com.cn
Updated:
2025-03-20 09:18:52 UTC (28 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Secure (3)
- com.cn/NS
- com.cn/NSEC3PARAM
- com.cn/SOA
DNSKEY/DS/NSEC status
Secure (9)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 26470)
- ./DNSKEY (alg 8, id 38696)
- cn/DNSKEY (alg 8, id 38388)
- cn/DNSKEY (alg 8, id 57724)
- cn/DS (alg 8, id 57724)
- com.cn/DNSKEY (alg 8, id 43326)
- com.cn/DNSKEY (alg 8, id 46387)
- com.cn/DS (alg 8, id 46387)
Delegation status
Secure (2)
- . to cn
- cn to com.cn
Notices
Errors (8)
- com.cn/A has errors; select the "Denial of existence" DNSSEC option to see them.
- com.cn/CDS has errors; select the "Denial of existence" DNSSEC option to see them.
- com.cn/MX has errors; select the "Denial of existence" DNSSEC option to see them.
- 5lmap.hmek4.com.cn/A has errors; select the "Denial of existence" DNSSEC option to see them.
- com.cn/TXT has errors; select the "Denial of existence" DNSSEC option to see them.
- com.cn/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
- com.cn/AAAA has errors; select the "Denial of existence" DNSSEC option to see them.
- com.cn/CDNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (14)
- . to cn: Authoritative AAAA records exist for ns.cernet.net, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.
- . to cn: The glue address(es) for ns.cernet.net (202.112.0.44) differed from its authoritative address(es) (103.137.60.44, 202.112.0.44). See RFC 1034, Sec. 4.2.2.
- com.cn/DS (alg 8, id 46387): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (203.119.25.1, UDP_-_EDNS0_4096_D_KN)
- com.cn/DS (alg 8, id 46387): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (203.119.25.1, UDP_-_EDNS0_4096_D_KN)
- com.cn/NSEC3PARAM: No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (203.119.25.1, UDP_-_EDNS0_4096_D_KN)
- com.cn/A has warnings; select the "Denial of existence" DNSSEC option to see them.
- com.cn/CDS has warnings; select the "Denial of existence" DNSSEC option to see them.
- com.cn/MX has warnings; select the "Denial of existence" DNSSEC option to see them.
- 5lmap.hmek4.com.cn/A has warnings; select the "Denial of existence" DNSSEC option to see them.
- com.cn/DS has warnings; select the "Denial of existence" DNSSEC option to see them.
- com.cn/TXT has warnings; select the "Denial of existence" DNSSEC option to see them.
- com.cn/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.
- com.cn/CDNSKEY has warnings; select the "Denial of existence" DNSSEC option to see them.
- com.cn/AAAA has warnings; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
