| Zone (*) | DNSSEC - Informations |
|---|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 3 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 61809, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.11.2025, 00:00:00 +, Signature-Inception: 31.10.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: fr
|
|
fr
| 1 DS RR in the parent zone found
|
|
|
|
|
| DS with Algorithm 13, KeyTag 65381, DigestType 2 and Digest gWOr9FeSlCz07jjMox9qaDL83G1AIzj8aHgnaQxBMvY=
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner fr., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 21.11.2025, 05:00:00 +, Signature-Inception: 08.11.2025, 04:00:00 +, KeyTag 61809, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61809 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 13, KeyTag 21415, Flags 256
|
|
|
|
|
| Public Key with Algorithm 13, KeyTag 65381, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner fr., Algorithm: 13, 1 Labels, original TTL: 3600 sec, Signature-expiration: 25.11.2025, 22:48:25 +, Signature-Inception: 26.10.2025, 22:34:29 +, KeyTag 65381, Signer-Name: fr
|
|
|
|
|
| • Status: Good - Algorithmus 13 and DNSKEY with KeyTag 65381 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 65381, DigestType 2 and Digest "gWOr9FeSlCz07jjMox9qaDL83G1AIzj8aHgnaQxBMvY=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: autoloto.fr
|
|
autoloto.fr
| 1 DS RR in the parent zone found
|
|
|
|
|
| DS with Algorithm 8, KeyTag 50212, DigestType 2 and Digest Yt9CGquHynDFg+jtY4L9HlvaFtC3m9W3lGxZHuHtwIk=
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner autoloto.fr., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 18.11.2025, 05:09:28 +, Signature-Inception: 19.10.2025, 10:41:54 +, KeyTag 21415, Signer-Name: fr
|
|
|
|
|
| • Status: Good - Algorithmus 13 and DNSKEY with KeyTag 21415 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 7699, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 50212, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 2 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner autoloto.fr., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 08.12.2025, 09:13:00 +, Signature-Inception: 08.11.2025, 09:13:00 +, KeyTag 7699, Signer-Name: autoloto.fr
|
|
|
|
|
| RRSIG-Owner autoloto.fr., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 08.12.2025, 09:13:00 +, Signature-Inception: 08.11.2025, 09:13:00 +, KeyTag 50212, Signer-Name: autoloto.fr
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 7699 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 50212 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 50212, DigestType 2 and Digest "Yt9CGquHynDFg+jtY4L9HlvaFtC3m9W3lGxZHuHtwIk=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 75.2.60.5
99.83.190.102
Validated: RRSIG-Owner autoloto.fr., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 08.12.2025, 09:13:00 +, Signature-Inception: 08.11.2025, 09:13:00 +, KeyTag 7699, Signer-Name: autoloto.fr
|
|
|
|
|
| RRSIG Type 16 validates the TXT - Result: v=spf1 include:mx.ovh.com -all
Validated: RRSIG-Owner autoloto.fr., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 08.12.2025, 09:13:00 +, Signature-Inception: 08.11.2025, 09:13:00 +, KeyTag 7699, Signer-Name: autoloto.fr
|
|
|
|
|
| CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "upti7otsrf7n9d24fva6osd2q0p600kb" equal the hashed NSEC3-owner "upti7otsrf7n9d24fva6osd2q0p600kb" and the hashed NextOwner "k4tf17sfulp8eve6hu8kmmjnd3kh9u9h". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner upti7otsrf7n9d24fva6osd2q0p600kb.autoloto.fr., Algorithm: 8, 3 Labels, original TTL: 60 sec, Signature-expiration: 08.12.2025, 09:13:00 +, Signature-Inception: 08.11.2025, 09:13:00 +, KeyTag 7699, Signer-Name: autoloto.fr
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
|
|
| AAAA-Query sends a valid NSEC3 RR as result with the hashed query name "upti7otsrf7n9d24fva6osd2q0p600kb" equal the hashed NSEC3-owner "upti7otsrf7n9d24fva6osd2q0p600kb" and the hashed NextOwner "k4tf17sfulp8eve6hu8kmmjnd3kh9u9h". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner upti7otsrf7n9d24fva6osd2q0p600kb.autoloto.fr., Algorithm: 8, 3 Labels, original TTL: 60 sec, Signature-expiration: 08.12.2025, 09:13:00 +, Signature-Inception: 08.11.2025, 09:13:00 +, KeyTag 7699, Signer-Name: autoloto.fr
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
|
|
| TLSA-Query (_443._tcp.autoloto.fr) sends a valid NSEC3 RR as result with the hashed owner name "upti7otsrf7n9d24fva6osd2q0p600kb" (unhashed: autoloto.fr). So that's the Closest Encloser of the query name. TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "egm1hh0aki4qf2p8bpn8fevj60ct0bme" (unhashed: *.autoloto.fr) with the owner "upti7otsrf7n9d24fva6osd2q0p600kb" and the NextOwner "k4tf17sfulp8eve6hu8kmmjnd3kh9u9h". So that NSEC3 confirms the not-existence of the Wildcard expansion. TLSA-Query (_443._tcp.autoloto.fr) sends a valid NSEC3 RR as result with the owner name "upti7otsrf7n9d24fva6osd2q0p600kb" greater the NextOwner-Name "k4tf17sfulp8eve6hu8kmmjnd3kh9u9h", so the NSEC3 covers the end of the zone. The hashed query name "cvujjsdcip4smf306js4c4kf2l1bper4" comes before the hashed NextOwner, so the zone confirmes the not-existence of that TLSA RR.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner upti7otsrf7n9d24fva6osd2q0p600kb.autoloto.fr., Algorithm: 8, 3 Labels, original TTL: 60 sec, Signature-expiration: 08.12.2025, 09:13:00 +, Signature-Inception: 08.11.2025, 09:13:00 +, KeyTag 7699, Signer-Name: autoloto.fr
|
|
|
|
|
| Status: Good. NXDomain-Proof required and found.
|
|
|
|
|
| TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "le8ui1p1k41j24s13jpph843igl8ulif" (unhashed: _tcp.autoloto.fr) with the owner "k4tf17sfulp8eve6hu8kmmjnd3kh9u9h" and the NextOwner "upti7otsrf7n9d24fva6osd2q0p600kb". So that NSEC3 confirms the not-existence of the Next Closer Name.
Bitmap: CNAME, RRSIG Validated: RRSIG-Owner k4tf17sfulp8eve6hu8kmmjnd3kh9u9h.autoloto.fr., Algorithm: 8, 3 Labels, original TTL: 60 sec, Signature-expiration: 08.12.2025, 09:13:00 +, Signature-Inception: 08.11.2025, 09:13:00 +, KeyTag 7699, Signer-Name: autoloto.fr
|
|
|
|
|
| Status: Good. NXDomain-Proof required and found.
|
|
|
|
|
| CAA-Query sends a valid NSEC3 RR as result with the hashed query name "upti7otsrf7n9d24fva6osd2q0p600kb" equal the hashed NSEC3-owner "upti7otsrf7n9d24fva6osd2q0p600kb" and the hashed NextOwner "k4tf17sfulp8eve6hu8kmmjnd3kh9u9h". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner upti7otsrf7n9d24fva6osd2q0p600kb.autoloto.fr., Algorithm: 8, 3 Labels, original TTL: 60 sec, Signature-expiration: 08.12.2025, 09:13:00 +, Signature-Inception: 08.11.2025, 09:13:00 +, KeyTag 7699, Signer-Name: autoloto.fr
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
Zone: www.autoloto.fr
|
|
www.autoloto.fr
| 0 DS RR in the parent zone found
|
|
|
|
|
| RRSIG Type 5 validates the CNAME - Result: cosmic-eclair-495095.netlify.app
Validated: RRSIG-Owner www.autoloto.fr., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 08.12.2025, 09:13:00 +, Signature-Inception: 08.11.2025, 09:13:00 +, KeyTag 7699, Signer-Name: autoloto.fr
|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 3 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 61809, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.11.2025, 00:00:00 +, Signature-Inception: 31.10.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: app
|
|
app
| 1 DS RR in the parent zone found
|
|
|
|
|
| DS with Algorithm 8, KeyTag 23684, DigestType 2 and Digest OlzIox4CyUq6ZGGRL6u36fXjSVe7YRSlWoZNlq7DGDY=
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner app., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 21.11.2025, 05:00:00 +, Signature-Inception: 08.11.2025, 04:00:00 +, KeyTag 61809, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61809 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 23684, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 61419, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner app., Algorithm: 8, 1 Labels, original TTL: 300 sec, Signature-expiration: 27.11.2025, 05:23:43 +, Signature-Inception: 05.11.2025, 05:23:43 +, KeyTag 23684, Signer-Name: app
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 23684 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 23684, DigestType 2 and Digest "OlzIox4CyUq6ZGGRL6u36fXjSVe7YRSlWoZNlq7DGDY=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: netlify.app
|
|
netlify.app
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "haqa3ebohni63ah1pgrs4ojlotehoudk" between the hashed NSEC3-owner "haqa3ebohni63ah1pgrs4ojlotehoudk" and the hashed NextOwner "haqab329g7a8ngrrmm7br3uheqio388f". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: No Bitmap? Validated: RRSIG-Owner haqa3ebohni63ah1pgrs4ojlotehoudk.app., Algorithm: 8, 2 Labels, original TTL: 900 sec, Signature-expiration: 27.11.2025, 05:23:43 +, Signature-Inception: 05.11.2025, 05:23:43 +, KeyTag 61419, Signer-Name: app
|
|
|
|
|
| 0 DNSKEY RR found
|
|
|
|
|
|
|
|
|
Zone: cosmic-eclair-495095.netlify.app
|
|
cosmic-eclair-495095.netlify.app
| 0 DS RR in the parent zone found
|
|
|
|
|
| 0 DNSKEY RR found
|
|
|
|
|
|
|