DNS lookup
Check domain DNSSEC configuration and validate chain of trust
Secure
paypal.com
NS: pdns100.ultradns.com, ns1-pchnet.paypal.com, pdns100.ultradns.net, ns2-pchnet.paypal.com
Registrar: MarkMonitor, Inc. — DNSSEC: signedDelegation
Checklist
Registrar DNSSEC delegation
DNSKEY records present
DS records present
DS matches DNSKEY
RRSIG signatures valid
Chain of trust complete (AD bit)
Chain of Trust
.
SECURE
DNSKEY: 38696, 20326, 21831, 54393
com.
SECURE
DNSKEY: 35511, 19718
DS: 19718
paypal.com.
SECURE
DNSKEY: 36858, 34374, 23751, 7037
DS: 7037, 34800
DNSKEY Records 4
| Key Tag | Flags | Type | Algorithm | Public Key |
|---|---|---|---|---|
| 23751 | 256 | ZSK | ECDSA P-256/SHA-256 (13) | P82aHv27vjeEDMJUhvU8f02W9/WeblsvfMCL+ywM... |
| 7037 | 257 | KSK | ECDSA P-256/SHA-256 (13) | 1NYmUeN/Ens1c5m8lmq5/SiqjpMK+dfGDY+3j8Kk... |
| 36858 | 256 | ZSK | ECDSA P-256/SHA-256 (13) | 2vyx20QRyeW13m0DnznZsAZohTqRqU1nKQ3hbCds... |
| 34374 | 256 | ZSK | ECDSA P-256/SHA-256 (13) | t7/xPcfCnzUrxKawsmnR+SxQAJSSLABBt+y7eV2/... |
DS Records 2
| Key Tag | Algorithm | Digest Type | Digest |
|---|---|---|---|
| 7037 | ECDSA P-256/SHA-256 (13) | SHA-256 (2) | 9778F2FF96889EBED549795DEAA40A6113F1899AF7CA8DD7947FDDFECA9A190B |
| 34800 | ECDSA P-256/SHA-256 (13) | SHA-256 (2) | D9E64BA8C8718FD93B596F9D109D9DAC47C3F557312201DFCCE5DD4128C08F50 |
RRSIG Records 4
| Type Covered | Algorithm | Key Tag | Signer | Inception | Expiration |
|---|---|---|---|---|---|
| A | ECDSA P-256/SHA-256 | 34374 | paypal.com | 2026-04-03 20:49 UTC | 2026-05-03 21:44 UTC |
| DNSKEY | ECDSA P-256/SHA-256 | 34374 | paypal.com | 2026-04-03 21:51 UTC | 2026-05-03 22:09 UTC |
| DNSKEY | ECDSA P-256/SHA-256 | 7037 | paypal.com | 2026-04-03 21:51 UTC | 2026-05-03 22:09 UTC |
| SOA | ECDSA P-256/SHA-256 | 34374 | paypal.com | 2026-04-05 12:24 UTC | 2026-05-05 13:24 UTC |