DNS lookup
Check domain DNSSEC configuration and validate chain of trust
Secure
nic.cz
NS: d.ns.nic.cz, b.ns.nic.cz, a.ns.nic.cz
Registrar: REG-CZNIC
Checklist
Registrar DNSSEC delegation
DNSKEY records present
DS records present
DS matches DNSKEY
RRSIG signatures valid
Chain of trust complete (AD bit)
Chain of Trust
.
SECURE
DNSKEY: 20326, 21831, 38696, 54393
cz.
SECURE
DNSKEY: 44691, 20237
DS: 20237
nic.cz.
SECURE
DNSKEY: 31633, 13290
DS: 31633
DNSKEY Records 2
| Key Tag | Flags | Type | Algorithm | Public Key |
|---|---|---|---|---|
| 31633 | 257 | KSK | ECDSA P-256/SHA-256 (13) | IaVXWWb3ILsdAgjjoD85/9/1viwX3gnpegFAilCK... |
| 13290 | 256 | ZSK | ECDSA P-256/SHA-256 (13) | mWKWhKegLuDmD3feUV5IZEYT8PGsYYo2PXqUibx8... |
DS Records 1
| Key Tag | Algorithm | Digest Type | Digest |
|---|---|---|---|
| 31633 | ECDSA P-256/SHA-256 (13) | SHA-256 (2) | 00E55EE6E846A3E953360C6433668CF7D487A8E82933160BE4B3826C664CD9C6 |
RRSIG Records 3
| Type Covered | Algorithm | Key Tag | Signer | Inception | Expiration |
|---|---|---|---|---|---|
| A | ECDSA P-256/SHA-256 | 13290 | nic.cz | 2026-04-01 17:55 UTC | 2026-04-15 19:25 UTC |
| DNSKEY | ECDSA P-256/SHA-256 | 31633 | nic.cz | 2026-04-01 19:25 UTC | 2026-04-15 20:55 UTC |
| SOA | ECDSA P-256/SHA-256 | 13290 | nic.cz | 2026-04-04 06:42 UTC | 2026-04-18 08:12 UTC |