DNSSEC Analyzer - example.name

Domain Name:

Time: 2021-05-11 00:02:05 UTC, NTP stratum 4

Analyzing DNSSEC problems for example.name

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 56995 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210522000000 20210501000000 20326 . KTOHq4gvmIC2KJOzZwQhHGonCSPCCEtX/453Ow6uauO3BjuoNp3Bdjh2BxEaHBQ5mvp+n/WjsrlQ dQvuf1BSZfVUJoOm3ofTQI6rRpex3rYxj8BYBjgSxYcRJniVP1nRnAozTspKfsm/bCUqB0RsnXWh 4tySxKv5fs8Ej7Eph9aG7JpIy7GuoqCxyAEKSJ6IOG8iTKtfInjg0zSF+ElRlr+K9MeCJxvsVeCP BR5BNWQ4EimmoMSCL7DfEzyHsKLau11nrDpx2jBih72PG6UmMohitJp+cCQz+C2qUSsiuME4olp9 X64P2CwkqY5T75GOmmVX+WJZsBd9xsuQkUuHTQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210522000000 20210501000000 20326 . KTOHq4gvmIC2KJOzZwQhHGonCSPCCEtX/453Ow6uauO3BjuoNp3Bdjh2BxEaHBQ5mvp+n/WjsrlQ dQvuf1BSZfVUJoOm3ofTQI6rRpex3rYxj8BYBjgSxYcRJniVP1nRnAozTspKfsm/bCUqB0RsnXWh 4tySxKv5fs8Ej7Eph9aG7JpIy7GuoqCxyAEKSJ6IOG8iTKtfInjg0zSF+ElRlr+K9MeCJxvsVeCP BR5BNWQ4EimmoMSCL7DfEzyHsKLau11nrDpx2jBih72PG6UmMohitJp+cCQz+C2qUSsiuME4olp9 X64P2CwkqY5T75GOmmVX+WJZsBd9xsuQkUuHTQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to j.root-servers.net for example.name/A
	Received 633 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (633 bytes) ;; HEADER SECTION ;; id = 12462 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; example.name. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) name. 172800 IN NS ac3.nstld.com. name. 172800 IN NS ac1.nstld.com. name. 172800 IN NS ac2.nstld.com. name. 172800 IN NS ac4.nstld.com. name. 86400 IN DS ( 52563 8 2 4e2671f0dbc3927d842053044c6a0cbf8b21e1e657de8bba99a4835031a85a41 ) name. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . c9Pb7FLxknuPDb39as9ClmEIZCiMlFv4uihbryYN70WgiWk4hKBFad0EPxqL9q7IXDsVnoX11iv2 eXpWEXez0jfZZKy1PTlrTZb74UedqkWKaqiNmCouriKCd1NZY+myy9LnFi3Ex5LRt7LrFCiqjqFY TsAbqS4Aya3nKyP7XO8CrclpKShevEhOysFJKOrLcoGTtXrQRUTnc6lY+0fh7VkPIPbeW/dBXPuU shDpqSsol5q01VMZCQpL/MIC3+ihzuwWA9ilmynVi3Az/cmnlqyVKmZyY3s3KVp85iOpx9Xfdruf LSyyZieI/EVt75RPpmZ+bwdFHGyqUVcXmnSNLw== ) ;; ADDITIONAL SECTION (9 records) ac3.nstld.com. 172800 IN A 192.42.175.30 ac3.nstld.com. 172800 IN AAAA 2001:500:122::30 ac1.nstld.com. 172800 IN A 192.42.173.30 ac1.nstld.com. 172800 IN AAAA 2001:500:120::30 ac2.nstld.com. 172800 IN A 192.42.174.30 ac2.nstld.com. 172800 IN AAAA 2001:500:121::30 ac4.nstld.com. 172800 IN A 192.42.176.30 ac4.nstld.com. 172800 IN AAAA 2001:500:123::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for name/DNSKEY
	Received 625 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (625 bytes) ;; HEADER SECTION ;; id = 11658 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; name. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) name. 172800 IN NS ac1.nstld.com. name. 172800 IN NS ac2.nstld.com. name. 172800 IN NS ac3.nstld.com. name. 172800 IN NS ac4.nstld.com. name. 86400 IN DS ( 52563 8 2 4e2671f0dbc3927d842053044c6a0cbf8b21e1e657de8bba99a4835031a85a41 ) name. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . c9Pb7FLxknuPDb39as9ClmEIZCiMlFv4uihbryYN70WgiWk4hKBFad0EPxqL9q7IXDsVnoX11iv2 eXpWEXez0jfZZKy1PTlrTZb74UedqkWKaqiNmCouriKCd1NZY+myy9LnFi3Ex5LRt7LrFCiqjqFY TsAbqS4Aya3nKyP7XO8CrclpKShevEhOysFJKOrLcoGTtXrQRUTnc6lY+0fh7VkPIPbeW/dBXPuU shDpqSsol5q01VMZCQpL/MIC3+ihzuwWA9ilmynVi3Az/cmnlqyVKmZyY3s3KVp85iOpx9Xfdruf LSyyZieI/EVt75RPpmZ+bwdFHGyqUVcXmnSNLw== ) ;; ADDITIONAL SECTION (9 records) ac1.nstld.com. 172800 IN A 192.42.173.30 ac2.nstld.com. 172800 IN A 192.42.174.30 ac3.nstld.com. 172800 IN A 192.42.175.30 ac4.nstld.com. 172800 IN A 192.42.176.30 ac1.nstld.com. 172800 IN AAAA 2001:500:120::30 ac2.nstld.com. 172800 IN AAAA 2001:500:121::30 ac3.nstld.com. 172800 IN AAAA 2001:500:122::30 ac4.nstld.com. 172800 IN AAAA 2001:500:123::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone name

name

	Checking DS between . and name
	Query to d.root-servers.net for name/DS
	Received 368 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (368 bytes) ;; HEADER SECTION ;; id = 32976 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; name. IN DS ;; ANSWER SECTION (2 records) name. 86400 IN DS ( 52563 8 2 4e2671f0dbc3927d842053044c6a0cbf8b21e1e657de8bba99a4835031a85a41 ) name. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . c9Pb7FLxknuPDb39as9ClmEIZCiMlFv4uihbryYN70WgiWk4hKBFad0EPxqL9q7IXDsVnoX11iv2 eXpWEXez0jfZZKy1PTlrTZb74UedqkWKaqiNmCouriKCd1NZY+myy9LnFi3Ex5LRt7LrFCiqjqFY TsAbqS4Aya3nKyP7XO8CrclpKShevEhOysFJKOrLcoGTtXrQRUTnc6lY+0fh7VkPIPbeW/dBXPuU shDpqSsol5q01VMZCQpL/MIC3+ihzuwWA9ilmynVi3Az/cmnlqyVKmZyY3s3KVp85iOpx9Xfdruf LSyyZieI/EVt75RPpmZ+bwdFHGyqUVcXmnSNLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for name in the . zone
	DS=52563/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`name. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . c9Pb7FLxknuPDb39as9ClmEIZCiMlFv4uihbryYN70WgiWk4hKBFad0EPxqL9q7IXDsVnoX11iv2 eXpWEXez0jfZZKy1PTlrTZb74UedqkWKaqiNmCouriKCd1NZY+myy9LnFi3Ex5LRt7LrFCiqjqFY TsAbqS4Aya3nKyP7XO8CrclpKShevEhOysFJKOrLcoGTtXrQRUTnc6lY+0fh7VkPIPbeW/dBXPuU shDpqSsol5q01VMZCQpL/MIC3+ihzuwWA9ilmynVi3Az/cmnlqyVKmZyY3s3KVp85iOpx9Xfdruf LSyyZieI/EVt75RPpmZ+bwdFHGyqUVcXmnSNLw== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=52563/SHA-256 is now in the chain-of-trust
	`name. 86400 IN DS ( 52563 8 2 4e2671f0dbc3927d842053044c6a0cbf8b21e1e657de8bba99a4835031a85a41 )`
	Query to ac3.nstld.com for name/DNSKEY
	Received 779 bytes from 192.42.175.30
	;; Answer received from 192.42.175.30 (779 bytes) ;; HEADER SECTION ;; id = 61631 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; name. IN DNSKEY ;; ANSWER SECTION (3 records) name. 86400 IN DNSKEY ( 256 3 8 AwEAAbDnPPAv1TqgsB0GqfDE6qib+Sp8bYPF3VuJ6fuUniOq7VB8N4Oyt+oEeXDWNQwrPXaB2lHa fxFGjna99+594NE2/eEfIaGLkWwEPNBUOfgrDJXEbC84eTZhhJFgCfo7vBmxXXJg3RLKZHygtv/7 V44s+ortwiDuwB46Ane6Wpdz7RX+bEpPD3DtFXTgdzvZJZxeu1UpsMEBBuI4xifMo8M= ) ; Key ID = 37093 name. 86400 IN DNSKEY ( 257 3 8 AQO2wz1Nu9eNa/btHscHEI/DflGr/S8gBbz96uB1Gv6PcBbeFlYm1AgOGxobJO7vraO0V/uGlfK7 DYxfeAMfYcbeYRYebiQUJoMfAkdLZanJYGY4y4Aw4mIPg5ngEhztJpUh4diYvhW9O9IQUb60nxt2 th5xoU55FEI3PEVKvja96G5Y8+yoK/7ReSkktNN5RWUCFJGWoFobFlGx/SkICtJFVl03CJNXp7Yq z5ecbBzfHvUtj1ooXIui8xOheheoTkXinysPmTb3/ZmlMi4gLlbXKqMZ+605BKxAd9aJDSKLA4PU vOAc9Q06WYoOBmpfLxktVndEeM2urlYnIOgFTqa5 ) ; Key ID = 52563 name. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524143408 20210509142908 52563 name. n7rgx9dRz1vTrFdpFyy3W6DK6LE311EAdr8pKMnIVurqkspQ/ehQzWNQFDzt8YVN5r15pT9E+prA Tc8CcWI6Cs0mLleScHclOEHo+mdWLy1cxJNOYCfNRP+ch4Nov+DMy/qtdYWec9cwU+sMv4f4Jwoa 4Z5gd+RkqVNggFMz+HcRtEooiJbnEg/qVL+USw14v6DVgZYzCFXOauJuucbIprYqLYbCS8A/5Ca9 qDJqkyVEQq/FdBUSVBB7QyJ2gMs1aR8iXrcQhoKt4dXlKozYR0gCgVgt/HHzRASbDT4tf4xDcU1k 9nAd2uXyUVnIA1Sd41Q9UgoBIzN7RxeEUCuzDg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for name
	`name. 86400 IN DNSKEY ( 256 3 8 AwEAAbDnPPAv1TqgsB0GqfDE6qib+Sp8bYPF3VuJ6fuUniOq7VB8N4Oyt+oEeXDWNQwrPXaB2lHa fxFGjna99+594NE2/eEfIaGLkWwEPNBUOfgrDJXEbC84eTZhhJFgCfo7vBmxXXJg3RLKZHygtv/7 V44s+ortwiDuwB46Ane6Wpdz7RX+bEpPD3DtFXTgdzvZJZxeu1UpsMEBBuI4xifMo8M= ) ; Key ID = 37093`
	`name. 86400 IN DNSKEY ( 257 3 8 AQO2wz1Nu9eNa/btHscHEI/DflGr/S8gBbz96uB1Gv6PcBbeFlYm1AgOGxobJO7vraO0V/uGlfK7 DYxfeAMfYcbeYRYebiQUJoMfAkdLZanJYGY4y4Aw4mIPg5ngEhztJpUh4diYvhW9O9IQUb60nxt2 th5xoU55FEI3PEVKvja96G5Y8+yoK/7ReSkktNN5RWUCFJGWoFobFlGx/SkICtJFVl03CJNXp7Yq z5ecbBzfHvUtj1ooXIui8xOheheoTkXinysPmTb3/ZmlMi4gLlbXKqMZ+605BKxAd9aJDSKLA4PU vOAc9Q06WYoOBmpfLxktVndEeM2urlYnIOgFTqa5 ) ; Key ID = 52563`
	DNSKEY=52563/SEP is now in the chain-of-trust
	DS=52563/SHA-256 verifies DNSKEY=52563/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`name. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524143408 20210509142908 52563 name. n7rgx9dRz1vTrFdpFyy3W6DK6LE311EAdr8pKMnIVurqkspQ/ehQzWNQFDzt8YVN5r15pT9E+prA Tc8CcWI6Cs0mLleScHclOEHo+mdWLy1cxJNOYCfNRP+ch4Nov+DMy/qtdYWec9cwU+sMv4f4Jwoa 4Z5gd+RkqVNggFMz+HcRtEooiJbnEg/qVL+USw14v6DVgZYzCFXOauJuucbIprYqLYbCS8A/5Ca9 qDJqkyVEQq/FdBUSVBB7QyJ2gMs1aR8iXrcQhoKt4dXlKozYR0gCgVgt/HHzRASbDT4tf4xDcU1k 9nAd2uXyUVnIA1Sd41Q9UgoBIzN7RxeEUCuzDg== )`
	RRSIG=52563 and DNSKEY=52563/SEP verifies the DNSKEY RRset
	DNSKEY=37093 is now in the chain-of-trust
	Query to ac4.nstld.com for example.name/A
	Received 1130 bytes from 192.42.176.30
	;; Answer received from 192.42.176.30 (1130 bytes) ;; HEADER SECTION ;; id = 40381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NXDOMAIN ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; example.name. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) name. 86400 IN SOA ( ac1.nstld.com. info.verisign-grs.com. 1620691296 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) name. 86400 IN RRSIG ( SOA 8 1 86400 20210517215136 20210510215136 37093 name. l+em6QuFn/Bv3E8gjAZzuQutp9Y1EgXRGXDoi9OrubFwTxKUAmuvhJakgv1ay/bE+CQvNCkmSW83 SIcy/FI7RVCK9oBl6Vkbck0pYJR3b+mLMzHiuJ5sBdcjIjAhJ7vbqooqUerZfidOKItKHaluedkt 9Qq8JXtEIC1dopY1IiI++rhyxRP0zXwRQjl7+EqDRH6ozriEutg7aiTyRd3epg== ) LHFCUG0CNU1HF2NSO48OTIMA3O1LT7AA.name. 86400 IN NSEC3 ( 1 1 0 - lhh2qjd3b66m949et4qu3l2rlsfb8fol NS SOA RRSIG DNSKEY NSEC3PARAM ) LHFCUG0CNU1HF2NSO48OTIMA3O1LT7AA.name. 86400 IN RRSIG ( NSEC3 8 2 86400 20210515102019 20210508102019 37093 name. m6Z1j9lcKnooXzm4or5o57+XWnImG9KCs3X0CDRI6yxNjvU917GmeiCD8lIFxwUfGVZx38rmaEQU V+t5JRZUT4JRZ1SLeGAXXSaOMPDdRa+54/J5MKhbcvQgPj2sSfT60t1mtkHbmQnnNZ7kE+CU1A16 LE38qBVqvkMmZibo5hKy+c64m57kattKozUC0Eu3hEmvVW0rYT7ROScQJcpbBA== ) 5SU9L63F07ISGUSSAFAGK82P9QQ2S3E0.name. 86400 IN NSEC3 ( 1 1 0 - 5t48brf4n2b2sa5pjuet2qtpi8emvn2h MX RRSIG ) 5SU9L63F07ISGUSSAFAGK82P9QQ2S3E0.name. 86400 IN RRSIG ( NSEC3 8 2 86400 20210516102017 20210509102017 37093 name. hQJAVBYSDrFNRL0k3+1kqdzY7/Ivuuqfhdwh/SKvtqsSJbiVs37PgGhbJdhWoLGp7D2NybWIoanM Y2eNTZPGXCG5k3qdj5ebM1batShrVyNW7J93YhNTHjltJBRLgYtgkJN7+pZ4nstfIGNCKKwQfRHB E3n/f4v/jmiaG33NiJZt4pHfzX+9MXRUGhv3Lf6sfR5dlzmVUvdaZKdst8VLOw== ) MMIN9M3OSK8EUE3H8FQA48MH77RS0BC3.name. 86400 IN NSEC3 ( 1 1 0 - mmlsbqjkvhtvio2tiq8671bcm5kuuetl MX RRSIG ) MMIN9M3OSK8EUE3H8FQA48MH77RS0BC3.name. 86400 IN RRSIG ( NSEC3 8 2 86400 20210516182232 20210509182232 37093 name. adBZy2c5p/kAPhEp0djb04j+Fb5iNg0iljUbxgcxBvhVnF5h6dkHo4YE4KBQVlf62K6wI2N5/oZ5 XnA6oVW/P1ENZ6RoZA+4g/R5ZF04meYZnABr+/wfvs4CKGOFrBEfU9hFR9nwToBoslhipeR3j0jl RPQqd2oh18rmujtTFqCvxZFHfP9ojECcMMbl44MYpsQb0VGyxKbSL5wJLhDjuw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Zone name (192.42.176.30) returns NXDOMAIN for example.name
	NSEC3 validation not implemented yet

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test example.name at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: