DNSSEC Debugger - _acme-challenge.systron.de

Domain Name:

Time: 2025-12-21 17:38:31 UTC

Analyzing DNSSEC problems for _acme-challenge.systron.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1414 octets ;; HEADER SECTION ;; id = 15201 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 65535, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260110000000 20251220000000 20326 . RZO5FQjtg6Yk0Dara521nCUfYnQxCLAVdbC+buKQVAKlHsZ6srxXHNAL8DMoHohT+PyIlPFAQMb5 fBZatrDaqxpZZ/YbC0A2zxGxOwuOPb1xRbqi6E3zSKfilTRuAux5jN0KYbZZhFxda62e9Hv+2GJs MLixTpiV3RVXtxENI2GPRA8mRRJPBDR7XVQF/2Pz+vjcAW07dp27CrNmQPyZtVjSgw49Jz1rSsAm +EEKO6C7KLG5hmENQr165D3YjMWCs93YhTY8bhWYVqeDtsB1BwoEWkMqSFs4I4+uMd14BHvO6mlq zOZyWC+3kXYTpoAlE0kFhKNv1i54wgHRB+paqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260110000000 20251220000000 20326 . RZO5FQjtg6Yk0Dara521nCUfYnQxCLAVdbC+buKQVAKlHsZ6srxXHNAL8DMoHohT+PyIlPFAQMb5 fBZatrDaqxpZZ/YbC0A2zxGxOwuOPb1xRbqi6E3zSKfilTRuAux5jN0KYbZZhFxda62e9Hv+2GJs MLixTpiV3RVXtxENI2GPRA8mRRJPBDR7XVQF/2Pz+vjcAW07dp27CrNmQPyZtVjSgw49Jz1rSsAm +EEKO6C7KLG5hmENQr165D3YjMWCs93YhTY8bhWYVqeDtsB1BwoEWkMqSFs4I4+uMd14BHvO6mlq zOZyWC+3kXYTpoAlE0kFhKNv1i54wgHRB+paqw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=21831 is now in the chain-of-trust
	Query to j.root-servers.net for _acme-challenge.systron.de/A
	Received 760 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 760 octets ;; HEADER SECTION ;; id = 19419 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20260103050000 20251221040000 61809 . 25FGEoYIHfnZScEuyCz0z/wOCwCa1Ddj4nqOEw5evxpeMKMixok7ReYJtBFYeejDrJLmmWEbk5yq Fc8R5tECosTK3ihioq4JSFv5erS94GrHdYO8UtEwCPtEzWuX5ZSxy6Id9VA3AnWg+abpdL8TQ9OV fzFtB7wuLsVHsQxmbEgZ3NQI9X24FYqlZkog5t+wMpxofcde/Hs5KHV7gDBnqlQeecYnwlFvP53U p/Iu8GSg7wV+EBqj9OIcv5AREf0yZAHGu23cKmJ3sYlQBNYp0HnbOLg/MAVOw1EAsuaeWLlHjcCP Q4cRjVNnzc0+z2nHt7h8ljbqDvTnT1DjwYwvBw== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for de/DNSKEY
	Received 742 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 742 octets ;; HEADER SECTION ;; id = 34435 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20260103050000 20251221040000 61809 . 25FGEoYIHfnZScEuyCz0z/wOCwCa1Ddj4nqOEw5evxpeMKMixok7ReYJtBFYeejDrJLmmWEbk5yq Fc8R5tECosTK3ihioq4JSFv5erS94GrHdYO8UtEwCPtEzWuX5ZSxy6Id9VA3AnWg+abpdL8TQ9OV fzFtB7wuLsVHsQxmbEgZ3NQI9X24FYqlZkog5t+wMpxofcde/Hs5KHV7gDBnqlQeecYnwlFvP53U p/Iu8GSg7wV+EBqj9OIcv5AREf0yZAHGu23cKmJ3sYlQBNYp0HnbOLg/MAVOw1EAsuaeWLlHjcCP Q4cRjVNnzc0+z2nHt7h8ljbqDvTnT1DjwYwvBw== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to c.root-servers.net for de/DS
	Received 366 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 366 octets ;; HEADER SECTION ;; id = 1409 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20260103050000 20251221040000 61809 . 25FGEoYIHfnZScEuyCz0z/wOCwCa1Ddj4nqOEw5evxpeMKMixok7ReYJtBFYeejDrJLmmWEbk5yq Fc8R5tECosTK3ihioq4JSFv5erS94GrHdYO8UtEwCPtEzWuX5ZSxy6Id9VA3AnWg+abpdL8TQ9OV fzFtB7wuLsVHsQxmbEgZ3NQI9X24FYqlZkog5t+wMpxofcde/Hs5KHV7gDBnqlQeecYnwlFvP53U p/Iu8GSg7wV+EBqj9OIcv5AREf0yZAHGu23cKmJ3sYlQBNYp0HnbOLg/MAVOw1EAsuaeWLlHjcCP Q4cRjVNnzc0+z2nHt7h8ljbqDvTnT1DjwYwvBw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20260103050000 20251221040000 61809 . 25FGEoYIHfnZScEuyCz0z/wOCwCa1Ddj4nqOEw5evxpeMKMixok7ReYJtBFYeejDrJLmmWEbk5yq Fc8R5tECosTK3ihioq4JSFv5erS94GrHdYO8UtEwCPtEzWuX5ZSxy6Id9VA3AnWg+abpdL8TQ9OV fzFtB7wuLsVHsQxmbEgZ3NQI9X24FYqlZkog5t+wMpxofcde/Hs5KHV7gDBnqlQeecYnwlFvP53U p/Iu8GSg7wV+EBqj9OIcv5AREf0yZAHGu23cKmJ3sYlQBNYp0HnbOLg/MAVOw1EAsuaeWLlHjcCP Q4cRjVNnzc0+z2nHt7h8ljbqDvTnT1DjwYwvBw== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to f.nic.de for de/DNSKEY
	Received 893 bytes from 81.91.164.5
	;; Response received from [81.91.164.5] 893 octets ;; HEADER SECTION ;; id = 1030 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (4 records) de. 86400 IN DNSKEY ( 256 3 8 AwEAAcNzNynHnctKFWacQ3HtV8mFCBvWezH8+jekf6ao/YjudkRGjKQStP97sKwM2JDari/XlH/J FTSDQHYoNmB/RPxlICrLzr7c6nPDFIfuCn/5OJold7+9NAwv6e5E0isBkd3h7ZLKpmZyizsfMETX 23YeCbOgZ/BrYFMQidpz57+B ) ; keytag 50538 de. 86400 IN DNSKEY ( 256 3 8 AwEAAdhaDp2Rvq3+jJMRP/V0CszBMjlHNV/Sz34MdnzknXNA2ik1D3VyB127LvQTJ7edw/txbBOy igF3Vf9Woh5mWNcAPXWvmQLZ8ysQbjV8ehQC2EHosEdop977w8ulkOF4X5gSyN7OW+aSIPw+p1qE ilKuV8rtlQxeyp3SQqreAS3D ) ; keytag 41553 de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755 de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260103191957 20251220174957 26755 de. fMRQ8eRbnvnjyugX2d5VDjr9uc117KjUDc1ohQeb53VWWLB9NoctTgfd6ujrynFCUf4ER47ol4J7 8RWR0R4vbRV/iXQOml7x2gV+WqD9v2Y0VUAzetuudyGRmmvezIwerQrOep6cBVQIkhiBNcnGDYet /hs0l1LqLTau73aEwcVHxzsnt6CU3zLPxOtQf/XnSbPsJgvx0+9fHPitOk3irn13T2I/1pJogMCk 7WFlaj8SyOLVl5wpfCTHh0NXP2aB0hiQYe2ey6ehDn2eSBWCeMXaulHU/n5cEAUum0m1zyff60hu deCk3EPjDgfpgjbEg71sYP+jA0vijRBjqefsQg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for de
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAcNzNynHnctKFWacQ3HtV8mFCBvWezH8+jekf6ao/YjudkRGjKQStP97sKwM2JDari/XlH/J FTSDQHYoNmB/RPxlICrLzr7c6nPDFIfuCn/5OJold7+9NAwv6e5E0isBkd3h7ZLKpmZyizsfMETX 23YeCbOgZ/BrYFMQidpz57+B ) ; keytag 50538`
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAdhaDp2Rvq3+jJMRP/V0CszBMjlHNV/Sz34MdnzknXNA2ik1D3VyB127LvQTJ7edw/txbBOy igF3Vf9Woh5mWNcAPXWvmQLZ8ysQbjV8ehQC2EHosEdop977w8ulkOF4X5gSyN7OW+aSIPw+p1qE ilKuV8rtlQxeyp3SQqreAS3D ) ; keytag 41553`
	`de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20260103191957 20251220174957 26755 de. fMRQ8eRbnvnjyugX2d5VDjr9uc117KjUDc1ohQeb53VWWLB9NoctTgfd6ujrynFCUf4ER47ol4J7 8RWR0R4vbRV/iXQOml7x2gV+WqD9v2Y0VUAzetuudyGRmmvezIwerQrOep6cBVQIkhiBNcnGDYet /hs0l1LqLTau73aEwcVHxzsnt6CU3zLPxOtQf/XnSbPsJgvx0+9fHPitOk3irn13T2I/1pJogMCk 7WFlaj8SyOLVl5wpfCTHh0NXP2aB0hiQYe2ey6ehDn2eSBWCeMXaulHU/n5cEAUum0m1zyff60hu deCk3EPjDgfpgjbEg71sYP+jA0vijRBjqefsQg== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=50538 is now in the chain-of-trust
	DNSKEY=41553 is now in the chain-of-trust
	Query to n.de.net for _acme-challenge.systron.de/A
	Received 423 bytes from 194.146.107.6
	;; Response received from [194.146.107.6] 423 octets ;; HEADER SECTION ;; id = 46069 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) systron.de. 86400 IN NS ns1.systron.de. systron.de. 86400 IN NS ns2.systron.de. systron.de. 86400 IN NS ns3.systron.de. systron.de. 86400 IN DS ( 38671 8 2 35957abcb65b9f648431c995179b710d1ec2e5cda368069db65f91dd404e9e70 ) systron.de. 86400 IN RRSIG ( DS 8 2 86400 20251230094703 20251216081703 50538 de. VKQY6VNj/9fmgYkABN+lAG78lgf8rcjot8nExplgiXDQFKdGtVKU7KsjJLHmbKtLDerINHVmboZF wvRaPmwwKu2tEeqgFHNlmdUcuS3ejSMpPjEW3xYQLyzLpG3rqFkjfG++OjwX3MBlleqYcmRKymB7 SLWucgF3r4IdIa1b0U8= ) ;; ADDITIONAL SECTION (6 records) ns1.systron.de. 86400 IN A 109.91.140.201 ns2.systron.de. 86400 IN A 89.58.12.225 ns3.systron.de. 86400 IN A 81.7.13.30 ns1.systron.de. 86400 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ns3.systron.de. 86400 IN AAAA 2a02:180:6:1::278f ;; { "EDNS-VERSION": 0 }
	Query to s.de.net for systron.de/DNSKEY
	Received 407 bytes from 195.243.137.26
	;; Response received from [195.243.137.26] 407 octets ;; HEADER SECTION ;; id = 23998 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) systron.de. 86400 IN NS ns1.systron.de. systron.de. 86400 IN NS ns2.systron.de. systron.de. 86400 IN NS ns3.systron.de. systron.de. 86400 IN DS ( 38671 8 2 35957abcb65b9f648431c995179b710d1ec2e5cda368069db65f91dd404e9e70 ) systron.de. 86400 IN RRSIG ( DS 8 2 86400 20251230094703 20251216081703 50538 de. VKQY6VNj/9fmgYkABN+lAG78lgf8rcjot8nExplgiXDQFKdGtVKU7KsjJLHmbKtLDerINHVmboZF wvRaPmwwKu2tEeqgFHNlmdUcuS3ejSMpPjEW3xYQLyzLpG3rqFkjfG++OjwX3MBlleqYcmRKymB7 SLWucgF3r4IdIa1b0U8= ) ;; ADDITIONAL SECTION (6 records) ns1.systron.de. 86400 IN A 109.91.140.201 ns1.systron.de. 86400 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ns2.systron.de. 86400 IN A 89.58.12.225 ns3.systron.de. 86400 IN A 81.7.13.30 ns3.systron.de. 86400 IN AAAA 2a02:180:6:1::278f ;; { "EDNS-VERSION": 0 }
	Found child zone systron.de

systron.de

	Checking DS between de and systron.de
	Query to l.de.net for systron.de/DS
	Received 249 bytes from 77.67.63.105
	;; Response received from [77.67.63.105] 249 octets ;; HEADER SECTION ;; id = 59995 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN DS ;; ANSWER SECTION (2 records) systron.de. 86400 IN DS ( 38671 8 2 35957abcb65b9f648431c995179b710d1ec2e5cda368069db65f91dd404e9e70 ) systron.de. 86400 IN RRSIG ( DS 8 2 86400 20251230094703 20251216081703 50538 de. VKQY6VNj/9fmgYkABN+lAG78lgf8rcjot8nExplgiXDQFKdGtVKU7KsjJLHmbKtLDerINHVmboZF wvRaPmwwKu2tEeqgFHNlmdUcuS3ejSMpPjEW3xYQLyzLpG3rqFkjfG++OjwX3MBlleqYcmRKymB7 SLWucgF3r4IdIa1b0U8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for systron.de in the de zone
	DS=38671/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`systron.de. 86400 IN RRSIG ( DS 8 2 86400 20251230094703 20251216081703 50538 de. VKQY6VNj/9fmgYkABN+lAG78lgf8rcjot8nExplgiXDQFKdGtVKU7KsjJLHmbKtLDerINHVmboZF wvRaPmwwKu2tEeqgFHNlmdUcuS3ejSMpPjEW3xYQLyzLpG3rqFkjfG++OjwX3MBlleqYcmRKymB7 SLWucgF3r4IdIa1b0U8= )`
	RRSIG=50538 and DNSKEY=50538 verifies the DS RRset
	DS=38671/SHA-256 is now in the chain-of-trust
	`systron.de. 86400 IN DS ( 38671 8 2 35957abcb65b9f648431c995179b710d1ec2e5cda368069db65f91dd404e9e70 )`
	Query to ns1.systron.de for systron.de/DNSKEY
	Received 889 bytes from 109.91.140.201
	;; Response received from [109.91.140.201] 889 octets ;; HEADER SECTION ;; id = 60012 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN DNSKEY ;; ANSWER SECTION (3 records) systron.de. 3600 IN DNSKEY ( 256 3 8 AwEAAcvJB/3EvVECut2YfwQRJPY0CbgJv40gkr0M8M8e+p69zz+qgC5spKokm4S02InwZxerTeDU TxPoDV1rWX4R6UXp1nL2l59OiCPPO7rXL6d29W+GMryku6EVfkGpFBJCdHX4q3pXlZT3yizFVkmq C4PYDJNsSeTYS6pt50MYho7t/fiAS2AlS5jYhnq1rweGyUHmt9GsZrC+mQ5PlpdB2ECSwyyDrXRp 7uPhY+Gep4/pcMON6Mb7QJKWqqsM3t9pHP67RCGp4zUAgWjeBVTodYnEjjuO0SNk3tQmaTaQfDvA qfLCQacWuW7O2V0pRTvZ0QoVqIemeKJ/FEagthlzT7s= ) ; keytag 2503 systron.de. 3600 IN DNSKEY ( 257 3 8 AwEAAboOSIzkog6g+tBFxqkxSrZ2azPdu3rPkDqLu7/+tynNVhrs7RJEUQ6l4RgOR9jFdVnLmsDY XEdQadAedDeUv12xQ99roU9Pk8HS15VzQ6JyjY55STbpBhuA4CNJRNdIcY3SytfEwlFNB/1c5vx4 l4GBN/ObMxAZqecaRgvAPyy0qNXq26ImZ0B/1uFCniuTkcHGnzTZmtLVc+b1II8Mfrv4R87IsICu /0OfRd/N0B1TzODye4rrh/IKMq02VtXb6EFuv65nLwrYDNxVk1EVWJNjrbL1G0C5JLxy/cxkViA0 4t4QrTqb5Vsy7UUg8rWcgJj/CCpdGa0Lad5yyz1Ujlk= ) ; keytag 38671 systron.de. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251228102330 20251214095817 38671 systron.de. MzYoi5mEyuCzrXUzY86MC7i3ZXW76Y0ZAfgBw5sPKZg7H7utDDcPv2SoaGi1I99MPoTWIRlM956G TJr7aM00MSz522MUb9pdb9qI3EASw992M/NSS5nz/blGm7WieqTmVW07Y5qCejF+lrMCaXZqQkZe 6veGMcNsr7QJWBP24thlY6g33z54vOZOtGJMUkoOefIbhCD2kH4sukFWmcWx7IM4HncfLhnmvOcC 9OlR5IP18W4iUn//94J26XVDfqoDzugHEjNrt873uF6yAai61Aq449MOWojqQXzYARVl76GF8tTC O1B0w0dDLsvTvhe2KpO3TYfdUJVyZZpELiLNsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for systron.de
	`systron.de. 3600 IN DNSKEY ( 256 3 8 AwEAAcvJB/3EvVECut2YfwQRJPY0CbgJv40gkr0M8M8e+p69zz+qgC5spKokm4S02InwZxerTeDU TxPoDV1rWX4R6UXp1nL2l59OiCPPO7rXL6d29W+GMryku6EVfkGpFBJCdHX4q3pXlZT3yizFVkmq C4PYDJNsSeTYS6pt50MYho7t/fiAS2AlS5jYhnq1rweGyUHmt9GsZrC+mQ5PlpdB2ECSwyyDrXRp 7uPhY+Gep4/pcMON6Mb7QJKWqqsM3t9pHP67RCGp4zUAgWjeBVTodYnEjjuO0SNk3tQmaTaQfDvA qfLCQacWuW7O2V0pRTvZ0QoVqIemeKJ/FEagthlzT7s= ) ; keytag 2503`
	`systron.de. 3600 IN DNSKEY ( 257 3 8 AwEAAboOSIzkog6g+tBFxqkxSrZ2azPdu3rPkDqLu7/+tynNVhrs7RJEUQ6l4RgOR9jFdVnLmsDY XEdQadAedDeUv12xQ99roU9Pk8HS15VzQ6JyjY55STbpBhuA4CNJRNdIcY3SytfEwlFNB/1c5vx4 l4GBN/ObMxAZqecaRgvAPyy0qNXq26ImZ0B/1uFCniuTkcHGnzTZmtLVc+b1II8Mfrv4R87IsICu /0OfRd/N0B1TzODye4rrh/IKMq02VtXb6EFuv65nLwrYDNxVk1EVWJNjrbL1G0C5JLxy/cxkViA0 4t4QrTqb5Vsy7UUg8rWcgJj/CCpdGa0Lad5yyz1Ujlk= ) ; keytag 38671`
	DNSKEY=38671/SEP is now in the chain-of-trust
	DS=38671/SHA-256 verifies DNSKEY=38671/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`systron.de. 3600 IN RRSIG ( DNSKEY 8 2 3600 20251228102330 20251214095817 38671 systron.de. MzYoi5mEyuCzrXUzY86MC7i3ZXW76Y0ZAfgBw5sPKZg7H7utDDcPv2SoaGi1I99MPoTWIRlM956G TJr7aM00MSz522MUb9pdb9qI3EASw992M/NSS5nz/blGm7WieqTmVW07Y5qCejF+lrMCaXZqQkZe 6veGMcNsr7QJWBP24thlY6g33z54vOZOtGJMUkoOefIbhCD2kH4sukFWmcWx7IM4HncfLhnmvOcC 9OlR5IP18W4iUn//94J26XVDfqoDzugHEjNrt873uF6yAai61Aq449MOWojqQXzYARVl76GF8tTC O1B0w0dDLsvTvhe2KpO3TYfdUJVyZZpELiLNsg== )`
	RRSIG=38671 and DNSKEY=38671/SEP verifies the DNSKEY RRset
	DNSKEY=2503 is now in the chain-of-trust
	Query to ns2.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 89.58.12.225
	;; Response received from [89.58.12.225] 1174 octets ;; HEADER SECTION ;; id = 46471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20251228071619 20251214065107 2503 systron.de. pRuykdFBG/vo2XVPh9Tb4Mm+eMIBi9sVe5OGyqeSnrSxFE58DxPgD78YuQBRvqiEWuoyB1pi1OB9 B20tASy3n+/iHr5bKC/5vHw/jiRB5HPvHA6aO3QDjw3pYRkPo4cLF1np78++IY3LzrPfkg41iq7v pqIFVtz2PgD5VYVId0HZ2Sm7HghNrwXR3TH9yG4LQV2gYUdWsdbIZpe9Xp8OhlfTnjBN+vEXxVTL iyMee8OxdFskMnqpHQxg09sAgewMY3vVzvY0rHbulILJoyyY48walA3k4PXIVJh7yR1f0HvBitp/ iHsC4VBCAUop5YLcBfiY5Uztqd3PXNPc76RY2g== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20251228071619 20251214065107 2503 systron.de. Ipynqb401WaKzjhzN7gEB/q0PzilbZ5CPTnHTxtezaof2Romt2HbZU9qFn+UCy0/pI8VqVCh3YBG gfe05Lc5aa5xJQjbS8pjXZhUunz4Ry00tNo6Pfag+FKWOpKGbkAd0rxrFkM6e9LH486/eD6Eyniv Yql3W2saMo4dsGBIGp39KrN8IZq5oqZkO/Bxa0RIX1Tku/RVE3D0UQFZBwgD2pWwgmTtEvCMOH1L FjVblx1+txMgDzB4S2A8py6s2EQaNm3JXlelgO2aLbjr19rCZ9ug5NJ/MrdbWQS8AOcVOBFhGT7s pexnen+stKZUelnRpTAfXUSViZXjg7T9j7LZUA== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260102095355 20251219092925 2503 systron.de. DAOXGgc62eg5Zj7rWjya/eP2x0bwLwluZunzpSYFQBBVErJjXMjWAz2uxg6wnZc0xCCNyGb955rc QtzQ+RwfE221Ruj0u04WSRqJQmWCgCIUdEAyIfOAC8nxKrh8PtMend/86lARSqqQAe1B3MrnV4Qd O5Eh2qq8gYJ7dszxvFY43P1/H2ysnKJsdTTgMZtt/qM810SJHih6f+9LgOLoh9hHMY4Z+gkWMMRu 6nJ/mo2NCKcDY11D+8S5WPYGDqy4aauZSza1jvxWZbsnUH03yYGx7d7hxWxn7Vue4SGpXijiO0Z0 TXe+sD8/fJPiUKhkJIvMEbfScdp5/AWIs6h8AA== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	ns2.systron.de is authoritative for _acme-challenge.systron.de
	Query to ns2.systron.de for _acme-challenge.systron.de/DNSKEY
	Received 1534 bytes from 89.58.12.225
	;; Response received from [89.58.12.225] 1534 octets ;; HEADER SECTION ;; id = 7069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN NSEC3 ( 1 0 0 - l6ipu76dhb5m9ikg3mlg41p4b7re57f0 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY CAA ) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20251228053800 20251214053248 2503 systron.de. N5WvSkvZjWz6JSwKOb7OyUDICJCbtuMcHaWSdwh4rWOLxa4OpN7gY8QD2eakOH8cs7YxCZUIMA05 DrWxB+sHiDFLsMRr0RhcvhGnKntzl/qrTSF7HeGqe33UiofHjYdrp0NvpDLF5QU4/udWHykHFldW 5PeRxEmeirp7MTP+ULPcZGu1NUJM2rB+UVoIZFn1PfMDOEUs9DV9A9Z/iqKXEzao/H+FJpozN643 cI7pSn1xsxmSXbjDRlGFKdKBFlN1y1IySDRopPUP2dEWF5a4B5ABz+hsoB+3feFtioedDy59B1Py 2hA4usEq3lATiTsErjAehQzx27BGmQLC+Xulhw== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260102095355 20251219092925 2503 systron.de. DAOXGgc62eg5Zj7rWjya/eP2x0bwLwluZunzpSYFQBBVErJjXMjWAz2uxg6wnZc0xCCNyGb955rc QtzQ+RwfE221Ruj0u04WSRqJQmWCgCIUdEAyIfOAC8nxKrh8PtMend/86lARSqqQAe1B3MrnV4Qd O5Eh2qq8gYJ7dszxvFY43P1/H2ysnKJsdTTgMZtt/qM810SJHih6f+9LgOLoh9hHMY4Z+gkWMMRu 6nJ/mo2NCKcDY11D+8S5WPYGDqy4aauZSza1jvxWZbsnUH03yYGx7d7hxWxn7Vue4SGpXijiO0Z0 TXe+sD8/fJPiUKhkJIvMEbfScdp5/AWIs6h8AA== ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN NSEC3 ( 1 0 0 - brnjcmhfcq1tenfcjvms6uqo9nckuiqm A RRSIG ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20251226225342 20251212223649 2503 systron.de. H0m1dXDtMfmr1LwYfeL72I3R2BV+12d9WUNeXWbKRePOLR+JwnFBwM8Z7pLd8cWOrOtnSOZBv2IB xwn+diLBcvcSSK1r8N2lDo/uKKHi8aZVLJPIWIpleSvVgR1q7jnlLHdEWxne5PvnhomY4u/xGbYA An0aLsVqG2QTnRzkiBzBYqHtjMXmUNd9njiPp9Rs99v4t5KWSJgxTIBxLfokMomIXcMRskI3vnZz 57GBrF/HwoAXa5ZUYa9Sa1imordrSpX7HvwcGmRVApzBOCwo75+YDATzSTWU1vp1lXXgRs6cvsrD 3yh+wIcjLf/kAS5Q8fpDIRxexg+z9cELbAA82Q== ) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2025101332 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260104172010 20251221162010 2503 systron.de. To2e8ZUejP1VFKKviz7metKcurvNHa8hFhsvCoYDT9/4Zta1dqAewcgvdlSv+d1Gr2Gv+zUJnH1v OKZDavFhIF07lBtG8PAg2L1WI+EHeMVxPHDXO6Q/HYPH4sQO45iYk411H+xX/dxuIU9aiwldkpsi uaBKCJHuHnJ4LqgLsfF5BXhh1sm6V495vhH8QPjXDiaH6p/5Cpf/uu2nABkkr/nGbrCaAZ2LxWP7 cCl3OBLQb4CeWJuRTU3t6wSPCth+VJsfwYLCGAKFCUtGgQ49Csw5ME2QhYsBx/XcpBfyJUQGRpol CcScCKHPNac6Vxy9K9Cxw3RuS0+miVvishMLtg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by systron.de zone
	Query to ns1.systron.de for systron.de/SOA
	Received 1132 bytes from 109.91.140.201
	;; Response received from [109.91.140.201] 1132 octets ;; HEADER SECTION ;; id = 58221 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN SOA ;; ANSWER SECTION (2 records) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2025101332 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260104172010 20251221162010 2503 systron.de. To2e8ZUejP1VFKKviz7metKcurvNHa8hFhsvCoYDT9/4Zta1dqAewcgvdlSv+d1Gr2Gv+zUJnH1v OKZDavFhIF07lBtG8PAg2L1WI+EHeMVxPHDXO6Q/HYPH4sQO45iYk411H+xX/dxuIU9aiwldkpsi uaBKCJHuHnJ4LqgLsfF5BXhh1sm6V495vhH8QPjXDiaH6p/5Cpf/uu2nABkkr/nGbrCaAZ2LxWP7 cCl3OBLQb4CeWJuRTU3t6wSPCth+VJsfwYLCGAKFCUtGgQ49Csw5ME2QhYsBx/XcpBfyJUQGRpol CcScCKHPNac6Vxy9K9Cxw3RuS0+miVvishMLtg== ) ;; AUTHORITY SECTION (4 records) systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20251228071619 20251214065107 2503 systron.de. Ipynqb401WaKzjhzN7gEB/q0PzilbZ5CPTnHTxtezaof2Romt2HbZU9qFn+UCy0/pI8VqVCh3YBG gfe05Lc5aa5xJQjbS8pjXZhUunz4Ry00tNo6Pfag+FKWOpKGbkAd0rxrFkM6e9LH486/eD6Eyniv Yql3W2saMo4dsGBIGp39KrN8IZq5oqZkO/Bxa0RIX1Tku/RVE3D0UQFZBwgD2pWwgmTtEvCMOH1L FjVblx1+txMgDzB4S2A8py6s2EQaNm3JXlelgO2aLbjr19rCZ9ug5NJ/MrdbWQS8AOcVOBFhGT7s pexnen+stKZUelnRpTAfXUSViZXjg7T9j7LZUA== ) ;; ADDITIONAL SECTION (7 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ns3.systron.de. 3600 IN AAAA 2a02:180:6:1::278f ns1.systron.de. 3600 IN RRSIG ( A 8 3 3600 20251228122003 20251214121844 2503 systron.de. RlnWW3O9BK5+c5qSmEFd+5OD0obf7x0pln9Rykv4amKp/bXyl3Cl9M8mfaQTCYJUXrctxGF1n8Uy HR0/fZPxM9mgult+h4uX7A5sBy2iI29xLB1e/9QZ6Rf0sEWxIVKBnGksaKX0lvoguusgvkxhdVPM rE8JerHQ2ObNClQfeWO+zETmPc9dBR+/CUzeTKozP8/iUtUr9p4/lMvh7m7JlfjSpxn7DYWMC4QF YwtaubH75G3kqZD5cmnMmZNNLng9Uv0c5QJLw95l7O2s06OtppIQk+vw+gzkCj2/XJmALO88K2rk FpTAS26OikeT28mkqiXCkSlZnXm5Ko+8KKkdIg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns3.systron.de for systron.de/SOA
	Received 1132 bytes from 81.7.13.30
	;; Response received from [81.7.13.30] 1132 octets ;; HEADER SECTION ;; id = 14583 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN SOA ;; ANSWER SECTION (2 records) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2025101332 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260104172010 20251221162010 2503 systron.de. To2e8ZUejP1VFKKviz7metKcurvNHa8hFhsvCoYDT9/4Zta1dqAewcgvdlSv+d1Gr2Gv+zUJnH1v OKZDavFhIF07lBtG8PAg2L1WI+EHeMVxPHDXO6Q/HYPH4sQO45iYk411H+xX/dxuIU9aiwldkpsi uaBKCJHuHnJ4LqgLsfF5BXhh1sm6V495vhH8QPjXDiaH6p/5Cpf/uu2nABkkr/nGbrCaAZ2LxWP7 cCl3OBLQb4CeWJuRTU3t6wSPCth+VJsfwYLCGAKFCUtGgQ49Csw5ME2QhYsBx/XcpBfyJUQGRpol CcScCKHPNac6Vxy9K9Cxw3RuS0+miVvishMLtg== ) ;; AUTHORITY SECTION (4 records) systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20251228071619 20251214065107 2503 systron.de. Ipynqb401WaKzjhzN7gEB/q0PzilbZ5CPTnHTxtezaof2Romt2HbZU9qFn+UCy0/pI8VqVCh3YBG gfe05Lc5aa5xJQjbS8pjXZhUunz4Ry00tNo6Pfag+FKWOpKGbkAd0rxrFkM6e9LH486/eD6Eyniv Yql3W2saMo4dsGBIGp39KrN8IZq5oqZkO/Bxa0RIX1Tku/RVE3D0UQFZBwgD2pWwgmTtEvCMOH1L FjVblx1+txMgDzB4S2A8py6s2EQaNm3JXlelgO2aLbjr19rCZ9ug5NJ/MrdbWQS8AOcVOBFhGT7s pexnen+stKZUelnRpTAfXUSViZXjg7T9j7LZUA== ) ;; ADDITIONAL SECTION (7 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ns3.systron.de. 3600 IN AAAA 2a02:180:6:1::278f ns1.systron.de. 3600 IN RRSIG ( A 8 3 3600 20251228122003 20251214121844 2503 systron.de. RlnWW3O9BK5+c5qSmEFd+5OD0obf7x0pln9Rykv4amKp/bXyl3Cl9M8mfaQTCYJUXrctxGF1n8Uy HR0/fZPxM9mgult+h4uX7A5sBy2iI29xLB1e/9QZ6Rf0sEWxIVKBnGksaKX0lvoguusgvkxhdVPM rE8JerHQ2ObNClQfeWO+zETmPc9dBR+/CUzeTKozP8/iUtUr9p4/lMvh7m7JlfjSpxn7DYWMC4QF YwtaubH75G3kqZD5cmnMmZNNLng9Uv0c5QJLw95l7O2s06OtppIQk+vw+gzkCj2/XJmALO88K2rk FpTAS26OikeT28mkqiXCkSlZnXm5Ko+8KKkdIg== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 89.58.12.225
	;; Response received from [89.58.12.225] 1174 octets ;; HEADER SECTION ;; id = 50588 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20251228071619 20251214065107 2503 systron.de. pRuykdFBG/vo2XVPh9Tb4Mm+eMIBi9sVe5OGyqeSnrSxFE58DxPgD78YuQBRvqiEWuoyB1pi1OB9 B20tASy3n+/iHr5bKC/5vHw/jiRB5HPvHA6aO3QDjw3pYRkPo4cLF1np78++IY3LzrPfkg41iq7v pqIFVtz2PgD5VYVId0HZ2Sm7HghNrwXR3TH9yG4LQV2gYUdWsdbIZpe9Xp8OhlfTnjBN+vEXxVTL iyMee8OxdFskMnqpHQxg09sAgewMY3vVzvY0rHbulILJoyyY48walA3k4PXIVJh7yR1f0HvBitp/ iHsC4VBCAUop5YLcBfiY5Uztqd3PXNPc76RY2g== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20251228071619 20251214065107 2503 systron.de. Ipynqb401WaKzjhzN7gEB/q0PzilbZ5CPTnHTxtezaof2Romt2HbZU9qFn+UCy0/pI8VqVCh3YBG gfe05Lc5aa5xJQjbS8pjXZhUunz4Ry00tNo6Pfag+FKWOpKGbkAd0rxrFkM6e9LH486/eD6Eyniv Yql3W2saMo4dsGBIGp39KrN8IZq5oqZkO/Bxa0RIX1Tku/RVE3D0UQFZBwgD2pWwgmTtEvCMOH1L FjVblx1+txMgDzB4S2A8py6s2EQaNm3JXlelgO2aLbjr19rCZ9ug5NJ/MrdbWQS8AOcVOBFhGT7s pexnen+stKZUelnRpTAfXUSViZXjg7T9j7LZUA== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260102095355 20251219092925 2503 systron.de. DAOXGgc62eg5Zj7rWjya/eP2x0bwLwluZunzpSYFQBBVErJjXMjWAz2uxg6wnZc0xCCNyGb955rc QtzQ+RwfE221Ruj0u04WSRqJQmWCgCIUdEAyIfOAC8nxKrh8PtMend/86lARSqqQAe1B3MrnV4Qd O5Eh2qq8gYJ7dszxvFY43P1/H2ysnKJsdTTgMZtt/qM810SJHih6f+9LgOLoh9hHMY4Z+gkWMMRu 6nJ/mo2NCKcDY11D+8S5WPYGDqy4aauZSza1jvxWZbsnUH03yYGx7d7hxWxn7Vue4SGpXijiO0Z0 TXe+sD8/fJPiUKhkJIvMEbfScdp5/AWIs6h8AA== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	_acme-challenge.systron.de A RR has value 109.91.140.201
	Found 1 RRSIGs over A RRset
	`_acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20251228071619 20251214065107 2503 systron.de. pRuykdFBG/vo2XVPh9Tb4Mm+eMIBi9sVe5OGyqeSnrSxFE58DxPgD78YuQBRvqiEWuoyB1pi1OB9 B20tASy3n+/iHr5bKC/5vHw/jiRB5HPvHA6aO3QDjw3pYRkPo4cLF1np78++IY3LzrPfkg41iq7v pqIFVtz2PgD5VYVId0HZ2Sm7HghNrwXR3TH9yG4LQV2gYUdWsdbIZpe9Xp8OhlfTnjBN+vEXxVTL iyMee8OxdFskMnqpHQxg09sAgewMY3vVzvY0rHbulILJoyyY48walA3k4PXIVJh7yR1f0HvBitp/ iHsC4VBCAUop5YLcBfiY5Uztqd3PXNPc76RY2g== )`
	RRSIG=2503 and DNSKEY=2503 verifies the A RRset

systron.de

	Query to ns1.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 109.91.140.201
	;; Response received from [109.91.140.201] 1174 octets ;; HEADER SECTION ;; id = 30961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20251228071619 20251214065107 2503 systron.de. pRuykdFBG/vo2XVPh9Tb4Mm+eMIBi9sVe5OGyqeSnrSxFE58DxPgD78YuQBRvqiEWuoyB1pi1OB9 B20tASy3n+/iHr5bKC/5vHw/jiRB5HPvHA6aO3QDjw3pYRkPo4cLF1np78++IY3LzrPfkg41iq7v pqIFVtz2PgD5VYVId0HZ2Sm7HghNrwXR3TH9yG4LQV2gYUdWsdbIZpe9Xp8OhlfTnjBN+vEXxVTL iyMee8OxdFskMnqpHQxg09sAgewMY3vVzvY0rHbulILJoyyY48walA3k4PXIVJh7yR1f0HvBitp/ iHsC4VBCAUop5YLcBfiY5Uztqd3PXNPc76RY2g== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20251228071619 20251214065107 2503 systron.de. Ipynqb401WaKzjhzN7gEB/q0PzilbZ5CPTnHTxtezaof2Romt2HbZU9qFn+UCy0/pI8VqVCh3YBG gfe05Lc5aa5xJQjbS8pjXZhUunz4Ry00tNo6Pfag+FKWOpKGbkAd0rxrFkM6e9LH486/eD6Eyniv Yql3W2saMo4dsGBIGp39KrN8IZq5oqZkO/Bxa0RIX1Tku/RVE3D0UQFZBwgD2pWwgmTtEvCMOH1L FjVblx1+txMgDzB4S2A8py6s2EQaNm3JXlelgO2aLbjr19rCZ9ug5NJ/MrdbWQS8AOcVOBFhGT7s pexnen+stKZUelnRpTAfXUSViZXjg7T9j7LZUA== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260102095355 20251219092925 2503 systron.de. DAOXGgc62eg5Zj7rWjya/eP2x0bwLwluZunzpSYFQBBVErJjXMjWAz2uxg6wnZc0xCCNyGb955rc QtzQ+RwfE221Ruj0u04WSRqJQmWCgCIUdEAyIfOAC8nxKrh8PtMend/86lARSqqQAe1B3MrnV4Qd O5Eh2qq8gYJ7dszxvFY43P1/H2ysnKJsdTTgMZtt/qM810SJHih6f+9LgOLoh9hHMY4Z+gkWMMRu 6nJ/mo2NCKcDY11D+8S5WPYGDqy4aauZSza1jvxWZbsnUH03yYGx7d7hxWxn7Vue4SGpXijiO0Z0 TXe+sD8/fJPiUKhkJIvMEbfScdp5/AWIs6h8AA== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	ns1.systron.de is authoritative for _acme-challenge.systron.de
	Query to ns3.systron.de for _acme-challenge.systron.de/DNSKEY
	Received 1534 bytes from 81.7.13.30
	;; Response received from [81.7.13.30] 1534 octets ;; HEADER SECTION ;; id = 15099 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN NSEC3 ( 1 0 0 - l6ipu76dhb5m9ikg3mlg41p4b7re57f0 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY CAA ) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20251228053800 20251214053248 2503 systron.de. N5WvSkvZjWz6JSwKOb7OyUDICJCbtuMcHaWSdwh4rWOLxa4OpN7gY8QD2eakOH8cs7YxCZUIMA05 DrWxB+sHiDFLsMRr0RhcvhGnKntzl/qrTSF7HeGqe33UiofHjYdrp0NvpDLF5QU4/udWHykHFldW 5PeRxEmeirp7MTP+ULPcZGu1NUJM2rB+UVoIZFn1PfMDOEUs9DV9A9Z/iqKXEzao/H+FJpozN643 cI7pSn1xsxmSXbjDRlGFKdKBFlN1y1IySDRopPUP2dEWF5a4B5ABz+hsoB+3feFtioedDy59B1Py 2hA4usEq3lATiTsErjAehQzx27BGmQLC+Xulhw== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260102095355 20251219092925 2503 systron.de. DAOXGgc62eg5Zj7rWjya/eP2x0bwLwluZunzpSYFQBBVErJjXMjWAz2uxg6wnZc0xCCNyGb955rc QtzQ+RwfE221Ruj0u04WSRqJQmWCgCIUdEAyIfOAC8nxKrh8PtMend/86lARSqqQAe1B3MrnV4Qd O5Eh2qq8gYJ7dszxvFY43P1/H2ysnKJsdTTgMZtt/qM810SJHih6f+9LgOLoh9hHMY4Z+gkWMMRu 6nJ/mo2NCKcDY11D+8S5WPYGDqy4aauZSza1jvxWZbsnUH03yYGx7d7hxWxn7Vue4SGpXijiO0Z0 TXe+sD8/fJPiUKhkJIvMEbfScdp5/AWIs6h8AA== ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN NSEC3 ( 1 0 0 - brnjcmhfcq1tenfcjvms6uqo9nckuiqm A RRSIG ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20251226225342 20251212223649 2503 systron.de. H0m1dXDtMfmr1LwYfeL72I3R2BV+12d9WUNeXWbKRePOLR+JwnFBwM8Z7pLd8cWOrOtnSOZBv2IB xwn+diLBcvcSSK1r8N2lDo/uKKHi8aZVLJPIWIpleSvVgR1q7jnlLHdEWxne5PvnhomY4u/xGbYA An0aLsVqG2QTnRzkiBzBYqHtjMXmUNd9njiPp9Rs99v4t5KWSJgxTIBxLfokMomIXcMRskI3vnZz 57GBrF/HwoAXa5ZUYa9Sa1imordrSpX7HvwcGmRVApzBOCwo75+YDATzSTWU1vp1lXXgRs6cvsrD 3yh+wIcjLf/kAS5Q8fpDIRxexg+z9cELbAA82Q== ) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2025101332 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260104172010 20251221162010 2503 systron.de. To2e8ZUejP1VFKKviz7metKcurvNHa8hFhsvCoYDT9/4Zta1dqAewcgvdlSv+d1Gr2Gv+zUJnH1v OKZDavFhIF07lBtG8PAg2L1WI+EHeMVxPHDXO6Q/HYPH4sQO45iYk411H+xX/dxuIU9aiwldkpsi uaBKCJHuHnJ4LqgLsfF5BXhh1sm6V495vhH8QPjXDiaH6p/5Cpf/uu2nABkkr/nGbrCaAZ2LxWP7 cCl3OBLQb4CeWJuRTU3t6wSPCth+VJsfwYLCGAKFCUtGgQ49Csw5ME2QhYsBx/XcpBfyJUQGRpol CcScCKHPNac6Vxy9K9Cxw3RuS0+miVvishMLtg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by systron.de zone
	Query to ns1.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 109.91.140.201
	;; Response received from [109.91.140.201] 1174 octets ;; HEADER SECTION ;; id = 23646 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20251228071619 20251214065107 2503 systron.de. pRuykdFBG/vo2XVPh9Tb4Mm+eMIBi9sVe5OGyqeSnrSxFE58DxPgD78YuQBRvqiEWuoyB1pi1OB9 B20tASy3n+/iHr5bKC/5vHw/jiRB5HPvHA6aO3QDjw3pYRkPo4cLF1np78++IY3LzrPfkg41iq7v pqIFVtz2PgD5VYVId0HZ2Sm7HghNrwXR3TH9yG4LQV2gYUdWsdbIZpe9Xp8OhlfTnjBN+vEXxVTL iyMee8OxdFskMnqpHQxg09sAgewMY3vVzvY0rHbulILJoyyY48walA3k4PXIVJh7yR1f0HvBitp/ iHsC4VBCAUop5YLcBfiY5Uztqd3PXNPc76RY2g== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20251228071619 20251214065107 2503 systron.de. Ipynqb401WaKzjhzN7gEB/q0PzilbZ5CPTnHTxtezaof2Romt2HbZU9qFn+UCy0/pI8VqVCh3YBG gfe05Lc5aa5xJQjbS8pjXZhUunz4Ry00tNo6Pfag+FKWOpKGbkAd0rxrFkM6e9LH486/eD6Eyniv Yql3W2saMo4dsGBIGp39KrN8IZq5oqZkO/Bxa0RIX1Tku/RVE3D0UQFZBwgD2pWwgmTtEvCMOH1L FjVblx1+txMgDzB4S2A8py6s2EQaNm3JXlelgO2aLbjr19rCZ9ug5NJ/MrdbWQS8AOcVOBFhGT7s pexnen+stKZUelnRpTAfXUSViZXjg7T9j7LZUA== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260102095355 20251219092925 2503 systron.de. DAOXGgc62eg5Zj7rWjya/eP2x0bwLwluZunzpSYFQBBVErJjXMjWAz2uxg6wnZc0xCCNyGb955rc QtzQ+RwfE221Ruj0u04WSRqJQmWCgCIUdEAyIfOAC8nxKrh8PtMend/86lARSqqQAe1B3MrnV4Qd O5Eh2qq8gYJ7dszxvFY43P1/H2ysnKJsdTTgMZtt/qM810SJHih6f+9LgOLoh9hHMY4Z+gkWMMRu 6nJ/mo2NCKcDY11D+8S5WPYGDqy4aauZSza1jvxWZbsnUH03yYGx7d7hxWxn7Vue4SGpXijiO0Z0 TXe+sD8/fJPiUKhkJIvMEbfScdp5/AWIs6h8AA== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	_acme-challenge.systron.de A RR has value 109.91.140.201
	Found 1 RRSIGs over A RRset
	`_acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20251228071619 20251214065107 2503 systron.de. pRuykdFBG/vo2XVPh9Tb4Mm+eMIBi9sVe5OGyqeSnrSxFE58DxPgD78YuQBRvqiEWuoyB1pi1OB9 B20tASy3n+/iHr5bKC/5vHw/jiRB5HPvHA6aO3QDjw3pYRkPo4cLF1np78++IY3LzrPfkg41iq7v pqIFVtz2PgD5VYVId0HZ2Sm7HghNrwXR3TH9yG4LQV2gYUdWsdbIZpe9Xp8OhlfTnjBN+vEXxVTL iyMee8OxdFskMnqpHQxg09sAgewMY3vVzvY0rHbulILJoyyY48walA3k4PXIVJh7yR1f0HvBitp/ iHsC4VBCAUop5YLcBfiY5Uztqd3PXNPc76RY2g== )`
	RRSIG=2503 and DNSKEY=2503 verifies the A RRset

systron.de

	Query to ns3.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 81.7.13.30
	;; Response received from [81.7.13.30] 1174 octets ;; HEADER SECTION ;; id = 25924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20251228071619 20251214065107 2503 systron.de. pRuykdFBG/vo2XVPh9Tb4Mm+eMIBi9sVe5OGyqeSnrSxFE58DxPgD78YuQBRvqiEWuoyB1pi1OB9 B20tASy3n+/iHr5bKC/5vHw/jiRB5HPvHA6aO3QDjw3pYRkPo4cLF1np78++IY3LzrPfkg41iq7v pqIFVtz2PgD5VYVId0HZ2Sm7HghNrwXR3TH9yG4LQV2gYUdWsdbIZpe9Xp8OhlfTnjBN+vEXxVTL iyMee8OxdFskMnqpHQxg09sAgewMY3vVzvY0rHbulILJoyyY48walA3k4PXIVJh7yR1f0HvBitp/ iHsC4VBCAUop5YLcBfiY5Uztqd3PXNPc76RY2g== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20251228071619 20251214065107 2503 systron.de. Ipynqb401WaKzjhzN7gEB/q0PzilbZ5CPTnHTxtezaof2Romt2HbZU9qFn+UCy0/pI8VqVCh3YBG gfe05Lc5aa5xJQjbS8pjXZhUunz4Ry00tNo6Pfag+FKWOpKGbkAd0rxrFkM6e9LH486/eD6Eyniv Yql3W2saMo4dsGBIGp39KrN8IZq5oqZkO/Bxa0RIX1Tku/RVE3D0UQFZBwgD2pWwgmTtEvCMOH1L FjVblx1+txMgDzB4S2A8py6s2EQaNm3JXlelgO2aLbjr19rCZ9ug5NJ/MrdbWQS8AOcVOBFhGT7s pexnen+stKZUelnRpTAfXUSViZXjg7T9j7LZUA== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260102095355 20251219092925 2503 systron.de. DAOXGgc62eg5Zj7rWjya/eP2x0bwLwluZunzpSYFQBBVErJjXMjWAz2uxg6wnZc0xCCNyGb955rc QtzQ+RwfE221Ruj0u04WSRqJQmWCgCIUdEAyIfOAC8nxKrh8PtMend/86lARSqqQAe1B3MrnV4Qd O5Eh2qq8gYJ7dszxvFY43P1/H2ysnKJsdTTgMZtt/qM810SJHih6f+9LgOLoh9hHMY4Z+gkWMMRu 6nJ/mo2NCKcDY11D+8S5WPYGDqy4aauZSza1jvxWZbsnUH03yYGx7d7hxWxn7Vue4SGpXijiO0Z0 TXe+sD8/fJPiUKhkJIvMEbfScdp5/AWIs6h8AA== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	ns3.systron.de is authoritative for _acme-challenge.systron.de
	Query to ns3.systron.de for _acme-challenge.systron.de/DNSKEY
	Received 1534 bytes from 81.7.13.30
	;; Response received from [81.7.13.30] 1534 octets ;; HEADER SECTION ;; id = 25120 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN NSEC3 ( 1 0 0 - l6ipu76dhb5m9ikg3mlg41p4b7re57f0 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY CAA ) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20251228053800 20251214053248 2503 systron.de. N5WvSkvZjWz6JSwKOb7OyUDICJCbtuMcHaWSdwh4rWOLxa4OpN7gY8QD2eakOH8cs7YxCZUIMA05 DrWxB+sHiDFLsMRr0RhcvhGnKntzl/qrTSF7HeGqe33UiofHjYdrp0NvpDLF5QU4/udWHykHFldW 5PeRxEmeirp7MTP+ULPcZGu1NUJM2rB+UVoIZFn1PfMDOEUs9DV9A9Z/iqKXEzao/H+FJpozN643 cI7pSn1xsxmSXbjDRlGFKdKBFlN1y1IySDRopPUP2dEWF5a4B5ABz+hsoB+3feFtioedDy59B1Py 2hA4usEq3lATiTsErjAehQzx27BGmQLC+Xulhw== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260102095355 20251219092925 2503 systron.de. DAOXGgc62eg5Zj7rWjya/eP2x0bwLwluZunzpSYFQBBVErJjXMjWAz2uxg6wnZc0xCCNyGb955rc QtzQ+RwfE221Ruj0u04WSRqJQmWCgCIUdEAyIfOAC8nxKrh8PtMend/86lARSqqQAe1B3MrnV4Qd O5Eh2qq8gYJ7dszxvFY43P1/H2ysnKJsdTTgMZtt/qM810SJHih6f+9LgOLoh9hHMY4Z+gkWMMRu 6nJ/mo2NCKcDY11D+8S5WPYGDqy4aauZSza1jvxWZbsnUH03yYGx7d7hxWxn7Vue4SGpXijiO0Z0 TXe+sD8/fJPiUKhkJIvMEbfScdp5/AWIs6h8AA== ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN NSEC3 ( 1 0 0 - brnjcmhfcq1tenfcjvms6uqo9nckuiqm A RRSIG ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20251226225342 20251212223649 2503 systron.de. H0m1dXDtMfmr1LwYfeL72I3R2BV+12d9WUNeXWbKRePOLR+JwnFBwM8Z7pLd8cWOrOtnSOZBv2IB xwn+diLBcvcSSK1r8N2lDo/uKKHi8aZVLJPIWIpleSvVgR1q7jnlLHdEWxne5PvnhomY4u/xGbYA An0aLsVqG2QTnRzkiBzBYqHtjMXmUNd9njiPp9Rs99v4t5KWSJgxTIBxLfokMomIXcMRskI3vnZz 57GBrF/HwoAXa5ZUYa9Sa1imordrSpX7HvwcGmRVApzBOCwo75+YDATzSTWU1vp1lXXgRs6cvsrD 3yh+wIcjLf/kAS5Q8fpDIRxexg+z9cELbAA82Q== ) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2025101332 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260104172010 20251221162010 2503 systron.de. To2e8ZUejP1VFKKviz7metKcurvNHa8hFhsvCoYDT9/4Zta1dqAewcgvdlSv+d1Gr2Gv+zUJnH1v OKZDavFhIF07lBtG8PAg2L1WI+EHeMVxPHDXO6Q/HYPH4sQO45iYk411H+xX/dxuIU9aiwldkpsi uaBKCJHuHnJ4LqgLsfF5BXhh1sm6V495vhH8QPjXDiaH6p/5Cpf/uu2nABkkr/nGbrCaAZ2LxWP7 cCl3OBLQb4CeWJuRTU3t6wSPCth+VJsfwYLCGAKFCUtGgQ49Csw5ME2QhYsBx/XcpBfyJUQGRpol CcScCKHPNac6Vxy9K9Cxw3RuS0+miVvishMLtg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by systron.de zone
	Query to ns3.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 81.7.13.30
	;; Response received from [81.7.13.30] 1174 octets ;; HEADER SECTION ;; id = 5356 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20251228071619 20251214065107 2503 systron.de. pRuykdFBG/vo2XVPh9Tb4Mm+eMIBi9sVe5OGyqeSnrSxFE58DxPgD78YuQBRvqiEWuoyB1pi1OB9 B20tASy3n+/iHr5bKC/5vHw/jiRB5HPvHA6aO3QDjw3pYRkPo4cLF1np78++IY3LzrPfkg41iq7v pqIFVtz2PgD5VYVId0HZ2Sm7HghNrwXR3TH9yG4LQV2gYUdWsdbIZpe9Xp8OhlfTnjBN+vEXxVTL iyMee8OxdFskMnqpHQxg09sAgewMY3vVzvY0rHbulILJoyyY48walA3k4PXIVJh7yR1f0HvBitp/ iHsC4VBCAUop5YLcBfiY5Uztqd3PXNPc76RY2g== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20251228071619 20251214065107 2503 systron.de. Ipynqb401WaKzjhzN7gEB/q0PzilbZ5CPTnHTxtezaof2Romt2HbZU9qFn+UCy0/pI8VqVCh3YBG gfe05Lc5aa5xJQjbS8pjXZhUunz4Ry00tNo6Pfag+FKWOpKGbkAd0rxrFkM6e9LH486/eD6Eyniv Yql3W2saMo4dsGBIGp39KrN8IZq5oqZkO/Bxa0RIX1Tku/RVE3D0UQFZBwgD2pWwgmTtEvCMOH1L FjVblx1+txMgDzB4S2A8py6s2EQaNm3JXlelgO2aLbjr19rCZ9ug5NJ/MrdbWQS8AOcVOBFhGT7s pexnen+stKZUelnRpTAfXUSViZXjg7T9j7LZUA== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260102095355 20251219092925 2503 systron.de. DAOXGgc62eg5Zj7rWjya/eP2x0bwLwluZunzpSYFQBBVErJjXMjWAz2uxg6wnZc0xCCNyGb955rc QtzQ+RwfE221Ruj0u04WSRqJQmWCgCIUdEAyIfOAC8nxKrh8PtMend/86lARSqqQAe1B3MrnV4Qd O5Eh2qq8gYJ7dszxvFY43P1/H2ysnKJsdTTgMZtt/qM810SJHih6f+9LgOLoh9hHMY4Z+gkWMMRu 6nJ/mo2NCKcDY11D+8S5WPYGDqy4aauZSza1jvxWZbsnUH03yYGx7d7hxWxn7Vue4SGpXijiO0Z0 TXe+sD8/fJPiUKhkJIvMEbfScdp5/AWIs6h8AA== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	_acme-challenge.systron.de A RR has value 109.91.140.201
	Found 1 RRSIGs over A RRset
	`_acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20251228071619 20251214065107 2503 systron.de. pRuykdFBG/vo2XVPh9Tb4Mm+eMIBi9sVe5OGyqeSnrSxFE58DxPgD78YuQBRvqiEWuoyB1pi1OB9 B20tASy3n+/iHr5bKC/5vHw/jiRB5HPvHA6aO3QDjw3pYRkPo4cLF1np78++IY3LzrPfkg41iq7v pqIFVtz2PgD5VYVId0HZ2Sm7HghNrwXR3TH9yG4LQV2gYUdWsdbIZpe9Xp8OhlfTnjBN+vEXxVTL iyMee8OxdFskMnqpHQxg09sAgewMY3vVzvY0rHbulILJoyyY48walA3k4PXIVJh7yR1f0HvBitp/ iHsC4VBCAUop5YLcBfiY5Uztqd3PXNPc76RY2g== )`
	RRSIG=2503 and DNSKEY=2503 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test _acme-challenge.systron.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: