auth.acme-dns.io | DNSViz

auth.acme-dns.io

Updated: 2024-02-07 12:01:40 UTC (103 days ago) Update now

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Insecure (4)

acme-dns.io/SOA
auth.acme-dns.io/A
auth.acme-dns.io/NS
auth.acme-dns.io/SOA

Secure (1)

io/SOA

DNSKEY/DS/NSEC status

Secure (7)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 30903)
NSEC3 proving non-existence of acme-dns.io/DS
io/DNSKEY (alg 8, id 21168)
io/DNSKEY (alg 8, id 25893)
io/DNSKEY (alg 8, id 57355)
io/DS (alg 8, id 57355)

Delegation status

Insecure (2)

acme-dns.io to auth.acme-dns.io
io to acme-dns.io

Secure (1)

. to io

Notices

Warnings (3)

auth.acme-dns.io/A: The server responded with no OPT record, rather than with RCODE FORMERR. (49.12.60.200, UDP_-_EDNS0_4096_D_KN)
auth.acme-dns.io/NS: The server responded with no OPT record, rather than with RCODE FORMERR. (49.12.60.200, UDP_-_EDNS0_4096_D_KN)
auth.acme-dns.io/SOA: The server responded with no OPT record, rather than with RCODE FORMERR. (49.12.60.200, TCP_-_EDNS0_4096_D_N, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20)

DNSKEY legend

Full legend

	SEP bit set
	Revoke bit set
	Trust anchor

See also

DNSSEC Debugger by Verisign Labs.

Download: png | svg

Warning

JavaScript is required to make the graph below interactive.

DNSSEC authentication graph