogvib.matematyka.wiki., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
|
|
| TLSA-Query (_443._tcp.matematyka.wiki) sends a valid NSEC3 RR as result with the hashed owner name "80eul3bhjmd0bnh97h8t4o9mug4ogvib" (unhashed: matematyka.wiki). So that's the Closest Encloser of the query name. TLSA-Query (_443._tcp.matematyka.wiki) sends a valid NSEC3 RR as result with the hashed query name "9fda9pj61ocqpocopajl9g531ut7af7t" between the hashed NSEC3-owner "80eul3bhjmd0bnh97h8t4o9mug4ogvib" and the hashed NextOwner "hdnruq23ic43ja9aaiiima38nfls2i96". So the zone confirmes the not-existence of that TLSA RR.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM, CAA Validated: RRSIG-Owner 80eul3bhjmd0bnh97h8t4o9mug4ogvib.matematyka.wiki., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
|
|
| TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "6h8908u6rqnv2b58lsjrgug2rmoh22bp" (unhashed: _tcp.matematyka.wiki) with the owner "telig4dkmlgssmhq7btg71m7ooeghm8s" and the NextOwner "80eul3bhjmd0bnh97h8t4o9mug4ogvib". So that NSEC3 confirms the not-existence of the Next Closer Name.
Bitmap: A, MX, TXT, RRSIG Validated: RRSIG-Owner telig4dkmlgssmhq7btg71m7ooeghm8s.matematyka.wiki., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
|
|
| TLSA-Query sends a valid NSEC3 RR as result with the hashed owner name "sjjbohkj8bn9ffh9528b1p0hfqal62r7" (unhashed: *.matematyka.wiki) as the Wildcard-Expansion of the Closest Encloser of the query name "9fda9pj61ocqpocopajl9g531ut7af7t". So the Wildcard-Expansion of the Closest Encloser confirms that the query name is generated via wildcard expansion (NoError instead of NXDomain).
Bitmap: A, RRSIG Validated: RRSIG-Owner sjjbohkj8bn9ffh9528b1p0hfqal62r7.matematyka.wiki., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
Zone: www.matematyka.wiki
|
|
www.matematyka.wiki
| 0 DS RR in the parent zone found
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 91.121.168.46
Validated: RRSIG-Owner www.matematyka.wiki., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| RRSIG Type 16 validates the TXT - Result: l|pl
3|welcome
Validated: RRSIG-Owner www.matematyka.wiki., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "telig4dkmlgssmhq7btg71m7ooeghm8s" equal the hashed NSEC3-owner "telig4dkmlgssmhq7btg71m7ooeghm8s" and the hashed NextOwner "80eul3bhjmd0bnh97h8t4o9mug4ogvib". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, MX, TXT, RRSIG Validated: RRSIG-Owner telig4dkmlgssmhq7btg71m7ooeghm8s.matematyka.wiki., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
|
|
| AAAA-Query sends a valid NSEC3 RR as result with the hashed query name "telig4dkmlgssmhq7btg71m7ooeghm8s" equal the hashed NSEC3-owner "telig4dkmlgssmhq7btg71m7ooeghm8s" and the hashed NextOwner "80eul3bhjmd0bnh97h8t4o9mug4ogvib". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, MX, TXT, RRSIG Validated: RRSIG-Owner telig4dkmlgssmhq7btg71m7ooeghm8s.matematyka.wiki., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
|
|
| TLSA-Query (_443._tcp.www.matematyka.wiki) sends a valid NSEC3 RR as result with the hashed owner name "telig4dkmlgssmhq7btg71m7ooeghm8s" (unhashed: www.matematyka.wiki). So that's the Closest Encloser of the query name. TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "tr85gdba6n6jgf5b8fervrrq732q0ene" (unhashed: *.www.matematyka.wiki) with the owner "telig4dkmlgssmhq7btg71m7ooeghm8s" and the NextOwner "80eul3bhjmd0bnh97h8t4o9mug4ogvib". So that NSEC3 confirms the not-existence of the Wildcard expansion. TLSA-Query (_443._tcp.www.matematyka.wiki) sends a valid NSEC3 RR as result with the owner name "telig4dkmlgssmhq7btg71m7ooeghm8s" greater the NextOwner-Name "80eul3bhjmd0bnh97h8t4o9mug4ogvib", so the NSEC3 covers the end of the zone. The hashed query name "6pqihk0namoed019u8ranc5rhmoarbua" comes before the hashed NextOwner, so the zone confirmes the not-existence of that TLSA RR.
Bitmap: A, MX, TXT, RRSIG Validated: RRSIG-Owner telig4dkmlgssmhq7btg71m7ooeghm8s.matematyka.wiki., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| Status: Good. NXDomain-Proof required and found.
|
|
|
|
|
| TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "8s8mbn4pp4h59q0mif81dkik6ln1mbra" (unhashed: _tcp.www.matematyka.wiki) with the owner "80eul3bhjmd0bnh97h8t4o9mug4ogvib" and the NextOwner "hdnruq23ic43ja9aaiiima38nfls2i96". So that NSEC3 confirms the not-existence of the Next Closer Name.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM, CAA Validated: RRSIG-Owner 80eul3bhjmd0bnh97h8t4o9mug4ogvib.matematyka.wiki., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| Status: Good. NXDomain-Proof required and found.
|
|
|
|
|
| CAA-Query sends a valid NSEC3 RR as result with the hashed query name "telig4dkmlgssmhq7btg71m7ooeghm8s" equal the hashed NSEC3-owner "telig4dkmlgssmhq7btg71m7ooeghm8s" and the hashed NextOwner "80eul3bhjmd0bnh97h8t4o9mug4ogvib". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, MX, TXT, RRSIG Validated: RRSIG-Owner telig4dkmlgssmhq7btg71m7ooeghm8s.matematyka.wiki., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 09.07.2024, 08:58:16 +, Signature-Inception: 09.06.2024, 08:58:16 +, KeyTag 59175, Signer-Name: matematyka.wiki
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|