View on GitHub

DNSViz: A DNS visualization tool

_acme-challenge.eptest-1.test-001.xcu2-8y8x.dev.cldr.work

Updated: 2022-04-13 13:36:19 UTC (736 days ago) Update now
« Previous analysis | Next analysis »
DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Insecure (4)
  • _acme-challenge.eptest-1.test-001.xcu2-8y8x.dev.cldr.work/TXT
  • cldr.work/SOA
  • dev.cldr.work/SOA
  • xcu2-8y8x.dev.cldr.work/A (NXDOMAIN)
Secure (1)
  • work/SOA

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Secure (9)
  • ./DNSKEY (alg 8, id 20326)
  • ./DNSKEY (alg 8, id 47671)
  • NSEC3 proving non-existence of cldr.work/DS
  • work/DNSKEY (alg 8, id 25023)
  • work/DNSKEY (alg 8, id 30061)
  • work/DNSKEY (alg 8, id 40251)
  • work/DNSKEY (alg 8, id 41389)
  • work/DS (alg 8, id 30061)
  • work/DS (alg 8, id 7331)
Non_existent (1)
  • work/DNSKEY (alg 8, id 7331)

Delegation statusDelegation status

Insecure (2)
  • cldr.work to dev.cldr.work
  • work to cldr.work
Secure (1)
  • . to work

NoticesNotices

Errors (1)
  • _acme-challenge.eptest-1.test-001.xcu2-8y8x.dev.cldr.work/TXT: A query for _acme-challenge.eptest-1.test-001.xcu2-8y8x.dev.cldr.work results in a NOERROR response, while a query for its ancestor, xcu2-8y8x.dev.cldr.work, returns a name error (NXDOMAIN), which indicates that subdomains of xcu2-8y8x.dev.cldr.work, including _acme-challenge.eptest-1.test-001.xcu2-8y8x.dev.cldr.work, don't exist. (205.251.192.85, 205.251.194.211, 205.251.197.203, 205.251.198.200, 2600:9000:5300:5500::1, 2600:9000:5302:d300::1, 2600:9000:5305:cb00::1, 2600:9000:5306:c800::1, UDP_-_EDNS0_4096_D_KN)

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph