Zone (*) DNSSEC - Informations Zone : (root)(root) 1 DS RR published DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=
• Status: Valid because published2 DNSKEY RR found Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
Public Key with Algorithm 8, KeyTag 47671, Flags 256
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2022, 00:00:00 +, Signature-Inception: 11.05.2022, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneZone : comcom 1 DS RR in the parent zone found DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest 4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=
1 RRSIG RR to validate DS RR found RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 27.05.2022, 05:00:00 +, Signature-Inception: 14.05.2022, 04:00:00 +, KeyTag 47671, Signer-Name: (root)
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 47671 used to validate the DS RRSet in the parent zone2 DNSKEY RR found Public Key with Algorithm 8, KeyTag 30909, Flags 257 (SEP = Secure Entry Point)
Public Key with Algorithm 8, KeyTag 37269, Flags 256
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 20.05.2022, 18:24:21 +, Signature-Inception: 05.05.2022, 18:19:21 +, KeyTag 30909, Signer-Name: com
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest "4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneZone : deebakkarthi.comdeebakkarthi.com 1 DS RR in the parent zone found DS with Algorithm 8, KeyTag 314, DigestType 2 and Digest PMgn5wAlqCSQi/wOEM1r0xJcsENo0SY5hlsRjNi1K6I=
1 RRSIG RR to validate DS RR found RRSIG-Owner deebakkarthi.com., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 21.05.2022, 05:34:13 +, Signature-Inception: 14.05.2022, 04:24:13 +, KeyTag 37269, Signer-Name: com
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 37269 used to validate the DS RRSet in the parent zone2 DNSKEY RR found Public Key with Algorithm 8, KeyTag 314, Flags 257 (SEP = Secure Entry Point)
Public Key with Algorithm 8, KeyTag 43939, Flags 256
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner deebakkarthi.com., Algorithm: 8, 2 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 314, Signer-Name: deebakkarthi.com
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 314 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 314, DigestType 2 and Digest "PMgn5wAlqCSQi/wOEM1r0xJcsENo0SY5hlsRjNi1K6I=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneRRSIG Type 1 validates the A - Result: 172.105.252.26 Validated: RRSIG-Owner deebakkarthi.com., Algorithm: 8, 2 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
RRSIG Type 16 validates the TXT - Result: v=spf1 mx a:mail.deebakkarthi.com -all Validated: RRSIG-Owner deebakkarthi.com., Algorithm: 8, 2 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
RRSIG Type 28 validates the AAAA - Result: 2400:8904:0000:0000:F03C:93FF:FE6E:128F Validated: RRSIG-Owner deebakkarthi.com., Algorithm: 8, 2 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "ev3bi4f48cq0ag59i4ivuo2hr36jsf9e" equal the hashed NSEC3-owner "ev3bi4f48cq0ag59i4ivuo2hr36jsf9e" and the hashed NextOwner "fe42kgvj2de5fc2vtstre25l6d3elpuj". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, NS, SOA, MX, TXT, AAAA, RRSIG, DNSKEY, NSEC3PARAM, CDS Validated: RRSIG-Owner ev3bi4f48cq0ag59i4ivuo2hr36jsf9e.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
Status: Good. NoData-Proof required and found. TLSA-Query (_443._tcp.deebakkarthi.com) sends a valid NSEC3 RR as result with the hashed owner name "ev3bi4f48cq0ag59i4ivuo2hr36jsf9e" (unhashed: deebakkarthi.com). So that's the Closest Encloser of the query name. Bitmap: A, NS, SOA, MX, TXT, AAAA, RRSIG, DNSKEY, NSEC3PARAM, CDS Validated: RRSIG-Owner ev3bi4f48cq0ag59i4ivuo2hr36jsf9e.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
Status: Good. NoData-Proof required and found. TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "t3am9p6af07vqccg55oj88f1jfmgduom" (unhashed: _tcp.deebakkarthi.com) with the owner "p8teej91jtciul1qc8m10u84ndro9ovk" and the NextOwner "3tfh5fqrac3bb88v14qmur9ubd4c22on". So that NSEC3 confirms the not-existence of the Next Closer Name. TLSA-Query (_443._tcp.deebakkarthi.com) sends a valid NSEC3 RR as result with the owner name "p8teej91jtciul1qc8m10u84ndro9ovk" greater the NextOwner-Name "3tfh5fqrac3bb88v14qmur9ubd4c22on", so the NSEC3 covers the end of the zone. The hashed query name "ph4iapud5i65773dtvq8ql9eia8i7na9" comes after the hashed Owner, so the zone confirmes the not-existence of that TLSA RR.Bitmap: TXT, RRSIG Validated: RRSIG-Owner p8teej91jtciul1qc8m10u84ndro9ovk.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
Status: Good. NoData-Proof required and found. TLSA-Query sends a valid NSEC3 RR as result with the hashed owner name "it2eohdvk6j3p7bbpdnc4at5t5mptqg3" (unhashed: *.deebakkarthi.com) as the Wildcard-Expansion of the Closest Encloser of the query name "ph4iapud5i65773dtvq8ql9eia8i7na9". So the Wildcard-Expansion of the Closest Encloser confirms that the query name is generated via wildcard expansion (NoError instead of NXDomain). Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner it2eohdvk6j3p7bbpdnc4at5t5mptqg3.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
Status: Good. NoData-Proof required and found. CAA-Query sends a valid NSEC3 RR as result with the hashed query name "ev3bi4f48cq0ag59i4ivuo2hr36jsf9e" equal the hashed NSEC3-owner "ev3bi4f48cq0ag59i4ivuo2hr36jsf9e" and the hashed NextOwner "fe42kgvj2de5fc2vtstre25l6d3elpuj". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, NS, SOA, MX, TXT, AAAA, RRSIG, DNSKEY, NSEC3PARAM, CDS Validated: RRSIG-Owner ev3bi4f48cq0ag59i4ivuo2hr36jsf9e.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
Status: Good. NoData-Proof required and found. Zone : www.deebakkarthi.comwww.deebakkarthi.com 0 DS RR in the parent zone found DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "fe42kgvj2de5fc2vtstre25l6d3elpuj" between the hashed NSEC3-owner "fe42kgvj2de5fc2vtstre25l6d3elpuj" and the hashed NextOwner "it2eohdvk6j3p7bbpdnc4at5t5mptqg3". So the parent zone confirmes the not-existence of a DS RR.Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner fe42kgvj2de5fc2vtstre25l6d3elpuj.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
RRSIG Type 1 validates the A - Result: 172.105.252.26 Validated: RRSIG-Owner www.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
RRSIG Type 28 validates the AAAA - Result: 2400:8904:0000:0000:F03C:93FF:FE6E:128F Validated: RRSIG-Owner www.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "fe42kgvj2de5fc2vtstre25l6d3elpuj" equal the hashed NSEC3-owner "fe42kgvj2de5fc2vtstre25l6d3elpuj" and the hashed NextOwner "it2eohdvk6j3p7bbpdnc4at5t5mptqg3". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner fe42kgvj2de5fc2vtstre25l6d3elpuj.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
Status: Good. NoData-Proof required and found. TXT-Query sends a valid NSEC3 RR as result with the hashed query name "fe42kgvj2de5fc2vtstre25l6d3elpuj" equal the hashed NSEC3-owner "fe42kgvj2de5fc2vtstre25l6d3elpuj" and the hashed NextOwner "it2eohdvk6j3p7bbpdnc4at5t5mptqg3". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner fe42kgvj2de5fc2vtstre25l6d3elpuj.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
Status: Good. NoData-Proof required and found. TLSA-Query (_443._tcp.www.deebakkarthi.com) sends a valid NSEC3 RR as result with the hashed owner name "fe42kgvj2de5fc2vtstre25l6d3elpuj" (unhashed: www.deebakkarthi.com). So that's the Closest Encloser of the query name. TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "io0q04ltk7rj4g1mejs7qhv6nfnqf4p5" (unhashed: *.www.deebakkarthi.com) with the owner "fe42kgvj2de5fc2vtstre25l6d3elpuj" and the NextOwner "it2eohdvk6j3p7bbpdnc4at5t5mptqg3". So that NSEC3 confirms the not-existence of the Wildcard expansion. Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner fe42kgvj2de5fc2vtstre25l6d3elpuj.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
Status: Good. NXDomain-Proof required and found. TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "9e96u4ha74vf34n3s2mloogk837he516" (unhashed: _tcp.www.deebakkarthi.com) with the owner "3tfh5fqrac3bb88v14qmur9ubd4c22on" and the NextOwner "ev3bi4f48cq0ag59i4ivuo2hr36jsf9e". So that NSEC3 confirms the not-existence of the Next Closer Name. Bitmap: TXT, RRSIG Validated: RRSIG-Owner 3tfh5fqrac3bb88v14qmur9ubd4c22on.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
Status: Good. NXDomain-Proof required and found. CAA-Query sends a valid NSEC3 RR as result with the hashed query name "fe42kgvj2de5fc2vtstre25l6d3elpuj" equal the hashed NSEC3-owner "fe42kgvj2de5fc2vtstre25l6d3elpuj" and the hashed NextOwner "it2eohdvk6j3p7bbpdnc4at5t5mptqg3". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner fe42kgvj2de5fc2vtstre25l6d3elpuj.deebakkarthi.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 03.06.2022, 08:42:11 +, Signature-Inception: 12.05.2022, 08:42:11 +, KeyTag 43939, Signer-Name: deebakkarthi.com
Status: Good. NoData-Proof required and found.