| Zone (*) | DNSSEC - Informations |
|---|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 42351, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.02.2021, 00:00:00 +, Signature-Inception: 11.01.2021, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: pl
|
|
pl
| 2 DS RR in the parent zone found
|
|
|
|
|
| DS with Algorithm 8, KeyTag 6064, DigestType 2 and Digest LNfT0WTYI51OqJkaYslmelrhn7+96+s1y4JdH2aI7qY=
|
|
|
|
|
| DS with Algorithm 8, KeyTag 51352, DigestType 2 and Digest xCgpGN5hap47/+wfBlKkHPc9t+9/V4Xbc1np5Z1ABIw=
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner pl., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 28.01.2021, 17:00:00 +, Signature-Inception: 15.01.2021, 16:00:00 +, KeyTag 42351, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 42351 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 4 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 6064, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 51352, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 54375, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 64224, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner pl., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 09.02.2021, 12:00:00 +, Signature-Inception: 10.01.2021, 12:00:00 +, KeyTag 51352, Signer-Name: pl
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 51352 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 51352, DigestType 2 and Digest "xCgpGN5hap47/+wfBlKkHPc9t+9/V4Xbc1np5Z1ABIw=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: zedeko.pl
|
|
zedeko.pl
| 1 DS RR in the parent zone found
|
|
|
|
|
| DS with Algorithm 8, KeyTag 19276, DigestType 2 and Digest KRxnbpNvZPhmI0Y2AidL2rHNDlauH6iOjIW+ovhOJTM=
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner zedeko.pl., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 09.02.2021, 12:00:00 +, Signature-Inception: 10.01.2021, 12:00:00 +, KeyTag 54375, Signer-Name: pl
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 54375 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 19276, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 41670, Flags 256
|
|
|
|
|
| 2 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner zedeko.pl., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 19276, Signer-Name: zedeko.pl
|
|
|
|
|
| RRSIG-Owner zedeko.pl., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 19276 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 41670 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 19276, DigestType 2 and Digest "KRxnbpNvZPhmI0Y2AidL2rHNDlauH6iOjIW+ovhOJTM=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 178.32.205.96
Validated: RRSIG-Owner zedeko.pl., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| RRSIG Type 16 validates the TXT - Result: Elektryk Krakow
v=spf1 include:mx.ovh.com ~all
google-site-verification=RiAEBCwggM8SRhH5CRfSExdkgW6WoTnemrWzf9lWkBw
Validated: RRSIG-Owner zedeko.pl., Algorithm: 8, 2 Labels, original TTL: 60 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| RRSIG Type 28 validates the AAAA - Result: 2001:41D0:0301:0005:0000:0000:0000:0026
Validated: RRSIG-Owner zedeko.pl., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| RRSIG Type 257 validates the CAA - Result: 5|issueletsencrypt.org
Validated: RRSIG-Owner zedeko.pl., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "324luh24p09iidv3v3pu3i7apim8u5ns" equal the hashed NSEC3-owner "324luh24p09iidv3v3pu3i7apim8u5ns" and the hashed NextOwner "933q0eq6sefk4883q94ri8bbdgjh76c3". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, MX, TXT, AAAA, RRSIG, DNSKEY, NSEC3PARAM, CAA Validated: RRSIG-Owner 324luh24p09iidv3v3pu3i7apim8u5ns.zedeko.pl., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
|
|
| TLSA-Query (_443._tcp.zedeko.pl) sends a valid NSEC3 RR as result with the hashed owner name "324luh24p09iidv3v3pu3i7apim8u5ns" (unhashed: zedeko.pl). So that's the Closest Encloser of the query name. TLSA-Query (_443._tcp.zedeko.pl) sends a valid NSEC3 RR as result with the hashed query name "6030r15jodnq14p5epeju1cg8nr9elco" between the hashed NSEC3-owner "324luh24p09iidv3v3pu3i7apim8u5ns" and the hashed NextOwner "933q0eq6sefk4883q94ri8bbdgjh76c3". So the zone confirmes the not-existence of that TLSA RR.
Bitmap: A, NS, SOA, MX, TXT, AAAA, RRSIG, DNSKEY, NSEC3PARAM, CAA Validated: RRSIG-Owner 324luh24p09iidv3v3pu3i7apim8u5ns.zedeko.pl., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| Status: Good. NXDomain-Proof required and found.
|
|
|
|
|
| TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "j8eo5p6b38sucpqi8fj2erfpl1gt3gf2" (unhashed: _tcp.zedeko.pl) with the owner "i8voprt6vk2a2v1df5a75nc3abe1lsc6" and the NextOwner "q5oi853hegn6kco7s5aq27ua80ut2pm7". So that NSEC3 confirms the not-existence of the Next Closer Name. TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "ovh98fo3v0op22ahtvf3ntjvdgr1jj7r" (unhashed: *.zedeko.pl) with the owner "i8voprt6vk2a2v1df5a75nc3abe1lsc6" and the NextOwner "q5oi853hegn6kco7s5aq27ua80ut2pm7". So that NSEC3 confirms the not-existence of the Wildcard expansion.
Bitmap: CNAME, RRSIG Validated: RRSIG-Owner i8voprt6vk2a2v1df5a75nc3abe1lsc6.zedeko.pl., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| Status: Good. NXDomain-Proof required and found.
|
|
|
Zone: www.zedeko.pl
|
|
www.zedeko.pl
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "q5oi853hegn6kco7s5aq27ua80ut2pm7" between the hashed NSEC3-owner "q5oi853hegn6kco7s5aq27ua80ut2pm7" and the hashed NextOwner "rg20funfmf1j63tgsg8fu6l59k14fdkk". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner q5oi853hegn6kco7s5aq27ua80ut2pm7.zedeko.pl., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 178.32.205.96
Validated: RRSIG-Owner www.zedeko.pl., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| RRSIG Type 28 validates the AAAA - Result: 2001:41D0:0301:0005:0000:0000:0000:0026
Validated: RRSIG-Owner www.zedeko.pl., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "q5oi853hegn6kco7s5aq27ua80ut2pm7" equal the hashed NSEC3-owner "q5oi853hegn6kco7s5aq27ua80ut2pm7" and the hashed NextOwner "rg20funfmf1j63tgsg8fu6l59k14fdkk". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner q5oi853hegn6kco7s5aq27ua80ut2pm7.zedeko.pl., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
|
|
| TXT-Query sends a valid NSEC3 RR as result with the hashed query name "q5oi853hegn6kco7s5aq27ua80ut2pm7" equal the hashed NSEC3-owner "q5oi853hegn6kco7s5aq27ua80ut2pm7" and the hashed NextOwner "rg20funfmf1j63tgsg8fu6l59k14fdkk". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner q5oi853hegn6kco7s5aq27ua80ut2pm7.zedeko.pl., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|
|
|
|
|
| TLSA-Query (_443._tcp.www.zedeko.pl) sends a valid NSEC3 RR as result with the hashed owner name "q5oi853hegn6kco7s5aq27ua80ut2pm7" (unhashed: www.zedeko.pl). So that's the Closest Encloser of the query name. TLSA-Query (_443._tcp.www.zedeko.pl) sends a valid NSEC3 RR as result with the hashed query name "r2fds4bhp0uu9qe723kpffr041co8te7" between the hashed NSEC3-owner "q5oi853hegn6kco7s5aq27ua80ut2pm7" and the hashed NextOwner "rg20funfmf1j63tgsg8fu6l59k14fdkk". So the zone confirmes the not-existence of that TLSA RR.
Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner q5oi853hegn6kco7s5aq27ua80ut2pm7.zedeko.pl., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| Status: Good. NXDomain-Proof required and found.
|
|
|
|
|
| TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "8900pih2cji6c5pho9nsukv0j218qvls" (unhashed: _tcp.www.zedeko.pl) with the owner "324luh24p09iidv3v3pu3i7apim8u5ns" and the NextOwner "933q0eq6sefk4883q94ri8bbdgjh76c3". So that NSEC3 confirms the not-existence of the Next Closer Name. TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "7c3c7q9ukc98asqejfbf6fkmppvm3l27" (unhashed: *.www.zedeko.pl) with the owner "324luh24p09iidv3v3pu3i7apim8u5ns" and the NextOwner "933q0eq6sefk4883q94ri8bbdgjh76c3". So that NSEC3 confirms the not-existence of the Wildcard expansion.
Bitmap: A, NS, SOA, MX, TXT, AAAA, RRSIG, DNSKEY, NSEC3PARAM, CAA Validated: RRSIG-Owner 324luh24p09iidv3v3pu3i7apim8u5ns.zedeko.pl., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| Status: Good. NXDomain-Proof required and found.
|
|
|
|
|
| CAA-Query sends a valid NSEC3 RR as result with the hashed query name "q5oi853hegn6kco7s5aq27ua80ut2pm7" equal the hashed NSEC3-owner "q5oi853hegn6kco7s5aq27ua80ut2pm7" and the hashed NextOwner "rg20funfmf1j63tgsg8fu6l59k14fdkk". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner q5oi853hegn6kco7s5aq27ua80ut2pm7.zedeko.pl., Algorithm: 8, 3 Labels, original TTL: 300 sec, Signature-expiration: 25.01.2021, 05:56:30 +, Signature-Inception: 26.12.2020, 05:56:30 +, KeyTag 41670, Signer-Name: zedeko.pl
|
|
|
|
|
| Status: Good. NoData-Proof required and found.
|