DNSSEC Debugger - _acme-challenge.systron.de

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-19 04:49:52 UTC

Analyzing DNSSEC problems for _acme-challenge.systron.de

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 28978 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to c.root-servers.net for _acme-challenge.systron.de/A
	Received 760 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 760 octets ;; HEADER SECTION ;; id = 23208 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS a.nic.de. de. 172800 IN NS z.nic.de. de. 172800 IN NS s.de.net. de. 172800 IN NS f.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20261001170000 20260918160000 57780 . vkA/wt9ntXuuGZ1qwm0w9ux4u1+cPFbKeDwWYyCKdekaJp/XLYfO/T9IJO0MJXC+3FMwar03YWqe c2MxRKWLKDUQX2KMHNKV0shRhcDo/lfrXJDHg/6SqsL9QhS6gFSnMCgkoeAzPfeH2E4el3Nnp8pK nNAQtNZiZp/WoxWiFptwYA028xPftsodvzhmEH7cvJG2nRpBH2YtGHlbAotNi2SfTkkiqs6IGkQ5 qOIHusISANT9ppenAu0yfAu7ZLdGwuDynelcXBwbsR4UBtMd8pJ6S6jiwLcNO/LthsrN1bFQdhp1 9qmkqjmWqhu7CSaykMGIL4C+4sRVkMfM0+HXiQ== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 z.nic.de. 172800 IN A 194.246.96.1 s.de.net. 172800 IN A 195.243.137.26 n.de.net. 172800 IN A 194.146.107.6 l.de.net. 172800 IN A 77.67.63.105 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for de/DNSKEY
	Received 736 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 736 octets ;; HEADER SECTION ;; id = 21740 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20261001170000 20260918160000 57780 . vkA/wt9ntXuuGZ1qwm0w9ux4u1+cPFbKeDwWYyCKdekaJp/XLYfO/T9IJO0MJXC+3FMwar03YWqe c2MxRKWLKDUQX2KMHNKV0shRhcDo/lfrXJDHg/6SqsL9QhS6gFSnMCgkoeAzPfeH2E4el3Nnp8pK nNAQtNZiZp/WoxWiFptwYA028xPftsodvzhmEH7cvJG2nRpBH2YtGHlbAotNi2SfTkkiqs6IGkQ5 qOIHusISANT9ppenAu0yfAu7ZLdGwuDynelcXBwbsR4UBtMd8pJ6S6jiwLcNO/LthsrN1bFQdhp1 9qmkqjmWqhu7CSaykMGIL4C+4sRVkMfM0+HXiQ== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to h.root-servers.net for de/DS
	Received 366 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 366 octets ;; HEADER SECTION ;; id = 44169 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20261001170000 20260918160000 57780 . vkA/wt9ntXuuGZ1qwm0w9ux4u1+cPFbKeDwWYyCKdekaJp/XLYfO/T9IJO0MJXC+3FMwar03YWqe c2MxRKWLKDUQX2KMHNKV0shRhcDo/lfrXJDHg/6SqsL9QhS6gFSnMCgkoeAzPfeH2E4el3Nnp8pK nNAQtNZiZp/WoxWiFptwYA028xPftsodvzhmEH7cvJG2nRpBH2YtGHlbAotNi2SfTkkiqs6IGkQ5 qOIHusISANT9ppenAu0yfAu7ZLdGwuDynelcXBwbsR4UBtMd8pJ6S6jiwLcNO/LthsrN1bFQdhp1 9qmkqjmWqhu7CSaykMGIL4C+4sRVkMfM0+HXiQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20261001170000 20260918160000 57780 . vkA/wt9ntXuuGZ1qwm0w9ux4u1+cPFbKeDwWYyCKdekaJp/XLYfO/T9IJO0MJXC+3FMwar03YWqe c2MxRKWLKDUQX2KMHNKV0shRhcDo/lfrXJDHg/6SqsL9QhS6gFSnMCgkoeAzPfeH2E4el3Nnp8pK nNAQtNZiZp/WoxWiFptwYA028xPftsodvzhmEH7cvJG2nRpBH2YtGHlbAotNi2SfTkkiqs6IGkQ5 qOIHusISANT9ppenAu0yfAu7ZLdGwuDynelcXBwbsR4UBtMd8pJ6S6jiwLcNO/LthsrN1bFQdhp1 9qmkqjmWqhu7CSaykMGIL4C+4sRVkMfM0+HXiQ== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to n.de.net for de/DNSKEY
	Received 745 bytes from 194.146.107.6
	;; Response received from [194.146.107.6] 745 octets ;; HEADER SECTION ;; id = 38449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (3 records) de. 3600 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755 de. 3600 IN DNSKEY ( 256 3 8 AwEAAbTe1PJi8EgIudNGb+KRTxBL2aCu5rXkZ+aIe/TC88pwRdrXYeXODp1ihZWFop5CrbWRBLrk /YUPBE8aBc6oJP+58dSkdMLYkjSkmvdvYx+zXnRLWlF2bapxvZxshATJDfGjGbCiWxKEOoyRx3Uh ICtHC+cUSddsEvzfacUcBb6n ) ; keytag 32911 de. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260928071641 20260914054641 26755 de. Li+Q/FotT/gB9Ou7zrT5mJkV2PSzRGuATFRKbxSPO0ubCEYDCJXfyTlr/e9my9oN9u8FVAst/MfD 5Pmer5n1W8uQ3SICT2O/1e1Ti50XaNAEz7nTiK2Ddme7zej9JNG41Zjk7MMBXJGd/eMgrFHgD5lT YrONEeheQoMSKJVSH9uy5uGd1VpdJKKe4kyW+KCY8zWzpdIjYPeAN0WlRL9AXl3iy4um+N21i7kn s7t8v8KVLfSCpZcauzs+L+y0/t2JBhzfvwVrZWbnkomQTkiJ7+iW1KsLJsrUNGOdQbuzV2SJ5A9f 0KdBu8x189ZRQRdUyO6LPN0j7Io8aPexqGZRhg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for de
	`de. 3600 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755`
	`de. 3600 IN DNSKEY ( 256 3 8 AwEAAbTe1PJi8EgIudNGb+KRTxBL2aCu5rXkZ+aIe/TC88pwRdrXYeXODp1ihZWFop5CrbWRBLrk /YUPBE8aBc6oJP+58dSkdMLYkjSkmvdvYx+zXnRLWlF2bapxvZxshATJDfGjGbCiWxKEOoyRx3Uh ICtHC+cUSddsEvzfacUcBb6n ) ; keytag 32911`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260928071641 20260914054641 26755 de. Li+Q/FotT/gB9Ou7zrT5mJkV2PSzRGuATFRKbxSPO0ubCEYDCJXfyTlr/e9my9oN9u8FVAst/MfD 5Pmer5n1W8uQ3SICT2O/1e1Ti50XaNAEz7nTiK2Ddme7zej9JNG41Zjk7MMBXJGd/eMgrFHgD5lT YrONEeheQoMSKJVSH9uy5uGd1VpdJKKe4kyW+KCY8zWzpdIjYPeAN0WlRL9AXl3iy4um+N21i7kn s7t8v8KVLfSCpZcauzs+L+y0/t2JBhzfvwVrZWbnkomQTkiJ7+iW1KsLJsrUNGOdQbuzV2SJ5A9f 0KdBu8x189ZRQRdUyO6LPN0j7Io8aPexqGZRhg== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=32911 is now in the chain-of-trust
	Query to l.de.net for _acme-challenge.systron.de/A
	Received 451 bytes from 77.67.63.105
	;; Response received from [77.67.63.105] 451 octets ;; HEADER SECTION ;; id = 11001 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) systron.de. 86400 IN NS ns1.systron.de. systron.de. 86400 IN NS ns2.systron.de. systron.de. 86400 IN NS ns3.systron.de. systron.de. 86400 IN DS ( 38671 8 2 35957abcb65b9f648431c995179b710d1ec2e5cda368069db65f91dd404e9e70 ) systron.de. 86400 IN RRSIG ( DS 8 2 86400 20260928071641 20260914054641 32911 de. UdPE44d1CXAH9MDfDl3ltp+otaOrnT8XA4I7kxttb/wzx3t0lBTSaga/30g/OhfhghT0NVIsL8+G jg1KdKvSpmi8mBX+KwGe/b+qQxs4exiIx8A04etfux902FRATG51A41D7GaQIpaVjuXQOavUSbxt V8zE4o7YDpWlxt4hOK8= ) ;; ADDITIONAL SECTION (7 records) ns1.systron.de. 86400 IN A 109.91.140.201 ns1.systron.de. 86400 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ns2.systron.de. 86400 IN A 89.58.12.225 ns2.systron.de. 86400 IN AAAA 2a03:4000:20:2ad:fc00:ff:fe00:20 ns3.systron.de. 86400 IN A 81.7.13.30 ns3.systron.de. 86400 IN AAAA 2a02:180:6:1::278f ;; { "EDNS-VERSION": 0 }
	Query to a.nic.de for systron.de/DNSKEY
	Received 435 bytes from 194.0.0.53
	;; Response received from [194.0.0.53] 435 octets ;; HEADER SECTION ;; id = 29491 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) systron.de. 86400 IN NS ns2.systron.de. systron.de. 86400 IN NS ns3.systron.de. systron.de. 86400 IN NS ns1.systron.de. systron.de. 86400 IN DS ( 38671 8 2 35957abcb65b9f648431c995179b710d1ec2e5cda368069db65f91dd404e9e70 ) systron.de. 86400 IN RRSIG ( DS 8 2 86400 20260928071641 20260914054641 32911 de. UdPE44d1CXAH9MDfDl3ltp+otaOrnT8XA4I7kxttb/wzx3t0lBTSaga/30g/OhfhghT0NVIsL8+G jg1KdKvSpmi8mBX+KwGe/b+qQxs4exiIx8A04etfux902FRATG51A41D7GaQIpaVjuXQOavUSbxt V8zE4o7YDpWlxt4hOK8= ) ;; ADDITIONAL SECTION (7 records) ns1.systron.de. 86400 IN A 109.91.140.201 ns2.systron.de. 86400 IN A 89.58.12.225 ns3.systron.de. 86400 IN A 81.7.13.30 ns1.systron.de. 86400 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ns2.systron.de. 86400 IN AAAA 2a03:4000:20:2ad:fc00:ff:fe00:20 ns3.systron.de. 86400 IN AAAA 2a02:180:6:1::278f ;; { "EDNS-VERSION": 0 }
	Found child zone systron.de

systron.de

	Checking DS between de and systron.de
	Query to l.de.net for systron.de/DS
	Received 249 bytes from 77.67.63.105
	;; Response received from [77.67.63.105] 249 octets ;; HEADER SECTION ;; id = 36270 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN DS ;; ANSWER SECTION (2 records) systron.de. 86400 IN DS ( 38671 8 2 35957abcb65b9f648431c995179b710d1ec2e5cda368069db65f91dd404e9e70 ) systron.de. 86400 IN RRSIG ( DS 8 2 86400 20260928071641 20260914054641 32911 de. UdPE44d1CXAH9MDfDl3ltp+otaOrnT8XA4I7kxttb/wzx3t0lBTSaga/30g/OhfhghT0NVIsL8+G jg1KdKvSpmi8mBX+KwGe/b+qQxs4exiIx8A04etfux902FRATG51A41D7GaQIpaVjuXQOavUSbxt V8zE4o7YDpWlxt4hOK8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for systron.de in the de zone
	DS=38671/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`systron.de. 86400 IN RRSIG ( DS 8 2 86400 20260928071641 20260914054641 32911 de. UdPE44d1CXAH9MDfDl3ltp+otaOrnT8XA4I7kxttb/wzx3t0lBTSaga/30g/OhfhghT0NVIsL8+G jg1KdKvSpmi8mBX+KwGe/b+qQxs4exiIx8A04etfux902FRATG51A41D7GaQIpaVjuXQOavUSbxt V8zE4o7YDpWlxt4hOK8= )`
	RRSIG=32911 and DNSKEY=32911 verifies the DS RRset
	DS=38671/SHA-256 is now in the chain-of-trust
	`systron.de. 86400 IN DS ( 38671 8 2 35957abcb65b9f648431c995179b710d1ec2e5cda368069db65f91dd404e9e70 )`
	Query to ns1.systron.de for systron.de/DNSKEY
	Received 889 bytes from 109.91.140.201
	;; Response received from [109.91.140.201] 889 octets ;; HEADER SECTION ;; id = 38006 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN DNSKEY ;; ANSWER SECTION (3 records) systron.de. 3600 IN DNSKEY ( 257 3 8 AwEAAboOSIzkog6g+tBFxqkxSrZ2azPdu3rPkDqLu7/+tynNVhrs7RJEUQ6l4RgOR9jFdVnLmsDY XEdQadAedDeUv12xQ99roU9Pk8HS15VzQ6JyjY55STbpBhuA4CNJRNdIcY3SytfEwlFNB/1c5vx4 l4GBN/ObMxAZqecaRgvAPyy0qNXq26ImZ0B/1uFCniuTkcHGnzTZmtLVc+b1II8Mfrv4R87IsICu /0OfRd/N0B1TzODye4rrh/IKMq02VtXb6EFuv65nLwrYDNxVk1EVWJNjrbL1G0C5JLxy/cxkViA0 4t4QrTqb5Vsy7UUg8rWcgJj/CCpdGa0Lad5yyz1Ujlk= ) ; keytag 38671 systron.de. 3600 IN DNSKEY ( 256 3 8 AwEAAcvJB/3EvVECut2YfwQRJPY0CbgJv40gkr0M8M8e+p69zz+qgC5spKokm4S02InwZxerTeDU TxPoDV1rWX4R6UXp1nL2l59OiCPPO7rXL6d29W+GMryku6EVfkGpFBJCdHX4q3pXlZT3yizFVkmq C4PYDJNsSeTYS6pt50MYho7t/fiAS2AlS5jYhnq1rweGyUHmt9GsZrC+mQ5PlpdB2ECSwyyDrXRp 7uPhY+Gep4/pcMON6Mb7QJKWqqsM3t9pHP67RCGp4zUAgWjeBVTodYnEjjuO0SNk3tQmaTaQfDvA qfLCQacWuW7O2V0pRTvZ0QoVqIemeKJ/FEagthlzT7s= ) ; keytag 2503 systron.de. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260925105009 20260911103756 38671 systron.de. WRncSJNdr2JC8YbaMlOV+yltr21F5YFxn5ty8uzqs3EXYJQum/bi3+iy8wIltFgKk6RBLm408oSG HtVyZkFMHTJswjMAn4VY7eXP/UJwOPlepzMPS77WK3QeqextEG3B8z9UgTUB48vdSAIKzJ9dJGNT KbEp+EbWKMoo1J6tuM1WxyDVKbWpk5HETP9CKaR4/elKUeFp2ELqIThFnXtXEzT02LpVpIC2O/vD H5Yl5YB3bT9oaqEYhxgBuklyk6cRrdRhVN1OSpjIY8+zbFYJY1mVuum6+H3exogmHIc5ALkSRveh dhIBvCYXRaYAvP/RUagt1D74Ma5AVdNWbRdV3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for systron.de
	`systron.de. 3600 IN DNSKEY ( 257 3 8 AwEAAboOSIzkog6g+tBFxqkxSrZ2azPdu3rPkDqLu7/+tynNVhrs7RJEUQ6l4RgOR9jFdVnLmsDY XEdQadAedDeUv12xQ99roU9Pk8HS15VzQ6JyjY55STbpBhuA4CNJRNdIcY3SytfEwlFNB/1c5vx4 l4GBN/ObMxAZqecaRgvAPyy0qNXq26ImZ0B/1uFCniuTkcHGnzTZmtLVc+b1II8Mfrv4R87IsICu /0OfRd/N0B1TzODye4rrh/IKMq02VtXb6EFuv65nLwrYDNxVk1EVWJNjrbL1G0C5JLxy/cxkViA0 4t4QrTqb5Vsy7UUg8rWcgJj/CCpdGa0Lad5yyz1Ujlk= ) ; keytag 38671`
	`systron.de. 3600 IN DNSKEY ( 256 3 8 AwEAAcvJB/3EvVECut2YfwQRJPY0CbgJv40gkr0M8M8e+p69zz+qgC5spKokm4S02InwZxerTeDU TxPoDV1rWX4R6UXp1nL2l59OiCPPO7rXL6d29W+GMryku6EVfkGpFBJCdHX4q3pXlZT3yizFVkmq C4PYDJNsSeTYS6pt50MYho7t/fiAS2AlS5jYhnq1rweGyUHmt9GsZrC+mQ5PlpdB2ECSwyyDrXRp 7uPhY+Gep4/pcMON6Mb7QJKWqqsM3t9pHP67RCGp4zUAgWjeBVTodYnEjjuO0SNk3tQmaTaQfDvA qfLCQacWuW7O2V0pRTvZ0QoVqIemeKJ/FEagthlzT7s= ) ; keytag 2503`
	DNSKEY=38671/SEP is now in the chain-of-trust
	DS=38671/SHA-256 verifies DNSKEY=38671/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`systron.de. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260925105009 20260911103756 38671 systron.de. WRncSJNdr2JC8YbaMlOV+yltr21F5YFxn5ty8uzqs3EXYJQum/bi3+iy8wIltFgKk6RBLm408oSG HtVyZkFMHTJswjMAn4VY7eXP/UJwOPlepzMPS77WK3QeqextEG3B8z9UgTUB48vdSAIKzJ9dJGNT KbEp+EbWKMoo1J6tuM1WxyDVKbWpk5HETP9CKaR4/elKUeFp2ELqIThFnXtXEzT02LpVpIC2O/vD H5Yl5YB3bT9oaqEYhxgBuklyk6cRrdRhVN1OSpjIY8+zbFYJY1mVuum6+H3exogmHIc5ALkSRveh dhIBvCYXRaYAvP/RUagt1D74Ma5AVdNWbRdV3g== )`
	RRSIG=38671 and DNSKEY=38671/SEP verifies the DNSKEY RRset
	DNSKEY=2503 is now in the chain-of-trust
	Query to ns3.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 81.7.13.30
	;; Response received from [81.7.13.30] 1174 octets ;; HEADER SECTION ;; id = 52961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260925091037 20260911082306 2503 systron.de. VPGuLKuX7u1xukQ5bD0XxipOuF0GNt9MyXpHHw7E515pyveXZqzoOOUFb4eq/5Doii3e4keCJEIR ZA+Fiw61XXQSq7YVhtAcL9mr0h2ARnvqh9i8r3sDU8v7b8G4Cp2EtEq+igLWsFtpif2WJlZLwhZS b5CXTQQ/YEU3Is/xh+YFyXcYL5luNg7b2obTC3tVA0hMLgwo0BFvJyxmODAk//UDHwyrp/KSw5GF IACUiSgU6hz5xFG8nq0C98NNY77POc6GppfrkPI2d5uc53EYwAtGGxCUxDBxhDFuX8P/imtHBBX6 tSjnEiocGS26qS7jwrgLZ/+6C/RGaRh1SjuGhA== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260925062346 20260911054412 2503 systron.de. ef/tuP5axDId/YkJFvxA7Hti0+0DXy3ULrYglKGGC8OkwkvJs2a1GjzYYhyDM4ZV0d7ktPEnwbNi 5HzvHo9QCD+iTKtgEV+cPh1Oj7pojV1/ObEoDteCN9bbC9imNBHs0IO9KUJqD4q8rYmzukM7FjIw ZkmrFz4P0/Te5UxSzXBX2WZtbWc70UkqLpjCRIGbSUbmo7+fxh0Ymq7zZN9kMQJi3FeNu9YLpBBH hYr4Hx6YyT3FFtaSOcb/ikCjTDgfuFHkC8qy/6GhKZ2ol8I6yXy/QYlh9w1w7Al+wtl85MeXqoMk C0/NqdVaH4MqavQ8gIgPbl+cDCs5t7jblyaR4g== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260925065647 20260911062513 2503 systron.de. IssKH/cbRApXfRGnpaWlteFzWiPF5LSzxQIGnBX7J2saUMiKEX6cv6F/dEB/2RWDOcedaOvajYus pilB/opvW9CEUkKor/2tHskKyVGwUSkzDu+sbXT/5B+Kbwxh/ggfuKb/7PNssccQxBef0SCzdnOZ y8XcTchCAc2H7mR6rmaWULD6vEt8EMTJPK4GfT1Sh74gfvKwNbfQ+fpen2/DoBYwvNWKtKI3lvPc lIvOPRKKd+/438eFz8aHtkTsT2C1r4QVhT7JwFDXqgIM2DX5UM2ecW37tmXMuonuDkYNWgDzwhMY WXqnyFJGx7G88Vcr+SJFS5g9WC/xOrZyavRYTg== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	ns3.systron.de is authoritative for _acme-challenge.systron.de
	Query to ns1.systron.de for _acme-challenge.systron.de/DNSKEY
	Received 1568 bytes from 109.91.140.201
	;; Response received from [109.91.140.201] 1568 octets ;; HEADER SECTION ;; id = 35392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN NSEC3 ( 1 0 0 - l6ipu76dhb5m9ikg3mlg41p4b7re57f0 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY CAA TYPE65534 ) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260925100138 20260911095714 2503 systron.de. aMo5vJDSvwBjGqorIL90S8QZJBAuZlamPzhl9B0D4tPLfkNJ8mDZ2eymOmXRapUaNu+JXHIMhWDt qOwGDMg7yXseoEM+MXWdb94Z5JiT4p2tPMgmp93iq7j+xS4ejhocZ6fHTJWG0bzgCBXc8u2JWHDF e3GIx9fNB76hCZki8O2BO0z1zRMO1Kf2NBx5n2h2cm7FdByvvNMJjQ1E4MM89HSS38N2NmIPE/VH a6BZ98leV7KBx2hremIh52x/Mde6m+YyFyviikPAX7gtNZVbv0Y5TykwY7aZMeL4TIY/yktbFNW3 1KY9yfZlrinHQcVK8lVWnyUKf4uo2f3wanwgLw== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260925065647 20260911062513 2503 systron.de. IssKH/cbRApXfRGnpaWlteFzWiPF5LSzxQIGnBX7J2saUMiKEX6cv6F/dEB/2RWDOcedaOvajYus pilB/opvW9CEUkKor/2tHskKyVGwUSkzDu+sbXT/5B+Kbwxh/ggfuKb/7PNssccQxBef0SCzdnOZ y8XcTchCAc2H7mR6rmaWULD6vEt8EMTJPK4GfT1Sh74gfvKwNbfQ+fpen2/DoBYwvNWKtKI3lvPc lIvOPRKKd+/438eFz8aHtkTsT2C1r4QVhT7JwFDXqgIM2DX5UM2ecW37tmXMuonuDkYNWgDzwhMY WXqnyFJGx7G88Vcr+SJFS5g9WC/xOrZyavRYTg== ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN NSEC3 ( 1 0 0 - brnjcmhfcq1tenfcjvms6uqo9nckuiqm A RRSIG ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260925050157 20260911044444 2503 systron.de. vEseQJPnD939fNLR5O9WN0q3dPM/7/j6Gdx53bTrohYvA6pnKLwhuoTJ9FJlEiyhQirO+yF7Y0fA M40J0/WpMCfkQiWvOiRCmdw6ad+ElilNuIdU9QOdku+oozqOMaT/0woirZk9XhjfAu1+TtUAYUum OC76ZA2uLhnyQ9S4vTJs1b51w5ZdGteCWxaCuOUbnoStKYhZLLINscTyPiy35souWZT08hXP5lTX f4g5Ouauh3V9rNB9QO8100+Bm1AceunIR6catyKscfwTwiSIH8qPItKFZSw2v6E/lfAVQjM2RiVn 5t2xnmZwRKGwDLKoanOij6zIeioL2UdwrycFmw== ) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2026090257 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260925113756 20260911103756 2503 systron.de. n8BioDvWCNI2O1+MeYShZ36myBX/XdK8ezEtyF8pcpfxeXZpwhLno9AQG0JxMki1hm+BRcMTofYc zJyxchiF71yzOXQy99r2ptndSSxjL9/ILgKmDKBe4sozAp6FTVh/JjIO7Y1UbJiDsQQ69BwAhhQl ITo7UWg9bXGXgp57/mXoiw8RTQU8TMf+dDFYagrbwt3aYJ2pJYEv0iPm/b6/mFNO+XcoF5UW3sx/ 7SoYKqrf7MUG7YRl8yzZOE9vG4OrCnHMzLDxzE2dJoMMiRBKPVP0peNzhK8iSskmgX2K8DJ0SuJm +0Zl3uCn3mhEBch7efW0ZGsN47upm3gm1jLIjw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by systron.de zone
	Query to ns1.systron.de for systron.de/SOA
	Received 1160 bytes from 109.91.140.201
	;; Response received from [109.91.140.201] 1160 octets ;; HEADER SECTION ;; id = 63021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 8 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN SOA ;; ANSWER SECTION (2 records) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2026090257 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260925113756 20260911103756 2503 systron.de. n8BioDvWCNI2O1+MeYShZ36myBX/XdK8ezEtyF8pcpfxeXZpwhLno9AQG0JxMki1hm+BRcMTofYc zJyxchiF71yzOXQy99r2ptndSSxjL9/ILgKmDKBe4sozAp6FTVh/JjIO7Y1UbJiDsQQ69BwAhhQl ITo7UWg9bXGXgp57/mXoiw8RTQU8TMf+dDFYagrbwt3aYJ2pJYEv0iPm/b6/mFNO+XcoF5UW3sx/ 7SoYKqrf7MUG7YRl8yzZOE9vG4OrCnHMzLDxzE2dJoMMiRBKPVP0peNzhK8iSskmgX2K8DJ0SuJm +0Zl3uCn3mhEBch7efW0ZGsN47upm3gm1jLIjw== ) ;; AUTHORITY SECTION (4 records) systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260925062346 20260911054412 2503 systron.de. ef/tuP5axDId/YkJFvxA7Hti0+0DXy3ULrYglKGGC8OkwkvJs2a1GjzYYhyDM4ZV0d7ktPEnwbNi 5HzvHo9QCD+iTKtgEV+cPh1Oj7pojV1/ObEoDteCN9bbC9imNBHs0IO9KUJqD4q8rYmzukM7FjIw ZkmrFz4P0/Te5UxSzXBX2WZtbWc70UkqLpjCRIGbSUbmo7+fxh0Ymq7zZN9kMQJi3FeNu9YLpBBH hYr4Hx6YyT3FFtaSOcb/ikCjTDgfuFHkC8qy/6GhKZ2ol8I6yXy/QYlh9w1w7Al+wtl85MeXqoMk C0/NqdVaH4MqavQ8gIgPbl+cDCs5t7jblyaR4g== ) ;; ADDITIONAL SECTION (8 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ns2.systron.de. 3600 IN AAAA 2a03:4000:20:2ad:fc00:ff:fe00:20 ns3.systron.de. 3600 IN AAAA 2a02:180:6:1::278f ns1.systron.de. 3600 IN RRSIG ( A 8 3 3600 20260925025928 20260911023306 2503 systron.de. uGeCKdl4wZSfXtpHGjw1J1HVyyrSOzHoxSRKMChF0FpCM/y+Qhsfmqo3YEf6UxVJkC89IqAedLR5 j6wHqWP3DclHF/sVYocrnZOCmYjbmZU7u1G7lx8jINEEgH3Th1o3p/gFCWDOLi/rKykBpM05E3sF 3j1tZe+gPbdwEKw3DzOSkfzTp7hQXm7ly62miA1jKFYy39KSmSvfiCYSl8M5NPZCR7+ONaE2/+7d uVb0gEikqZDZEh8m8hlMAa6VQ0Mj7Rgy0B/fVRJ9Cgu8OmnUsLs6Rap3gHnvTkG/uTsUwSHG/L1L e8qjyuzDhwDTJ8fylRLuQ1q+XMc4emhq3zFH9w== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.systron.de for systron.de/SOA
	Received 1160 bytes from 89.58.12.225
	;; Response received from [89.58.12.225] 1160 octets ;; HEADER SECTION ;; id = 37985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 8 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN SOA ;; ANSWER SECTION (2 records) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2026090257 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260925113756 20260911103756 2503 systron.de. n8BioDvWCNI2O1+MeYShZ36myBX/XdK8ezEtyF8pcpfxeXZpwhLno9AQG0JxMki1hm+BRcMTofYc zJyxchiF71yzOXQy99r2ptndSSxjL9/ILgKmDKBe4sozAp6FTVh/JjIO7Y1UbJiDsQQ69BwAhhQl ITo7UWg9bXGXgp57/mXoiw8RTQU8TMf+dDFYagrbwt3aYJ2pJYEv0iPm/b6/mFNO+XcoF5UW3sx/ 7SoYKqrf7MUG7YRl8yzZOE9vG4OrCnHMzLDxzE2dJoMMiRBKPVP0peNzhK8iSskmgX2K8DJ0SuJm +0Zl3uCn3mhEBch7efW0ZGsN47upm3gm1jLIjw== ) ;; AUTHORITY SECTION (4 records) systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260925062346 20260911054412 2503 systron.de. ef/tuP5axDId/YkJFvxA7Hti0+0DXy3ULrYglKGGC8OkwkvJs2a1GjzYYhyDM4ZV0d7ktPEnwbNi 5HzvHo9QCD+iTKtgEV+cPh1Oj7pojV1/ObEoDteCN9bbC9imNBHs0IO9KUJqD4q8rYmzukM7FjIw ZkmrFz4P0/Te5UxSzXBX2WZtbWc70UkqLpjCRIGbSUbmo7+fxh0Ymq7zZN9kMQJi3FeNu9YLpBBH hYr4Hx6YyT3FFtaSOcb/ikCjTDgfuFHkC8qy/6GhKZ2ol8I6yXy/QYlh9w1w7Al+wtl85MeXqoMk C0/NqdVaH4MqavQ8gIgPbl+cDCs5t7jblyaR4g== ) ;; ADDITIONAL SECTION (8 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ns2.systron.de. 3600 IN AAAA 2a03:4000:20:2ad:fc00:ff:fe00:20 ns3.systron.de. 3600 IN AAAA 2a02:180:6:1::278f ns1.systron.de. 3600 IN RRSIG ( A 8 3 3600 20260925025928 20260911023306 2503 systron.de. uGeCKdl4wZSfXtpHGjw1J1HVyyrSOzHoxSRKMChF0FpCM/y+Qhsfmqo3YEf6UxVJkC89IqAedLR5 j6wHqWP3DclHF/sVYocrnZOCmYjbmZU7u1G7lx8jINEEgH3Th1o3p/gFCWDOLi/rKykBpM05E3sF 3j1tZe+gPbdwEKw3DzOSkfzTp7hQXm7ly62miA1jKFYy39KSmSvfiCYSl8M5NPZCR7+ONaE2/+7d uVb0gEikqZDZEh8m8hlMAa6VQ0Mj7Rgy0B/fVRJ9Cgu8OmnUsLs6Rap3gHnvTkG/uTsUwSHG/L1L e8qjyuzDhwDTJ8fylRLuQ1q+XMc4emhq3zFH9w== ) ;; { "EDNS-VERSION": 0 }
	Query to ns3.systron.de for _acme-challenge.systron.de/A
	_acme-challenge.systron.de A RR has value 109.91.140.201
	Found 1 RRSIGs over A RRset
	`_acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260925091037 20260911082306 2503 systron.de. VPGuLKuX7u1xukQ5bD0XxipOuF0GNt9MyXpHHw7E515pyveXZqzoOOUFb4eq/5Doii3e4keCJEIR ZA+Fiw61XXQSq7YVhtAcL9mr0h2ARnvqh9i8r3sDU8v7b8G4Cp2EtEq+igLWsFtpif2WJlZLwhZS b5CXTQQ/YEU3Is/xh+YFyXcYL5luNg7b2obTC3tVA0hMLgwo0BFvJyxmODAk//UDHwyrp/KSw5GF IACUiSgU6hz5xFG8nq0C98NNY77POc6GppfrkPI2d5uc53EYwAtGGxCUxDBxhDFuX8P/imtHBBX6 tSjnEiocGS26qS7jwrgLZ/+6C/RGaRh1SjuGhA== )`
	RRSIG=2503 and DNSKEY=2503 verifies the A RRset

systron.de

	Query to ns2.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 89.58.12.225
	;; Response received from [89.58.12.225] 1174 octets ;; HEADER SECTION ;; id = 35668 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260925091037 20260911082306 2503 systron.de. VPGuLKuX7u1xukQ5bD0XxipOuF0GNt9MyXpHHw7E515pyveXZqzoOOUFb4eq/5Doii3e4keCJEIR ZA+Fiw61XXQSq7YVhtAcL9mr0h2ARnvqh9i8r3sDU8v7b8G4Cp2EtEq+igLWsFtpif2WJlZLwhZS b5CXTQQ/YEU3Is/xh+YFyXcYL5luNg7b2obTC3tVA0hMLgwo0BFvJyxmODAk//UDHwyrp/KSw5GF IACUiSgU6hz5xFG8nq0C98NNY77POc6GppfrkPI2d5uc53EYwAtGGxCUxDBxhDFuX8P/imtHBBX6 tSjnEiocGS26qS7jwrgLZ/+6C/RGaRh1SjuGhA== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260925062346 20260911054412 2503 systron.de. ef/tuP5axDId/YkJFvxA7Hti0+0DXy3ULrYglKGGC8OkwkvJs2a1GjzYYhyDM4ZV0d7ktPEnwbNi 5HzvHo9QCD+iTKtgEV+cPh1Oj7pojV1/ObEoDteCN9bbC9imNBHs0IO9KUJqD4q8rYmzukM7FjIw ZkmrFz4P0/Te5UxSzXBX2WZtbWc70UkqLpjCRIGbSUbmo7+fxh0Ymq7zZN9kMQJi3FeNu9YLpBBH hYr4Hx6YyT3FFtaSOcb/ikCjTDgfuFHkC8qy/6GhKZ2ol8I6yXy/QYlh9w1w7Al+wtl85MeXqoMk C0/NqdVaH4MqavQ8gIgPbl+cDCs5t7jblyaR4g== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260925065647 20260911062513 2503 systron.de. IssKH/cbRApXfRGnpaWlteFzWiPF5LSzxQIGnBX7J2saUMiKEX6cv6F/dEB/2RWDOcedaOvajYus pilB/opvW9CEUkKor/2tHskKyVGwUSkzDu+sbXT/5B+Kbwxh/ggfuKb/7PNssccQxBef0SCzdnOZ y8XcTchCAc2H7mR6rmaWULD6vEt8EMTJPK4GfT1Sh74gfvKwNbfQ+fpen2/DoBYwvNWKtKI3lvPc lIvOPRKKd+/438eFz8aHtkTsT2C1r4QVhT7JwFDXqgIM2DX5UM2ecW37tmXMuonuDkYNWgDzwhMY WXqnyFJGx7G88Vcr+SJFS5g9WC/xOrZyavRYTg== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	ns2.systron.de is authoritative for _acme-challenge.systron.de
	Query to ns2.systron.de for _acme-challenge.systron.de/DNSKEY
	Received 1568 bytes from 89.58.12.225
	;; Response received from [89.58.12.225] 1568 octets ;; HEADER SECTION ;; id = 48779 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN NSEC3 ( 1 0 0 - l6ipu76dhb5m9ikg3mlg41p4b7re57f0 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY CAA TYPE65534 ) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260925100138 20260911095714 2503 systron.de. aMo5vJDSvwBjGqorIL90S8QZJBAuZlamPzhl9B0D4tPLfkNJ8mDZ2eymOmXRapUaNu+JXHIMhWDt qOwGDMg7yXseoEM+MXWdb94Z5JiT4p2tPMgmp93iq7j+xS4ejhocZ6fHTJWG0bzgCBXc8u2JWHDF e3GIx9fNB76hCZki8O2BO0z1zRMO1Kf2NBx5n2h2cm7FdByvvNMJjQ1E4MM89HSS38N2NmIPE/VH a6BZ98leV7KBx2hremIh52x/Mde6m+YyFyviikPAX7gtNZVbv0Y5TykwY7aZMeL4TIY/yktbFNW3 1KY9yfZlrinHQcVK8lVWnyUKf4uo2f3wanwgLw== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260925065647 20260911062513 2503 systron.de. IssKH/cbRApXfRGnpaWlteFzWiPF5LSzxQIGnBX7J2saUMiKEX6cv6F/dEB/2RWDOcedaOvajYus pilB/opvW9CEUkKor/2tHskKyVGwUSkzDu+sbXT/5B+Kbwxh/ggfuKb/7PNssccQxBef0SCzdnOZ y8XcTchCAc2H7mR6rmaWULD6vEt8EMTJPK4GfT1Sh74gfvKwNbfQ+fpen2/DoBYwvNWKtKI3lvPc lIvOPRKKd+/438eFz8aHtkTsT2C1r4QVhT7JwFDXqgIM2DX5UM2ecW37tmXMuonuDkYNWgDzwhMY WXqnyFJGx7G88Vcr+SJFS5g9WC/xOrZyavRYTg== ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN NSEC3 ( 1 0 0 - brnjcmhfcq1tenfcjvms6uqo9nckuiqm A RRSIG ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260925050157 20260911044444 2503 systron.de. vEseQJPnD939fNLR5O9WN0q3dPM/7/j6Gdx53bTrohYvA6pnKLwhuoTJ9FJlEiyhQirO+yF7Y0fA M40J0/WpMCfkQiWvOiRCmdw6ad+ElilNuIdU9QOdku+oozqOMaT/0woirZk9XhjfAu1+TtUAYUum OC76ZA2uLhnyQ9S4vTJs1b51w5ZdGteCWxaCuOUbnoStKYhZLLINscTyPiy35souWZT08hXP5lTX f4g5Ouauh3V9rNB9QO8100+Bm1AceunIR6catyKscfwTwiSIH8qPItKFZSw2v6E/lfAVQjM2RiVn 5t2xnmZwRKGwDLKoanOij6zIeioL2UdwrycFmw== ) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2026090257 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260925113756 20260911103756 2503 systron.de. n8BioDvWCNI2O1+MeYShZ36myBX/XdK8ezEtyF8pcpfxeXZpwhLno9AQG0JxMki1hm+BRcMTofYc zJyxchiF71yzOXQy99r2ptndSSxjL9/ILgKmDKBe4sozAp6FTVh/JjIO7Y1UbJiDsQQ69BwAhhQl ITo7UWg9bXGXgp57/mXoiw8RTQU8TMf+dDFYagrbwt3aYJ2pJYEv0iPm/b6/mFNO+XcoF5UW3sx/ 7SoYKqrf7MUG7YRl8yzZOE9vG4OrCnHMzLDxzE2dJoMMiRBKPVP0peNzhK8iSskmgX2K8DJ0SuJm +0Zl3uCn3mhEBch7efW0ZGsN47upm3gm1jLIjw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by systron.de zone
	Query to ns2.systron.de for _acme-challenge.systron.de/A
	_acme-challenge.systron.de A RR has value 109.91.140.201
	Found 1 RRSIGs over A RRset
	`_acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260925091037 20260911082306 2503 systron.de. VPGuLKuX7u1xukQ5bD0XxipOuF0GNt9MyXpHHw7E515pyveXZqzoOOUFb4eq/5Doii3e4keCJEIR ZA+Fiw61XXQSq7YVhtAcL9mr0h2ARnvqh9i8r3sDU8v7b8G4Cp2EtEq+igLWsFtpif2WJlZLwhZS b5CXTQQ/YEU3Is/xh+YFyXcYL5luNg7b2obTC3tVA0hMLgwo0BFvJyxmODAk//UDHwyrp/KSw5GF IACUiSgU6hz5xFG8nq0C98NNY77POc6GppfrkPI2d5uc53EYwAtGGxCUxDBxhDFuX8P/imtHBBX6 tSjnEiocGS26qS7jwrgLZ/+6C/RGaRh1SjuGhA== )`
	RRSIG=2503 and DNSKEY=2503 verifies the A RRset

systron.de

	Query to ns1.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 109.91.140.201
	;; Response received from [109.91.140.201] 1174 octets ;; HEADER SECTION ;; id = 60684 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260925091037 20260911082306 2503 systron.de. VPGuLKuX7u1xukQ5bD0XxipOuF0GNt9MyXpHHw7E515pyveXZqzoOOUFb4eq/5Doii3e4keCJEIR ZA+Fiw61XXQSq7YVhtAcL9mr0h2ARnvqh9i8r3sDU8v7b8G4Cp2EtEq+igLWsFtpif2WJlZLwhZS b5CXTQQ/YEU3Is/xh+YFyXcYL5luNg7b2obTC3tVA0hMLgwo0BFvJyxmODAk//UDHwyrp/KSw5GF IACUiSgU6hz5xFG8nq0C98NNY77POc6GppfrkPI2d5uc53EYwAtGGxCUxDBxhDFuX8P/imtHBBX6 tSjnEiocGS26qS7jwrgLZ/+6C/RGaRh1SjuGhA== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260925062346 20260911054412 2503 systron.de. ef/tuP5axDId/YkJFvxA7Hti0+0DXy3ULrYglKGGC8OkwkvJs2a1GjzYYhyDM4ZV0d7ktPEnwbNi 5HzvHo9QCD+iTKtgEV+cPh1Oj7pojV1/ObEoDteCN9bbC9imNBHs0IO9KUJqD4q8rYmzukM7FjIw ZkmrFz4P0/Te5UxSzXBX2WZtbWc70UkqLpjCRIGbSUbmo7+fxh0Ymq7zZN9kMQJi3FeNu9YLpBBH hYr4Hx6YyT3FFtaSOcb/ikCjTDgfuFHkC8qy/6GhKZ2ol8I6yXy/QYlh9w1w7Al+wtl85MeXqoMk C0/NqdVaH4MqavQ8gIgPbl+cDCs5t7jblyaR4g== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260925065647 20260911062513 2503 systron.de. IssKH/cbRApXfRGnpaWlteFzWiPF5LSzxQIGnBX7J2saUMiKEX6cv6F/dEB/2RWDOcedaOvajYus pilB/opvW9CEUkKor/2tHskKyVGwUSkzDu+sbXT/5B+Kbwxh/ggfuKb/7PNssccQxBef0SCzdnOZ y8XcTchCAc2H7mR6rmaWULD6vEt8EMTJPK4GfT1Sh74gfvKwNbfQ+fpen2/DoBYwvNWKtKI3lvPc lIvOPRKKd+/438eFz8aHtkTsT2C1r4QVhT7JwFDXqgIM2DX5UM2ecW37tmXMuonuDkYNWgDzwhMY WXqnyFJGx7G88Vcr+SJFS5g9WC/xOrZyavRYTg== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	ns1.systron.de is authoritative for _acme-challenge.systron.de
	Query to ns1.systron.de for _acme-challenge.systron.de/DNSKEY
	Found RRSIG signed by systron.de zone
	Query to ns1.systron.de for _acme-challenge.systron.de/A
	_acme-challenge.systron.de A RR has value 109.91.140.201
	Found 1 RRSIGs over A RRset
	`_acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260925091037 20260911082306 2503 systron.de. VPGuLKuX7u1xukQ5bD0XxipOuF0GNt9MyXpHHw7E515pyveXZqzoOOUFb4eq/5Doii3e4keCJEIR ZA+Fiw61XXQSq7YVhtAcL9mr0h2ARnvqh9i8r3sDU8v7b8G4Cp2EtEq+igLWsFtpif2WJlZLwhZS b5CXTQQ/YEU3Is/xh+YFyXcYL5luNg7b2obTC3tVA0hMLgwo0BFvJyxmODAk//UDHwyrp/KSw5GF IACUiSgU6hz5xFG8nq0C98NNY77POc6GppfrkPI2d5uc53EYwAtGGxCUxDBxhDFuX8P/imtHBBX6 tSjnEiocGS26qS7jwrgLZ/+6C/RGaRh1SjuGhA== )`
	RRSIG=2503 and DNSKEY=2503 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test _acme-challenge.systron.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: