Zone (*) DNSSEC - Informations Zone : (root)(root) 1 DS RR published • Status: Valid because published2 DNSKEY RR found Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
Public Key with Algorithm 8, KeyTag 22545, Flags 256
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 31.12.2019, 00:00:00 +, Signature-Inception: 10.12.2019, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneZone : comcom 1 DS RR in the parent zone found 1 RRSIG RR to validate DS RR found RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 01.01.2020, 05:00:00 +, Signature-Inception: 19.12.2019, 04:00:00 +, KeyTag 22545, Signer-Name: (root)
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 22545 used to validate the DS RRSet in the parent zone3 DNSKEY RR found Public Key with Algorithm 8, KeyTag 12163, Flags 256
Public Key with Algorithm 8, KeyTag 17708, Flags 256
Public Key with Algorithm 8, KeyTag 30909, Flags 257 (SEP = Secure Entry Point)
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 01.01.2020, 19:24:21 +, Signature-Inception: 17.12.2019, 19:19:21 +, KeyTag 30909, Signer-Name: com
RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 01.01.2020, 19:24:21 +, Signature-Inception: 17.12.2019, 19:19:21 +, KeyTag 30909, Signer-Name: com
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest "4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneZone : worldclasscrew.comworldclasscrew.com 1 DS RR in the parent zone found 1 RRSIG RR to validate DS RR found RRSIG-Owner worldclasscrew.com., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 24.12.2019, 06:57:29 +, Signature-Inception: 17.12.2019, 05:47:29 +, KeyTag 12163, Signer-Name: com
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 12163 used to validate the DS RRSet in the parent zone2 DNSKEY RR found Public Key with Algorithm 7, KeyTag 9666, Flags 257 (SEP = Secure Entry Point)
Public Key with Algorithm 7, KeyTag 59282, Flags 256
2 RRSIG RR to validate DNSKEY RR found RRSIG-Owner worldclasscrew.com., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 13.01.2020, 15:52:11 +, Signature-Inception: 14.12.2019, 15:52:11 +, KeyTag 9666, Signer-Name: worldclasscrew.com
RRSIG-Owner worldclasscrew.com., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 13.01.2020, 15:52:11 +, Signature-Inception: 14.12.2019, 15:52:11 +, KeyTag 59282, Signer-Name: worldclasscrew.com
• Status: Good - Algorithmus 7 and DNSKEY with KeyTag 9666 used to validate the DNSKEY RRSet• Status: Good - Algorithmus 7 and DNSKEY with KeyTag 59282 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9666, DigestType 2 and Digest "08rZzSf6ylMbLfFKP5L2bXCjcWiO7zbJEv5dqnxTDMM=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneRRSIG Type 1 validates the A - Result: 51.83.76.62 Validated: RRSIG-Owner worldclasscrew.com., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 13.01.2020, 15:52:11 +, Signature-Inception: 14.12.2019, 15:52:11 +, KeyTag 59282, Signer-Name: worldclasscrew.com
RRSIG Type 16 validates the TXT - Result: v=spf1 mx ~all
1|www.worldclasscrew.com
facebook-domain-verification=8i6uqurq1r3978dsd795tqsxyv063x Validated: RRSIG-Owner worldclasscrew.com., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 13.01.2020, 15:52:11 +, Signature-Inception: 14.12.2019, 15:52:11 +, KeyTag 59282, Signer-Name: worldclasscrew.com
RRSIG Type 50, expiration 2020-01-13 15:52:11 + validates the NSEC3 RR that proves the not-existence of the CNAME RR. Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM
RRSIG Type 50, expiration 2020-01-13 15:52:11 + validates the NSEC3 RR that proves the not-existence of the AAAA RR. Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM
RRSIG Type 50, expiration 2020-01-13 15:52:11 + validates the NSEC3 RR that proves the not-existence of the TLSA RR. Bitmap: No Bitmap?
RRSIG Type 50, expiration 2020-01-13 15:52:11 + validates the NSEC3 RR that proves the not-existence of the TLSA RR. Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM
RRSIG Type 50, expiration 2020-01-13 15:52:11 + validates the NSEC3 RR that proves the not-existence of the CAA RR. Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM
Zone : www.worldclasscrew.comwww.worldclasscrew.com 0 DS RR in the parent zone found RRSIG Type 16 validates the TXT - Result: l|gb
3|welcome Validated: RRSIG-Owner www.worldclasscrew.com., Algorithm: 7, 3 Labels, original TTL: 3600 sec, Signature-expiration: 13.01.2020, 15:52:11 +, Signature-Inception: 14.12.2019, 15:52:11 +, KeyTag 59282, Signer-Name: worldclasscrew.com
RRSIG Type 28 validates the AAAA - Result: 2001:41D0:0305:2100:0000:0000:0000:8579 Validated: RRSIG-Owner www.worldclasscrew.com., Algorithm: 7, 3 Labels, original TTL: 3600 sec, Signature-expiration: 13.01.2020, 15:52:11 +, Signature-Inception: 14.12.2019, 15:52:11 +, KeyTag 59282, Signer-Name: worldclasscrew.com
RRSIG Type 50, expiration 2020-01-13 15:52:11 + validates the NSEC3 RR that proves the not-existence of the A RR. Bitmap: TXT, AAAA, RRSIG
RRSIG Type 50, expiration 2020-01-13 15:52:11 + validates the NSEC3 RR that proves the not-existence of the CNAME RR. Bitmap: TXT, AAAA, RRSIG
RRSIG Type 50, expiration 2020-01-13 15:52:11 + validates the NSEC3 RR that proves the not-existence of the TLSA RR. Bitmap: TXT, AAAA, RRSIG
RRSIG Type 50, expiration 2020-01-13 15:52:11 + validates the NSEC3 RR that proves the not-existence of the TLSA RR. Bitmap: A, RRSIG
RRSIG Type 50, expiration 2020-01-13 15:52:11 + validates the NSEC3 RR that proves the not-existence of the CAA RR. Bitmap: TXT, AAAA, RRSIG