Zone (*) DNSSEC - Informations Zone : (root)(root) 1 DS RR published DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=
• Status: Valid because published2 DNSKEY RR found Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
Public Key with Algorithm 8, KeyTag 20826, Flags 256
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.08.2022, 00:00:00 +, Signature-Inception: 31.07.2022, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneZone : brbr 1 DS RR in the parent zone found DS with Algorithm 13, KeyTag 2471, DigestType 2 and Digest Xk81mYuPkJVX+hGcTL/cotZgom8GnvAGtAN1igfRouQ=
1 RRSIG RR to validate DS RR found RRSIG-Owner br., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 18.08.2022, 05:00:00 +, Signature-Inception: 05.08.2022, 04:00:00 +, KeyTag 20826, Signer-Name: (root)
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20826 used to validate the DS RRSet in the parent zone2 DNSKEY RR found Public Key with Algorithm 13, KeyTag 2471, Flags 257 (SEP = Secure Entry Point)
Public Key with Algorithm 13, KeyTag 65267, Flags 256
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner br., Algorithm: 13, 1 Labels, original TTL: 21600 sec, Signature-expiration: 21.08.2022, 12:00:00 +, Signature-Inception: 31.07.2022, 12:00:00 +, KeyTag 2471, Signer-Name: br
• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 2471 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 2471, DigestType 2 and Digest "Xk81mYuPkJVX+hGcTL/cotZgom8GnvAGtAN1igfRouQ=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneZone : coop.brcoop.br 1 DS RR in the parent zone found DS with Algorithm 13, KeyTag 44064, DigestType 2 and Digest gJRdOtH5G1EsW6V5vZ3OT7f9NBGrhgt2fJ8qSDuwJBA=
1 RRSIG RR to validate DS RR found RRSIG-Owner coop.br., Algorithm: 13, 2 Labels, original TTL: 21600 sec, Signature-expiration: 19.08.2022, 12:00:09 +, Signature-Inception: 05.08.2022, 11:00:09 +, KeyTag 65267, Signer-Name: br
• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 65267 used to validate the DS RRSet in the parent zone1 DNSKEY RR found Public Key with Algorithm 13, KeyTag 44064, Flags 257 (SEP = Secure Entry Point)
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner coop.br., Algorithm: 13, 2 Labels, original TTL: 21600 sec, Signature-expiration: 19.08.2022, 14:30:10 +, Signature-Inception: 05.08.2022, 13:30:10 +, KeyTag 44064, Signer-Name: coop.br
• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 44064 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 44064, DigestType 2 and Digest "gJRdOtH5G1EsW6V5vZ3OT7f9NBGrhgt2fJ8qSDuwJBA=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneZone : unimedanhanguera.coop.brunimedanhanguera.coop.br 1 DS RR in the parent zone found DS with Algorithm 7, KeyTag 17781, DigestType 1 and Digest vO8Li0EVah/RtjYNaZ4bzvAUbq4=
1 RRSIG RR to validate DS RR found RRSIG-Owner unimedanhanguera.coop.br., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 18.08.2022, 12:40:09 +, Signature-Inception: 04.08.2022, 11:40:09 +, KeyTag 44064, Signer-Name: coop.br
• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 44064 used to validate the DS RRSet in the parent zone2 DNSKEY RR found Public Key with Algorithm 7, KeyTag 17781, Flags 257 (SEP = Secure Entry Point)
Public Key with Algorithm 7, KeyTag 21053, Flags 256
2 RRSIG RR to validate DNSKEY RR found RRSIG-Owner unimedanhanguera.coop.br., Algorithm: 7, 3 Labels, original TTL: 300 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 17781, Signer-Name: unimedanhanguera.coop.br
RRSIG-Owner unimedanhanguera.coop.br., Algorithm: 7, 3 Labels, original TTL: 300 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
• Status: Good - Algorithmus 7 and DNSKEY with KeyTag 17781 used to validate the DNSKEY RRSet• Status: Good - Algorithmus 7 and DNSKEY with KeyTag 21053 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 17781, DigestType 1 and Digest "vO8Li0EVah/RtjYNaZ4bzvAUbq4=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneRRSIG Type 1 validates the A - Result: 169.62.134.71 Validated: RRSIG-Owner unimedanhanguera.coop.br., Algorithm: 7, 3 Labels, original TTL: 300 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
RRSIG Type 16 validates the TXT - Result: v=spf1 ip4:201.20.9.64/27 ip4:200.143.166.32/27 include:pensomail.com.br ~all Validated: RRSIG-Owner unimedanhanguera.coop.br., Algorithm: 7, 3 Labels, original TTL: 300 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "h8gm51ur40498a139do06t3dmttdniqv" equal the hashed NSEC3-owner "h8gm51ur40498a139do06t3dmttdniqv" and the hashed NextOwner "h8h4726t7hdtbui7udn3s88fs25ca99o". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner h8gm51ur40498a139do06t3dmttdniqv.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NoData-Proof required and found. AAAA-Query sends a valid NSEC3 RR as result with the hashed query name "h8gm51ur40498a139do06t3dmttdniqv" equal the hashed NSEC3-owner "h8gm51ur40498a139do06t3dmttdniqv" and the hashed NextOwner "h8h4726t7hdtbui7udn3s88fs25ca99o". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner h8gm51ur40498a139do06t3dmttdniqv.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NoData-Proof required and found. TLSA-Query (_443._tcp.unimedanhanguera.coop.br) sends a valid NSEC3 RR as result with the hashed owner name "h8gm51ur40498a139do06t3dmttdniqv" (unhashed: unimedanhanguera.coop.br). So that's the Closest Encloser of the query name. Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner h8gm51ur40498a139do06t3dmttdniqv.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NXDomain-Proof required and found. TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "21b0ol6g42spcse0jfbbcbko3jmhomb3" (unhashed: _tcp.unimedanhanguera.coop.br) with the owner "1id6bkh9qjnkn8ujrk7k7bl1jhfo3bg2" and the NextOwner "309adr8h3tllo5aq4qp592gnmrb32tmp". So that NSEC3 confirms the not-existence of the Next Closer Name. Bitmap: A, RRSIG Validated: RRSIG-Owner 1id6bkh9qjnkn8ujrk7k7bl1jhfo3bg2.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NXDomain-Proof required and found. TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "6h0kmitsrhgflook0lvfsm53r0qqu2oq" (unhashed: *.unimedanhanguera.coop.br) with the owner "67upse21ti9609aj0f0d80gilqhrrugc" and the NextOwner "6jnfvf9gmrf718qft0qcd9dbpu7r7r7u". So that NSEC3 confirms the not-existence of the Wildcard expansion. Bitmap: A, RRSIG Validated: RRSIG-Owner 67upse21ti9609aj0f0d80gilqhrrugc.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NXDomain-Proof required and found. CAA-Query sends a valid NSEC3 RR as result with the hashed query name "h8gm51ur40498a139do06t3dmttdniqv" equal the hashed NSEC3-owner "h8gm51ur40498a139do06t3dmttdniqv" and the hashed NextOwner "h8h4726t7hdtbui7udn3s88fs25ca99o". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner h8gm51ur40498a139do06t3dmttdniqv.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NoData-Proof required and found. Zone : www.unimedanhanguera.coop.brwww.unimedanhanguera.coop.br 0 DS RR in the parent zone found DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "7971gooseq0al20ho6s5sre6e3hjfj0n" between the hashed NSEC3-owner "7971gooseq0al20ho6s5sre6e3hjfj0n" and the hashed NextOwner "7fjcpnje7tgpv8nsi4buf1n6itg14ve9". So the parent zone confirmes the not-existence of a DS RR.Bitmap: A, RRSIG Validated: RRSIG-Owner 7971gooseq0al20ho6s5sre6e3hjfj0n.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
RRSIG Type 1 validates the A - Result: 169.62.134.71 Validated: RRSIG-Owner www.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 300 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "7971gooseq0al20ho6s5sre6e3hjfj0n" equal the hashed NSEC3-owner "7971gooseq0al20ho6s5sre6e3hjfj0n" and the hashed NextOwner "7fjcpnje7tgpv8nsi4buf1n6itg14ve9". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, RRSIG Validated: RRSIG-Owner 7971gooseq0al20ho6s5sre6e3hjfj0n.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NoData-Proof required and found. TXT-Query sends a valid NSEC3 RR as result with the hashed query name "7971gooseq0al20ho6s5sre6e3hjfj0n" equal the hashed NSEC3-owner "7971gooseq0al20ho6s5sre6e3hjfj0n" and the hashed NextOwner "7fjcpnje7tgpv8nsi4buf1n6itg14ve9". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, RRSIG Validated: RRSIG-Owner 7971gooseq0al20ho6s5sre6e3hjfj0n.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NoData-Proof required and found. AAAA-Query sends a valid NSEC3 RR as result with the hashed query name "7971gooseq0al20ho6s5sre6e3hjfj0n" equal the hashed NSEC3-owner "7971gooseq0al20ho6s5sre6e3hjfj0n" and the hashed NextOwner "7fjcpnje7tgpv8nsi4buf1n6itg14ve9". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, RRSIG Validated: RRSIG-Owner 7971gooseq0al20ho6s5sre6e3hjfj0n.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NoData-Proof required and found. TLSA-Query (_443._tcp.www.unimedanhanguera.coop.br) sends a valid NSEC3 RR as result with the hashed owner name "7971gooseq0al20ho6s5sre6e3hjfj0n" (unhashed: www.unimedanhanguera.coop.br). So that's the Closest Encloser of the query name. Bitmap: A, RRSIG Validated: RRSIG-Owner 7971gooseq0al20ho6s5sre6e3hjfj0n.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NXDomain-Proof required and found. TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "skg98hhe77sjgkd11160udbmcecrr94r" (unhashed: _tcp.www.unimedanhanguera.coop.br) with the owner "sdqpqofcf1rdceu0r5flvgk61bpdo2kq" and the NextOwner "smgeiqlj7civf4jrl1v4sfqkeccnkji8". So that NSEC3 confirms the not-existence of the Next Closer Name. Bitmap: A, RRSIG Validated: RRSIG-Owner sdqpqofcf1rdceu0r5flvgk61bpdo2kq.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NXDomain-Proof required and found. TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "3ob44v3afmip76nlt0kb2jo50q02cujr" (unhashed: *.www.unimedanhanguera.coop.br) with the owner "3b7psc5a4m7l0qrre99qo62rs8god14p" and the NextOwner "44pgi284550vlbmqfebou4jnv0tln850". So that NSEC3 confirms the not-existence of the Wildcard expansion. Bitmap: A, RRSIG Validated: RRSIG-Owner 3b7psc5a4m7l0qrre99qo62rs8god14p.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NXDomain-Proof required and found. CAA-Query sends a valid NSEC3 RR as result with the hashed query name "7971gooseq0al20ho6s5sre6e3hjfj0n" equal the hashed NSEC3-owner "7971gooseq0al20ho6s5sre6e3hjfj0n" and the hashed NextOwner "7fjcpnje7tgpv8nsi4buf1n6itg14ve9". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).Bitmap: A, RRSIG Validated: RRSIG-Owner 7971gooseq0al20ho6s5sre6e3hjfj0n.unimedanhanguera.coop.br., Algorithm: 7, 4 Labels, original TTL: 86400 sec, Signature-expiration: 28.08.2022, 17:43:55 +, Signature-Inception: 29.07.2022, 17:43:55 +, KeyTag 21053, Signer-Name: unimedanhanguera.coop.br
Status: Good. NoData-Proof required and found.