DNS lookup
Check domain DNSSEC configuration and validate chain of trust
Secure
cloudflare.com
NS: ns3.cloudflare.com, ns7.cloudflare.com, ns6.cloudflare.com, ns4.cloudflare.com
Registrar: Cloudflare, Inc. — DNSSEC: signedDelegation
Checklist
Registrar DNSSEC delegation
DNSKEY records present
DS records present
DS matches DNSKEY
RRSIG signatures valid
Chain of trust complete (AD bit)
Chain of Trust
.
SECURE
DNSKEY: 38696, 20326, 54393, 21831
com.
SECURE
DNSKEY: 19718, 35511
DS: 19718
cloudflare.com.
SECURE
DNSKEY: 34505, 2371
DS: 2371
DNSKEY Records 2
| Key Tag | Flags | Type | Algorithm | Public Key |
|---|---|---|---|---|
| 2371 | 257 | KSK | ECDSA P-256/SHA-256 (13) | mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopK... |
| 34505 | 256 | ZSK | ECDSA P-256/SHA-256 (13) | oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XN... |
DS Records 1
| Key Tag | Algorithm | Digest Type | Digest |
|---|---|---|---|
| 2371 | ECDSA P-256/SHA-256 (13) | SHA-256 (2) | 32996839A6D808AFE3EB4A795A0E6A7A39A76FC52FF228B22B76F6D63826F2B9 |
RRSIG Records 3
| Type Covered | Algorithm | Key Tag | Signer | Inception | Expiration |
|---|---|---|---|---|---|
| A | ECDSA P-256/SHA-256 | 34505 | cloudflare.com | 2026-04-04 13:37 UTC | 2026-04-06 15:37 UTC |
| DNSKEY | ECDSA P-256/SHA-256 | 2371 | cloudflare.com | 2026-04-04 04:55 UTC | 2026-06-04 04:55 UTC |
| SOA | ECDSA P-256/SHA-256 | 34505 | cloudflare.com | 2026-04-04 13:37 UTC | 2026-04-06 15:37 UTC |