Zone (*) | DNSSEC - Informations |
---|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 25266, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 12.05.2019, 00:00:00 +, Signature-Inception: 21.04.2019, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: com
|
|
com
| 1 DS RR in the parent zone found
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.05.2019, 20:00:00 +, Signature-Inception: 30.04.2019, 19:00:00 +, KeyTag 25266, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 3800, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 30909, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 07.05.2019, 18:25:33 +, Signature-Inception: 22.04.2019, 18:20:33 +, KeyTag 30909, Signer-Name: com
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest "4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: westcottproductions.com
|
|
westcottproductions.com
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "hs0rb1fbhi9sn5lfkv3pkguj5d0l9nuq" between the hashed NSEC3-owner "hs0qgmep5efm95um10i89a9gvbkcusvf" and the hashed NextOwner "hs0s1n6d75uc494ava1ip1uki76c1b0q". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner hs0qgmep5efm95um10i89a9gvbkcusvf.com., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 07.05.2019, 05:17:55 +, Signature-Inception: 30.04.2019, 04:07:55 +, KeyTag 3800, Signer-Name: com
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 31946, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 51861, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner westcottproductions.com., Algorithm: 8, 2 Labels, original TTL: 300 sec, Signature-expiration: 20.05.2019, 16:42:24 +, Signature-Inception: 28.04.2019, 16:42:24 +, KeyTag 31946, Signer-Name: westcottproductions.com
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 31946 used to validate the DNSKEY RRSet
|
|
|
|
|
| Error: DNSKEY 31946 signs DNSKEY RRset, but no confirming DS RR in the parent zone found. No chain of trust created.
|
|
|
Zone: nc.westcottproductions.com
|
|
nc.westcottproductions.com
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "lm9b3erb973vukne7qsc8kjb5m2c7ph6" between the hashed NSEC3-owner "lm9b3erb973vukne7qsc8kjb5m2c7ph6" and the hashed NextOwner "p3376sj62p58hokap2q8g0n3gm5nvr34". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A, RRSIG Validated: RRSIG-Owner lm9b3erb973vukne7qsc8kjb5m2c7ph6.westcottproductions.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 20.05.2019, 16:42:24 +, Signature-Inception: 28.04.2019, 16:42:24 +, KeyTag 51861, Signer-Name: westcottproductions.com
|
|
|
|
|
| 0 DNSKEY RR found
|
|
|
|
|
|
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 107.11.66.111
Validated: RRSIG-Owner nc.westcottproductions.com., Algorithm: 8, 3 Labels, original TTL: 60 sec, Signature-expiration: 20.05.2019, 16:42:24 +, Signature-Inception: 28.04.2019, 16:42:24 +, KeyTag 51861, Signer-Name: westcottproductions.com
|
|
|
|
|
| RRSIG Type 50, expiration 2019-05-20 16:42:24 + validates the NSEC3 RR that proves the not-existence of the CNAME RR.
Bitmap: A, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2019-05-20 16:42:24 + validates the NSEC3 RR that proves the not-existence of the TXT RR.
Bitmap: A, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2019-05-20 16:42:24 + validates the NSEC3 RR that proves the not-existence of the AAAA RR.
Bitmap: A, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2019-05-20 16:42:24 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: A, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2019-05-20 16:42:24 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: A, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2019-05-20 16:42:24 + validates the NSEC3 RR that proves the not-existence of the CAA RR.
Bitmap: A, RRSIG
|
|
|
Zone: www.nc.westcottproductions.com
|
|
www.nc.westcottproductions.com
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "edjtnujd1st4dntlsq5cpaug3c1uh77p" between the hashed NSEC3-owner "bcbrbg1sdppffh5idki2psblfjmon544" and the hashed NextOwner "hi31jnc394iqu8um92c70pnjcpn85tna". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A, RRSIG Validated: RRSIG-Owner bcbrbg1sdppffh5idki2psblfjmon544.westcottproductions.com., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 20.05.2019, 16:42:24 +, Signature-Inception: 28.04.2019, 16:42:24 +, KeyTag 51861, Signer-Name: westcottproductions.com
|