DNSSEC Analyzer - security.nl

Domain Name:

Time: 2023-12-08 03:16:40 UTC, NTP stratum 16

Analyzing DNSSEC problems for security.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (865 octets) ;; HEADER SECTION ;; id = 61307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	Query to j.root-servers.net for security.nl/A
	Received 565 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (565 octets) ;; HEADER SECTION ;; id = 52769 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . FmFhdobTrL5xXcipU/bQIL7rHgOFUCUQTiTm8N2+mPyd7Sgt56OHZc9w41doq7pjYuUxCwHxUS1G e+Dd2yvtKDIIQwE1jZRo6CFNTVFN41Gp2/cncuq7OIx4urDodR5YJR7G4yYePr76V06JWlrVxNFY Yv5iXrVFCI8orkS5iVPa4XQzUfbYtB4ikT2EbgZtwLyfyyTZGt1Y62LxNRRGGF3T0EQiDE0N4eCC tHS74z3QrE7lvX59rzgpVfH39l/rbeAKZ7D6d1FrgOfAOBNCnXyJSRSLItJkYTLAY0zj5TgMbV3M nkz/n+bAayEA/Q5eTAyvvedFICsgJgwa1YiGeg== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to l.root-servers.net for nl/DNSKEY
	Received 556 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (556 octets) ;; HEADER SECTION ;; id = 39598 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . FmFhdobTrL5xXcipU/bQIL7rHgOFUCUQTiTm8N2+mPyd7Sgt56OHZc9w41doq7pjYuUxCwHxUS1G e+Dd2yvtKDIIQwE1jZRo6CFNTVFN41Gp2/cncuq7OIx4urDodR5YJR7G4yYePr76V06JWlrVxNFY Yv5iXrVFCI8orkS5iVPa4XQzUfbYtB4ikT2EbgZtwLyfyyTZGt1Y62LxNRRGGF3T0EQiDE0N4eCC tHS74z3QrE7lvX59rzgpVfH39l/rbeAKZ7D6d1FrgOfAOBNCnXyJSRSLItJkYTLAY0zj5TgMbV3M nkz/n+bAayEA/Q5eTAyvvedFICsgJgwa1YiGeg== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to j.root-servers.net for nl/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (366 octets) ;; HEADER SECTION ;; id = 13315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . FmFhdobTrL5xXcipU/bQIL7rHgOFUCUQTiTm8N2+mPyd7Sgt56OHZc9w41doq7pjYuUxCwHxUS1G e+Dd2yvtKDIIQwE1jZRo6CFNTVFN41Gp2/cncuq7OIx4urDodR5YJR7G4yYePr76V06JWlrVxNFY Yv5iXrVFCI8orkS5iVPa4XQzUfbYtB4ikT2EbgZtwLyfyyTZGt1Y62LxNRRGGF3T0EQiDE0N4eCC tHS74z3QrE7lvX59rzgpVfH39l/rbeAKZ7D6d1FrgOfAOBNCnXyJSRSLItJkYTLAY0zj5TgMbV3M nkz/n+bAayEA/Q5eTAyvvedFICsgJgwa1YiGeg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . FmFhdobTrL5xXcipU/bQIL7rHgOFUCUQTiTm8N2+mPyd7Sgt56OHZc9w41doq7pjYuUxCwHxUS1G e+Dd2yvtKDIIQwE1jZRo6CFNTVFN41Gp2/cncuq7OIx4urDodR5YJR7G4yYePr76V06JWlrVxNFY Yv5iXrVFCI8orkS5iVPa4XQzUfbYtB4ikT2EbgZtwLyfyyTZGt1Y62LxNRRGGF3T0EQiDE0N4eCC tHS74z3QrE7lvX59rzgpVfH39l/rbeAKZ7D6d1FrgOfAOBNCnXyJSRSLItJkYTLAY0zj5TgMbV3M nkz/n+bAayEA/Q5eTAyvvedFICsgJgwa1YiGeg== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns1.dns.nl for nl/DNSKEY
	Received 289 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (289 octets) ;; HEADER SECTION ;; id = 5969 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 13 p5PJ4tnaGMiU/IoC8TvY1v4P7F4QENHetjr3az49n3FW5ipK7deJDpy0zNG64oKfqT0n31s7WWbx UX6WN5hYmQ== ) ; Key ID = 52707 nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; Key ID = 17153 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20231218232042 20231204183725 17153 nl. OzQ9ieGpNvD3HQDFSmLttKe5lCi+8K3DqOYI/AABJq2q0WBDJFHEsXld1V8r2IWP1yG7B5VN0rP0 7ylx41B6JA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 13 p5PJ4tnaGMiU/IoC8TvY1v4P7F4QENHetjr3az49n3FW5ipK7deJDpy0zNG64oKfqT0n31s7WWbx UX6WN5hYmQ== ) ; Key ID = 52707`
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; Key ID = 17153`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20231218232042 20231204183725 17153 nl. OzQ9ieGpNvD3HQDFSmLttKe5lCi+8K3DqOYI/AABJq2q0WBDJFHEsXld1V8r2IWP1yG7B5VN0rP0 7ylx41B6JA== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=52707 is now in the chain-of-trust
	Query to ns4.dns.nl for security.nl/A
	Received 407 bytes from 185.159.199.200
	;; Response received from 185.159.199.200 (407 octets) ;; HEADER SECTION ;; id = 63626 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) security.nl. 3600 IN NS ns0.transip.net. security.nl. 3600 IN NS ns1.transip.nl. security.nl. 3600 IN NS ns1.certifiedsecure.com. security.nl. 3600 IN NS ns2.transip.eu. security.nl. 3600 IN NS ns2.certifiedsecure.com. security.nl. 3600 IN NS ns3.certifiedsecure.com. security.nl. 3600 IN DS ( 45258 13 2 20591ee07d959836521299e9191d6aaabe16255bc0464a231a0652a9810fb6bf ) security.nl. 3600 IN RRSIG ( DS 13 2 3600 20231218184144 20231204140725 52707 nl. BYPoXxgh+Z74uXvz61WIBur65tvaUn9XzHqWEp+Od/EI4xiAo3+32rXT/m48WUO2/3hF6jTA+9/p iFpl6HuN+g== ) ;; ADDITIONAL SECTION (3 records) ns1.transip.nl. 3600 IN A 195.8.195.195 ns1.transip.nl. 3600 IN AAAA 2a01:7c8:7000:195::195 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.dns.nl for security.nl/DNSKEY
	Received 407 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (407 octets) ;; HEADER SECTION ;; id = 25403 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) security.nl. 3600 IN NS ns0.transip.net. security.nl. 3600 IN NS ns1.transip.nl. security.nl. 3600 IN NS ns1.certifiedsecure.com. security.nl. 3600 IN NS ns2.transip.eu. security.nl. 3600 IN NS ns2.certifiedsecure.com. security.nl. 3600 IN NS ns3.certifiedsecure.com. security.nl. 3600 IN DS ( 45258 13 2 20591ee07d959836521299e9191d6aaabe16255bc0464a231a0652a9810fb6bf ) security.nl. 3600 IN RRSIG ( DS 13 2 3600 20231218184144 20231204140725 52707 nl. BYPoXxgh+Z74uXvz61WIBur65tvaUn9XzHqWEp+Od/EI4xiAo3+32rXT/m48WUO2/3hF6jTA+9/p iFpl6HuN+g== ) ;; ADDITIONAL SECTION (3 records) ns1.transip.nl. 3600 IN A 195.8.195.195 ns1.transip.nl. 3600 IN AAAA 2a01:7c8:7000:195::195 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone security.nl

security.nl

	Checking DS between nl and security.nl
	Query to ns4.dns.nl for security.nl/DS
	Received 186 bytes from 185.159.199.200
	;; Response received from 185.159.199.200 (186 octets) ;; HEADER SECTION ;; id = 61517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN DS ;; ANSWER SECTION (2 records) security.nl. 3600 IN DS ( 45258 13 2 20591ee07d959836521299e9191d6aaabe16255bc0464a231a0652a9810fb6bf ) security.nl. 3600 IN RRSIG ( DS 13 2 3600 20231218184144 20231204140725 52707 nl. BYPoXxgh+Z74uXvz61WIBur65tvaUn9XzHqWEp+Od/EI4xiAo3+32rXT/m48WUO2/3hF6jTA+9/p iFpl6HuN+g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for security.nl in the nl zone
	DS=45258/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`security.nl. 3600 IN RRSIG ( DS 13 2 3600 20231218184144 20231204140725 52707 nl. BYPoXxgh+Z74uXvz61WIBur65tvaUn9XzHqWEp+Od/EI4xiAo3+32rXT/m48WUO2/3hF6jTA+9/p iFpl6HuN+g== )`
	RRSIG=52707 and DNSKEY=52707 verifies the DS RRset
	DS=45258/SHA-256 is now in the chain-of-trust
	`security.nl. 3600 IN DS ( 45258 13 2 20591ee07d959836521299e9191d6aaabe16255bc0464a231a0652a9810fb6bf )`
	Query to ns3.certifiedsecure.com for security.nl/DNSKEY
	Received 494 bytes from 82.94.191.123
	;; Response received from 82.94.191.123 (494 octets) ;; HEADER SECTION ;; id = 36789 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN DNSKEY ;; ANSWER SECTION (5 records) security.nl. 300 IN RRSIG ( DNSKEY 13 2 300 20241119190405 20231120180405 45258 security.nl. n4BUXSv3BwOQAyDiWK29/09NZsG/Yta5LNCO4tUJd/qzVdr0bTJHWS8fFnV09aPtiZisuKlP7Okp e/AEl9AubQ== ) security.nl. 300 IN DNSKEY ( 256 3 13 9h2SDKMcLfF2VAxh1a9aQAy3rwur9bDbfZStlelHpDsvJd4YWvmxda6sZFczADl2flw7ixl8Jc8p adYd2xqfDg== ) ; Key ID = 60727 security.nl. 300 IN DNSKEY ( 256 3 13 XZOOWAyvYJTMKmPK0lmUV/VeUhkAhVq9WCOXsFOPyp7duXfPVwPdCkKsF/j0BeodcPZV1ouGprhT gAlKVejU7g== ) ; Key ID = 59308 security.nl. 300 IN DNSKEY ( 257 3 13 Z/fK++lzGp/M3Z7ErRpsCJscnXzkD/uqGlPGq0OMFTU/efftVnKgycPm/l201OpXL1P+gMtwqV07 Yyomi497DA== ) ; Key ID = 45258 security.nl. 300 IN RRSIG ( DNSKEY 13 2 300 20241119190405 20231120180405 60727 security.nl. Ku5/Woi+2QM29KIcReHub/v1T6TYdaDpnzJT98fCIDpCH4uNLUxjzbnvubE27GA8aJG2k83nJMsp raUXsMQbYA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for security.nl
	`security.nl. 300 IN DNSKEY ( 256 3 13 9h2SDKMcLfF2VAxh1a9aQAy3rwur9bDbfZStlelHpDsvJd4YWvmxda6sZFczADl2flw7ixl8Jc8p adYd2xqfDg== ) ; Key ID = 60727`
	`security.nl. 300 IN DNSKEY ( 256 3 13 XZOOWAyvYJTMKmPK0lmUV/VeUhkAhVq9WCOXsFOPyp7duXfPVwPdCkKsF/j0BeodcPZV1ouGprhT gAlKVejU7g== ) ; Key ID = 59308`
	`security.nl. 300 IN DNSKEY ( 257 3 13 Z/fK++lzGp/M3Z7ErRpsCJscnXzkD/uqGlPGq0OMFTU/efftVnKgycPm/l201OpXL1P+gMtwqV07 Yyomi497DA== ) ; Key ID = 45258`
	DNSKEY=45258/SEP is now in the chain-of-trust
	DS=45258/SHA-256 verifies DNSKEY=45258/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`security.nl. 300 IN RRSIG ( DNSKEY 13 2 300 20241119190405 20231120180405 45258 security.nl. n4BUXSv3BwOQAyDiWK29/09NZsG/Yta5LNCO4tUJd/qzVdr0bTJHWS8fFnV09aPtiZisuKlP7Okp e/AEl9AubQ== )`
	`security.nl. 300 IN RRSIG ( DNSKEY 13 2 300 20241119190405 20231120180405 60727 security.nl. Ku5/Woi+2QM29KIcReHub/v1T6TYdaDpnzJT98fCIDpCH4uNLUxjzbnvubE27GA8aJG2k83nJMsp raUXsMQbYA== )`
	RRSIG=45258 and DNSKEY=45258/SEP verifies the DNSKEY RRset
	RRSIG=60727 and DNSKEY=60727 verifies the DNSKEY RRset
	DNSKEY=60727 is now in the chain-of-trust
	DNSKEY=59308 is now in the chain-of-trust
	Query to ns2.transip.eu for security.nl/A
	Received 163 bytes from 37.97.199.195
	;; Response received from 37.97.199.195 (163 octets) ;; HEADER SECTION ;; id = 3866 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (2 records) security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== ) security.nl. 60 IN A 82.94.191.110 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.transip.eu is authoritative for security.nl
	Found RRSIG signed by security.nl zone
	Query to ns2.certifiedsecure.com for security.nl/SOA
	Received 216 bytes from 135.125.28.216
	;; Response received from 135.125.28.216 (216 octets) ;; HEADER SECTION ;; id = 27096 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN SOA ;; ANSWER SECTION (2 records) security.nl. 300 IN RRSIG ( SOA 13 2 300 20241119190405 20231120180405 60727 security.nl. pdHszcCLc6Pa3sXTv1pRNHdi3qHHNP1+dhnk8iBgSSQTLYL5KdvoKe6fNosJerbGrD3KwZVp6b7a kjBixkNwmw== ) security.nl. 300 IN SOA ( ns3.certifiedsecure.com. dnsmaster.certifiedsecure.com. 2021042066 ;serial 300 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.certifiedsecure.com for security.nl/SOA
	Received 216 bytes from 135.125.28.224
	;; Response received from 135.125.28.224 (216 octets) ;; HEADER SECTION ;; id = 39370 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN SOA ;; ANSWER SECTION (2 records) security.nl. 300 IN SOA ( ns3.certifiedsecure.com. dnsmaster.certifiedsecure.com. 2021042066 ;serial 300 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) security.nl. 300 IN RRSIG ( SOA 13 2 300 20241119190405 20231120180405 60727 security.nl. pdHszcCLc6Pa3sXTv1pRNHdi3qHHNP1+dhnk8iBgSSQTLYL5KdvoKe6fNosJerbGrD3KwZVp6b7a kjBixkNwmw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.certifiedsecure.com for security.nl/SOA
	Received 216 bytes from 82.94.191.123
	;; Response received from 82.94.191.123 (216 octets) ;; HEADER SECTION ;; id = 50190 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN SOA ;; ANSWER SECTION (2 records) security.nl. 300 IN RRSIG ( SOA 13 2 300 20241119190405 20231120180405 60727 security.nl. pdHszcCLc6Pa3sXTv1pRNHdi3qHHNP1+dhnk8iBgSSQTLYL5KdvoKe6fNosJerbGrD3KwZVp6b7a kjBixkNwmw== ) security.nl. 300 IN SOA ( ns3.certifiedsecure.com. dnsmaster.certifiedsecure.com. 2021042066 ;serial 300 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns0.transip.net for security.nl/SOA
	Received 216 bytes from 195.135.195.195
	;; Response received from 195.135.195.195 (216 octets) ;; HEADER SECTION ;; id = 2866 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN SOA ;; ANSWER SECTION (2 records) security.nl. 300 IN SOA ( ns3.certifiedsecure.com. dnsmaster.certifiedsecure.com. 2021042066 ;serial 300 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) security.nl. 300 IN RRSIG ( SOA 13 2 300 20241119190405 20231120180405 60727 security.nl. pdHszcCLc6Pa3sXTv1pRNHdi3qHHNP1+dhnk8iBgSSQTLYL5KdvoKe6fNosJerbGrD3KwZVp6b7a kjBixkNwmw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.transip.nl for security.nl/SOA
	Received 216 bytes from 195.8.195.195
	;; Response received from 195.8.195.195 (216 octets) ;; HEADER SECTION ;; id = 6540 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN SOA ;; ANSWER SECTION (2 records) security.nl. 300 IN SOA ( ns3.certifiedsecure.com. dnsmaster.certifiedsecure.com. 2021042066 ;serial 300 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) security.nl. 300 IN RRSIG ( SOA 13 2 300 20241119190405 20231120180405 60727 security.nl. pdHszcCLc6Pa3sXTv1pRNHdi3qHHNP1+dhnk8iBgSSQTLYL5KdvoKe6fNosJerbGrD3KwZVp6b7a kjBixkNwmw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.transip.eu for security.nl/A
	Received 163 bytes from 37.97.199.195
	;; Response received from 37.97.199.195 (163 octets) ;; HEADER SECTION ;; id = 40078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (2 records) security.nl. 60 IN A 82.94.191.110 security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	security.nl A RR has value 82.94.191.110
	Found 1 RRSIGs over A RRset
	`security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== )`
	RRSIG=60727 and DNSKEY=60727 verifies the A RRset

security.nl

	Query to ns3.certifiedsecure.com for security.nl/A
	Received 163 bytes from 82.94.191.123
	;; Response received from 82.94.191.123 (163 octets) ;; HEADER SECTION ;; id = 2649 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (2 records) security.nl. 60 IN A 82.94.191.110 security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.certifiedsecure.com is authoritative for security.nl
	Found RRSIG signed by security.nl zone
	Query to ns3.certifiedsecure.com for security.nl/A
	Received 163 bytes from 82.94.191.123
	;; Response received from 82.94.191.123 (163 octets) ;; HEADER SECTION ;; id = 19870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (2 records) security.nl. 60 IN A 82.94.191.110 security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	security.nl A RR has value 82.94.191.110
	Found 1 RRSIGs over A RRset
	`security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== )`
	RRSIG=60727 and DNSKEY=60727 verifies the A RRset

security.nl

	Query to ns1.transip.nl for security.nl/A
	Received 163 bytes from 195.8.195.195
	;; Response received from 195.8.195.195 (163 octets) ;; HEADER SECTION ;; id = 57631 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (2 records) security.nl. 60 IN A 82.94.191.110 security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.transip.nl is authoritative for security.nl
	Found RRSIG signed by security.nl zone
	Query to ns1.transip.nl for security.nl/A
	Received 163 bytes from 195.8.195.195
	;; Response received from 195.8.195.195 (163 octets) ;; HEADER SECTION ;; id = 58021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (2 records) security.nl. 60 IN A 82.94.191.110 security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	security.nl A RR has value 82.94.191.110
	Found 1 RRSIGs over A RRset
	`security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== )`
	RRSIG=60727 and DNSKEY=60727 verifies the A RRset

security.nl

	Query to ns0.transip.net for security.nl/A
	Received 163 bytes from 195.135.195.195
	;; Response received from 195.135.195.195 (163 octets) ;; HEADER SECTION ;; id = 193 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (2 records) security.nl. 60 IN A 82.94.191.110 security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns0.transip.net is authoritative for security.nl
	Found RRSIG signed by security.nl zone
	Query to ns0.transip.net for security.nl/A
	Received 163 bytes from 195.135.195.195
	;; Response received from 195.135.195.195 (163 octets) ;; HEADER SECTION ;; id = 56760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (2 records) security.nl. 60 IN A 82.94.191.110 security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	security.nl A RR has value 82.94.191.110
	Found 1 RRSIGs over A RRset
	`security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== )`
	RRSIG=60727 and DNSKEY=60727 verifies the A RRset

security.nl

	Query to ns1.certifiedsecure.com for security.nl/A
	Received 163 bytes from 135.125.28.224
	;; Response received from 135.125.28.224 (163 octets) ;; HEADER SECTION ;; id = 34218 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (2 records) security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== ) security.nl. 60 IN A 82.94.191.110 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.certifiedsecure.com is authoritative for security.nl
	Found RRSIG signed by security.nl zone
	Query to ns1.certifiedsecure.com for security.nl/A
	Received 163 bytes from 135.125.28.224
	;; Response received from 135.125.28.224 (163 octets) ;; HEADER SECTION ;; id = 47801 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (2 records) security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== ) security.nl. 60 IN A 82.94.191.110 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	security.nl A RR has value 82.94.191.110
	Found 1 RRSIGs over A RRset
	`security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== )`
	RRSIG=60727 and DNSKEY=60727 verifies the A RRset

security.nl

	Query to ns2.certifiedsecure.com for security.nl/A
	Received 163 bytes from 135.125.28.216
	;; Response received from 135.125.28.216 (163 octets) ;; HEADER SECTION ;; id = 18390 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (2 records) security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== ) security.nl. 60 IN A 82.94.191.110 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.certifiedsecure.com is authoritative for security.nl
	Found RRSIG signed by security.nl zone
	Query to ns2.certifiedsecure.com for security.nl/A
	Received 163 bytes from 135.125.28.216
	;; Response received from 135.125.28.216 (163 octets) ;; HEADER SECTION ;; id = 61567 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; security.nl. IN A ;; ANSWER SECTION (2 records) security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== ) security.nl. 60 IN A 82.94.191.110 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	security.nl A RR has value 82.94.191.110
	Found 1 RRSIGs over A RRset
	`security.nl. 60 IN RRSIG ( A 13 2 60 20241119190405 20231120180405 60727 security.nl. AcmadZJoaYiVLlm9j6lHaIWRFBp+yELFXE2LRJ8MakIjK7p//AuC/d3nyHCKUWRu18HH8cbMMXK8 iS09WYCzKQ== )`
	RRSIG=60727 and DNSKEY=60727 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test security.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: