Zone (*) DNSSEC - Informations Zone : (root)(root) 1 DS RR published DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=
• Status: Valid because published2 DNSKEY RR found Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
Public Key with Algorithm 8, KeyTag 47671, Flags 256
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2022, 00:00:00 +, Signature-Inception: 11.05.2022, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneZone : sese 1 DS RR in the parent zone found DS with Algorithm 8, KeyTag 59407, DigestType 2 and Digest Z6jgb8792Tl/d/JsQa3k7BQvKZvPoYJ/Dvj9h/L2MCI=
1 RRSIG RR to validate DS RR found RRSIG-Owner se., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 27.05.2022, 17:00:00 +, Signature-Inception: 14.05.2022, 16:00:00 +, KeyTag 47671, Signer-Name: (root)
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 47671 used to validate the DS RRSet in the parent zone2 DNSKEY RR found Public Key with Algorithm 8, KeyTag 22966, Flags 256
Public Key with Algorithm 8, KeyTag 59407, Flags 257 (SEP = Secure Entry Point)
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner se., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 27.05.2022, 05:23:00 +, Signature-Inception: 14.05.2022, 09:10:50 +, KeyTag 59407, Signer-Name: se
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 59407 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 59407, DigestType 2 and Digest "Z6jgb8792Tl/d/JsQa3k7BQvKZvPoYJ/Dvj9h/L2MCI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneZone : bergsmo.sebergsmo.se 1 DS RR in the parent zone found DS with Algorithm 13, KeyTag 61481, DigestType 2 and Digest AUec5B+A5TreligV2Zzl6a6pnSdX+ad23beLEUXoYRo=
1 RRSIG RR to validate DS RR found RRSIG-Owner bergsmo.se., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 26.05.2022, 05:38:55 +, Signature-Inception: 13.05.2022, 00:10:50 +, KeyTag 22966, Signer-Name: se
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 22966 used to validate the DS RRSet in the parent zone2 DNSKEY RR found Public Key with Algorithm 13, KeyTag 20339, Flags 256
Public Key with Algorithm 13, KeyTag 61481, Flags 257 (SEP = Secure Entry Point)
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner bergsmo.se., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 61481, Signer-Name: bergsmo.se
• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 61481 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 61481, DigestType 2 and Digest "AUec5B+A5TreligV2Zzl6a6pnSdX+ad23beLEUXoYRo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneZone : cloud.bergsmo.secloud.bergsmo.se 0 DS RR in the parent zone found DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "lm968lkkqnat3de6rc1rbmjmciotcft9" between the hashed NSEC3-owner "lm968lkkqnat3de6rc1rbmjmciotcft9" and the hashed NextOwner "lm968lkkqnat3de6rc1rbmjmciotcfta". So the parent zone confirmes the not-existence of a DS RR.Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner lm968lkkqnat3de6rc1rbmjmciotcft9.bergsmo.se., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
0 DNSKEY RR found RRSIG Type 1 validates the A - Result: 77.111.240.33 Validated: RRSIG-Owner cloud.bergsmo.se., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
RRSIG Type 28 validates the AAAA - Result: 2A02:2350:0005:0108:80F8:DBB0:C810:5BAF Validated: RRSIG-Owner cloud.bergsmo.se., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "lm968lkkqnat3de6rc1rbmjmciotcft9" equal the hashed NSEC3-owner "lm968lkkqnat3de6rc1rbmjmciotcft9" and the hashed NextOwner "lm968lkkqnat3de6rc1rbmjmciotcfta". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner lm968lkkqnat3de6rc1rbmjmciotcft9.bergsmo.se., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
Status: Good. NoData-Proof required and found. TXT-Query sends a valid NSEC3 RR as result with the hashed query name "lm968lkkqnat3de6rc1rbmjmciotcft9" equal the hashed NSEC3-owner "lm968lkkqnat3de6rc1rbmjmciotcft9" and the hashed NextOwner "lm968lkkqnat3de6rc1rbmjmciotcfta". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner lm968lkkqnat3de6rc1rbmjmciotcft9.bergsmo.se., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
Status: Good. NoData-Proof required and found. TLSA-Query (_443._tcp.cloud.bergsmo.se) sends a valid NSEC3 RR as result with the hashed query name "5jjp2cg8tfit7vfvvgn6ttqcokm3rn3s" equal the hashed NSEC3-owner "5jjp2cg8tfit7vfvvgn6ttqcokm3rn3s" and the hashed NextOwner "5jjp2cg8tfit7vfvvgn6ttqcokm3rn3t". So the zone confirmes the not-existence of that TLSA RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner 5jjp2cg8tfit7vfvvgn6ttqcokm3rn3s.bergsmo.se., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
Status: Good. NoData-Proof required and found. CAA-Query sends a valid NSEC3 RR as result with the hashed query name "lm968lkkqnat3de6rc1rbmjmciotcft9" equal the hashed NSEC3-owner "lm968lkkqnat3de6rc1rbmjmciotcft9" and the hashed NextOwner "lm968lkkqnat3de6rc1rbmjmciotcfta". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner lm968lkkqnat3de6rc1rbmjmciotcft9.bergsmo.se., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
Status: Good. NoData-Proof required and found. Zone : www.cloud.bergsmo.sewww.cloud.bergsmo.se 0 DS RR in the parent zone found DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "nnir7a1cd094hoshoa7esll4p47s6nhm" between the hashed NSEC3-owner "nnir7a1cd094hoshoa7esll4p47s6nhm" and the hashed NextOwner "nnir7a1cd094hoshoa7esll4p47s6nhn". So the parent zone confirmes the not-existence of a DS RR.Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner nnir7a1cd094hoshoa7esll4p47s6nhm.bergsmo.se., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
RRSIG Type 1 validates the A - Result: 77.111.240.33 Validated: RRSIG-Owner www.cloud.bergsmo.se., Algorithm: 13, 4 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
RRSIG Type 28 validates the AAAA - Result: 2A02:2350:0005:0108:80F8:DBB0:C810:5BAF Validated: RRSIG-Owner www.cloud.bergsmo.se., Algorithm: 13, 4 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "nnir7a1cd094hoshoa7esll4p47s6nhm" equal the hashed NSEC3-owner "nnir7a1cd094hoshoa7esll4p47s6nhm" and the hashed NextOwner "nnir7a1cd094hoshoa7esll4p47s6nhn". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner nnir7a1cd094hoshoa7esll4p47s6nhm.bergsmo.se., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
Status: Good. NoData-Proof required and found. TXT-Query sends a valid NSEC3 RR as result with the hashed query name "nnir7a1cd094hoshoa7esll4p47s6nhm" equal the hashed NSEC3-owner "nnir7a1cd094hoshoa7esll4p47s6nhm" and the hashed NextOwner "nnir7a1cd094hoshoa7esll4p47s6nhn". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner nnir7a1cd094hoshoa7esll4p47s6nhm.bergsmo.se., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
Status: Good. NoData-Proof required and found. TLSA-Query (_443._tcp.www.cloud.bergsmo.se) sends a valid NSEC3 RR as result with the hashed query name "kosiejgnea20k700qok0js3r387ieb9v" equal the hashed NSEC3-owner "kosiejgnea20k700qok0js3r387ieb9v" and the hashed NextOwner "kosiejgnea20k700qok0js3r387ieba0". So the zone confirmes the not-existence of that TLSA RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner kosiejgnea20k700qok0js3r387ieb9v.bergsmo.se., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
Status: Good. NoData-Proof required and found. CAA-Query sends a valid NSEC3 RR as result with the hashed query name "nnir7a1cd094hoshoa7esll4p47s6nhm" equal the hashed NSEC3-owner "nnir7a1cd094hoshoa7esll4p47s6nhm" and the hashed NextOwner "nnir7a1cd094hoshoa7esll4p47s6nhn". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner nnir7a1cd094hoshoa7esll4p47s6nhm.bergsmo.se., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 26.05.2022, 00:00:00 +, Signature-Inception: 05.05.2022, 00:00:00 +, KeyTag 20339, Signer-Name: bergsmo.se
Status: Good. NoData-Proof required and found.