DNSSEC Debugger - _acme-challenge.systron.de

Domain Name:

Time: 2026-03-22 21:16:20 UTC

Analyzing DNSSEC problems for _acme-challenge.systron.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1417 octets ;; HEADER SECTION ;; id = 10218 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260412000000 20260322000000 20326 . YJgCBpeAL7jQEYIpS6icQm/XxIy+DU5PNrAT61ive9t9bpx8YsZgKf13hlkg48EvTMjINiG0r8PJ j1SiVDpZizGDdz+7+ipByzsLS7qHj6DviI4GYErjVnXZs3LESvZE/LhSFxyafLjNs9M9elLqEY10 fB4e+L3dDwu0hFR/fTOcYq4euNXE9X46/PANxFWple8XU1L53cnxD0VtQvlkG12thsIKmvMAJ0PH CoWuuYVGS/OSbDxsAHqHEBfqDLD3qjOp5mXA7wguiePv/lPBF963xkfWwpkdFVa/LxlUFu2P/q9G 9lDQ/XvTqfghEQU4v8NBbmrA10HTVs6pVNiGLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260412000000 20260322000000 20326 . YJgCBpeAL7jQEYIpS6icQm/XxIy+DU5PNrAT61ive9t9bpx8YsZgKf13hlkg48EvTMjINiG0r8PJ j1SiVDpZizGDdz+7+ipByzsLS7qHj6DviI4GYErjVnXZs3LESvZE/LhSFxyafLjNs9M9elLqEY10 fB4e+L3dDwu0hFR/fTOcYq4euNXE9X46/PANxFWple8XU1L53cnxD0VtQvlkG12thsIKmvMAJ0PH CoWuuYVGS/OSbDxsAHqHEBfqDLD3qjOp5mXA7wguiePv/lPBF963xkfWwpkdFVa/LxlUFu2P/q9G 9lDQ/XvTqfghEQU4v8NBbmrA10HTVs6pVNiGLw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=54393 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to g.root-servers.net for _acme-challenge.systron.de/A
	Received 764 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 764 octets ;; HEADER SECTION ;; id = 48053 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS a.nic.de. de. 172800 IN NS z.nic.de. de. 172800 IN NS s.de.net. de. 172800 IN NS f.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20260404170000 20260322160000 21831 . sxiQhj5ElE5dg5Njfxy4pzC+QAjWk/o5eT8nYw3otAmroxQEYyfj4TV2g1WDUmPlqwaD5o5E46ZN 0M2eWfX8IMv7Fq6Sx9gcplP+YfCdJogdliH612l40KMjhIyuWFfiDkpjD7cVBrskiY3BI0Z5eXUP LdgcMZ/PfcOaS+365WN3mlhQKkBJURbX/eDS6C/vmm8f0VJhOaAgKnWaRWCk/fXdZ6biHmX1Fe8k mLFsPnSoeRdskbuVm0dbAdKoqe060ZR64nm2jKd3MTB1V8sbACqxrKS+mpeONuX4WtFhVp2r0oXa aAnvBhU0o7UO9YjRmEe6ylpfM1oi15iyohmTNA== ) ;; ADDITIONAL SECTION (13 records) z.nic.de. 172800 IN A 194.246.96.1 s.de.net. 172800 IN A 195.243.137.26 n.de.net. 172800 IN A 194.146.107.6 l.de.net. 172800 IN A 77.67.63.105 f.nic.de. 172800 IN A 81.91.164.5 a.nic.de. 172800 IN A 194.0.0.53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 a.nic.de. 172800 IN AAAA 2001:678:2::53 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for de/DNSKEY
	Received 742 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 742 octets ;; HEADER SECTION ;; id = 3729 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20260404170000 20260322160000 21831 . sxiQhj5ElE5dg5Njfxy4pzC+QAjWk/o5eT8nYw3otAmroxQEYyfj4TV2g1WDUmPlqwaD5o5E46ZN 0M2eWfX8IMv7Fq6Sx9gcplP+YfCdJogdliH612l40KMjhIyuWFfiDkpjD7cVBrskiY3BI0Z5eXUP LdgcMZ/PfcOaS+365WN3mlhQKkBJURbX/eDS6C/vmm8f0VJhOaAgKnWaRWCk/fXdZ6biHmX1Fe8k mLFsPnSoeRdskbuVm0dbAdKoqe060ZR64nm2jKd3MTB1V8sbACqxrKS+mpeONuX4WtFhVp2r0oXa aAnvBhU0o7UO9YjRmEe6ylpfM1oi15iyohmTNA== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to k.root-servers.net for de/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 366 octets ;; HEADER SECTION ;; id = 51917 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20260404170000 20260322160000 21831 . sxiQhj5ElE5dg5Njfxy4pzC+QAjWk/o5eT8nYw3otAmroxQEYyfj4TV2g1WDUmPlqwaD5o5E46ZN 0M2eWfX8IMv7Fq6Sx9gcplP+YfCdJogdliH612l40KMjhIyuWFfiDkpjD7cVBrskiY3BI0Z5eXUP LdgcMZ/PfcOaS+365WN3mlhQKkBJURbX/eDS6C/vmm8f0VJhOaAgKnWaRWCk/fXdZ6biHmX1Fe8k mLFsPnSoeRdskbuVm0dbAdKoqe060ZR64nm2jKd3MTB1V8sbACqxrKS+mpeONuX4WtFhVp2r0oXa aAnvBhU0o7UO9YjRmEe6ylpfM1oi15iyohmTNA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20260404170000 20260322160000 21831 . sxiQhj5ElE5dg5Njfxy4pzC+QAjWk/o5eT8nYw3otAmroxQEYyfj4TV2g1WDUmPlqwaD5o5E46ZN 0M2eWfX8IMv7Fq6Sx9gcplP+YfCdJogdliH612l40KMjhIyuWFfiDkpjD7cVBrskiY3BI0Z5eXUP LdgcMZ/PfcOaS+365WN3mlhQKkBJURbX/eDS6C/vmm8f0VJhOaAgKnWaRWCk/fXdZ6biHmX1Fe8k mLFsPnSoeRdskbuVm0dbAdKoqe060ZR64nm2jKd3MTB1V8sbACqxrKS+mpeONuX4WtFhVp2r0oXa aAnvBhU0o7UO9YjRmEe6ylpfM1oi15iyohmTNA== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to s.de.net for de/DNSKEY
	Received 745 bytes from 195.243.137.26
	;; Response received from [195.243.137.26] 745 octets ;; HEADER SECTION ;; id = 44821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (3 records) de. 3600 IN DNSKEY ( 256 3 8 AwEAAbUzjtwQvgSf2XgRzH9kU/iWpuIVCEIMQ7yH6B9Qujp5+5JrcSdvxYtO5ZSQXIaKMDXBLLoh PvwEOwZdj/h4OTkp0VOqyVeheWD9OtRn/JfL1DDWYEKAZub9uQhluUA1KC+/7b0GlUN8A2mYuWZl mfuK9hDO0Z2imQRpln9ibr7f ) ; keytag 57619 de. 3600 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755 de. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260331071938 20260317054938 26755 de. KLA25kqjBoFR4kmG0gzQOgw24SQDHYmQ5linB3G9/QQOBGcGMiJa4QRAjoTOOUJgUb+JaAYMt58F QtkL4BqLq427yF2vTT7kw/RkuHKTuIbm8COG8ZGhONyn95UNuOiwNTSuaz8cXoKyQu5Gp50Mu3Et F5T/QNALcClaH8KdYMaVCTLJnXJ3oCtUS53WGkkXscPdMFMniKrUevGD5dAOAWBl7K63PuWzwVam MJ/juiEocRscV+GIfQz7d14nR1VZwzm6it3wnI/T+cIKw7sGelIpOtk/DZT2ONtewSNmhEFFGpnr LXNirVMBXYimOJvZb1IwxlI64V2AgER44+obOg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for de
	`de. 3600 IN DNSKEY ( 256 3 8 AwEAAbUzjtwQvgSf2XgRzH9kU/iWpuIVCEIMQ7yH6B9Qujp5+5JrcSdvxYtO5ZSQXIaKMDXBLLoh PvwEOwZdj/h4OTkp0VOqyVeheWD9OtRn/JfL1DDWYEKAZub9uQhluUA1KC+/7b0GlUN8A2mYuWZl mfuK9hDO0Z2imQRpln9ibr7f ) ; keytag 57619`
	`de. 3600 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260331071938 20260317054938 26755 de. KLA25kqjBoFR4kmG0gzQOgw24SQDHYmQ5linB3G9/QQOBGcGMiJa4QRAjoTOOUJgUb+JaAYMt58F QtkL4BqLq427yF2vTT7kw/RkuHKTuIbm8COG8ZGhONyn95UNuOiwNTSuaz8cXoKyQu5Gp50Mu3Et F5T/QNALcClaH8KdYMaVCTLJnXJ3oCtUS53WGkkXscPdMFMniKrUevGD5dAOAWBl7K63PuWzwVam MJ/juiEocRscV+GIfQz7d14nR1VZwzm6it3wnI/T+cIKw7sGelIpOtk/DZT2ONtewSNmhEFFGpnr LXNirVMBXYimOJvZb1IwxlI64V2AgER44+obOg== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=57619 is now in the chain-of-trust
	Query to f.nic.de for _acme-challenge.systron.de/A
	Received 423 bytes from 81.91.164.5
	;; Response received from [81.91.164.5] 423 octets ;; HEADER SECTION ;; id = 24549 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) systron.de. 86400 IN NS ns1.systron.de. systron.de. 86400 IN NS ns2.systron.de. systron.de. 86400 IN NS ns3.systron.de. systron.de. 86400 IN DS ( 38671 8 2 35957abcb65b9f648431c995179b710d1ec2e5cda368069db65f91dd404e9e70 ) systron.de. 86400 IN RRSIG ( DS 8 2 86400 20260330071706 20260316054706 57619 de. nTRfe68wPOhMVxZai4NxBifEWuO6x69DuKDpYIMm/YmUbzp24mKXri12l+YENgr836GidN0/K+7+ FjS7mtf8ffyRnkdfw7AhkEcduZln3j8WtIoaczk1oC7JKWsUiu6ZG+pu42TTlYyJi9YjdVGRm+i3 dsKGKEHTI/pcTT+FYQI= ) ;; ADDITIONAL SECTION (6 records) ns1.systron.de. 86400 IN A 109.91.140.201 ns1.systron.de. 86400 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ns2.systron.de. 86400 IN A 89.58.12.225 ns3.systron.de. 86400 IN A 81.7.13.30 ns3.systron.de. 86400 IN AAAA 2a02:180:6:1::278f ;; { "EDNS-VERSION": 0 }
	Query to s.de.net for systron.de/DNSKEY
	Received 407 bytes from 195.243.137.26
	;; Response received from [195.243.137.26] 407 octets ;; HEADER SECTION ;; id = 54422 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 6 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) systron.de. 86400 IN NS ns1.systron.de. systron.de. 86400 IN NS ns2.systron.de. systron.de. 86400 IN NS ns3.systron.de. systron.de. 86400 IN DS ( 38671 8 2 35957abcb65b9f648431c995179b710d1ec2e5cda368069db65f91dd404e9e70 ) systron.de. 86400 IN RRSIG ( DS 8 2 86400 20260330071706 20260316054706 57619 de. nTRfe68wPOhMVxZai4NxBifEWuO6x69DuKDpYIMm/YmUbzp24mKXri12l+YENgr836GidN0/K+7+ FjS7mtf8ffyRnkdfw7AhkEcduZln3j8WtIoaczk1oC7JKWsUiu6ZG+pu42TTlYyJi9YjdVGRm+i3 dsKGKEHTI/pcTT+FYQI= ) ;; ADDITIONAL SECTION (6 records) ns1.systron.de. 86400 IN A 109.91.140.201 ns1.systron.de. 86400 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ns2.systron.de. 86400 IN A 89.58.12.225 ns3.systron.de. 86400 IN A 81.7.13.30 ns3.systron.de. 86400 IN AAAA 2a02:180:6:1::278f ;; { "EDNS-VERSION": 0 }
	Found child zone systron.de

systron.de

	Checking DS between de and systron.de
	Query to a.nic.de for systron.de/DS
	Received 249 bytes from 194.0.0.53
	;; Response received from [194.0.0.53] 249 octets ;; HEADER SECTION ;; id = 57300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN DS ;; ANSWER SECTION (2 records) systron.de. 86400 IN DS ( 38671 8 2 35957abcb65b9f648431c995179b710d1ec2e5cda368069db65f91dd404e9e70 ) systron.de. 86400 IN RRSIG ( DS 8 2 86400 20260330071706 20260316054706 57619 de. nTRfe68wPOhMVxZai4NxBifEWuO6x69DuKDpYIMm/YmUbzp24mKXri12l+YENgr836GidN0/K+7+ FjS7mtf8ffyRnkdfw7AhkEcduZln3j8WtIoaczk1oC7JKWsUiu6ZG+pu42TTlYyJi9YjdVGRm+i3 dsKGKEHTI/pcTT+FYQI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for systron.de in the de zone
	DS=38671/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`systron.de. 86400 IN RRSIG ( DS 8 2 86400 20260330071706 20260316054706 57619 de. nTRfe68wPOhMVxZai4NxBifEWuO6x69DuKDpYIMm/YmUbzp24mKXri12l+YENgr836GidN0/K+7+ FjS7mtf8ffyRnkdfw7AhkEcduZln3j8WtIoaczk1oC7JKWsUiu6ZG+pu42TTlYyJi9YjdVGRm+i3 dsKGKEHTI/pcTT+FYQI= )`
	RRSIG=57619 and DNSKEY=57619 verifies the DS RRset
	DS=38671/SHA-256 is now in the chain-of-trust
	`systron.de. 86400 IN DS ( 38671 8 2 35957abcb65b9f648431c995179b710d1ec2e5cda368069db65f91dd404e9e70 )`
	Query to ns3.systron.de for systron.de/DNSKEY
	Received 889 bytes from 81.7.13.30
	;; Response received from [81.7.13.30] 889 octets ;; HEADER SECTION ;; id = 1664 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN DNSKEY ;; ANSWER SECTION (3 records) systron.de. 3600 IN DNSKEY ( 256 3 8 AwEAAcvJB/3EvVECut2YfwQRJPY0CbgJv40gkr0M8M8e+p69zz+qgC5spKokm4S02InwZxerTeDU TxPoDV1rWX4R6UXp1nL2l59OiCPPO7rXL6d29W+GMryku6EVfkGpFBJCdHX4q3pXlZT3yizFVkmq C4PYDJNsSeTYS6pt50MYho7t/fiAS2AlS5jYhnq1rweGyUHmt9GsZrC+mQ5PlpdB2ECSwyyDrXRp 7uPhY+Gep4/pcMON6Mb7QJKWqqsM3t9pHP67RCGp4zUAgWjeBVTodYnEjjuO0SNk3tQmaTaQfDvA qfLCQacWuW7O2V0pRTvZ0QoVqIemeKJ/FEagthlzT7s= ) ; keytag 2503 systron.de. 3600 IN DNSKEY ( 257 3 8 AwEAAboOSIzkog6g+tBFxqkxSrZ2azPdu3rPkDqLu7/+tynNVhrs7RJEUQ6l4RgOR9jFdVnLmsDY XEdQadAedDeUv12xQ99roU9Pk8HS15VzQ6JyjY55STbpBhuA4CNJRNdIcY3SytfEwlFNB/1c5vx4 l4GBN/ObMxAZqecaRgvAPyy0qNXq26ImZ0B/1uFCniuTkcHGnzTZmtLVc+b1II8Mfrv4R87IsICu /0OfRd/N0B1TzODye4rrh/IKMq02VtXb6EFuv65nLwrYDNxVk1EVWJNjrbL1G0C5JLxy/cxkViA0 4t4QrTqb5Vsy7UUg8rWcgJj/CCpdGa0Lad5yyz1Ujlk= ) ; keytag 38671 systron.de. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260328055352 20260314051429 38671 systron.de. Uz/loQf6lJXWOplTZ+6SKGxHb9QHPOi02Jje18Q0QAiKBcvIYpbqbAdtWiDW6ncWQN3GWIGKNpKL iRZVXp4FRGyIsNyWAX16POE88fu3q6CXCmxFuXQCHWPXCPh0KTDq4r4MWMgTQRT/yH3MiQ7I7Krm MycMHzSl5xmjSXULBuNqHMbBr9vIrBPVcdPizUM4RNiguunviAyP6T8Nb50AtXp1pCphJEyZWy9l Ktd2I5/hM63cUMCnmB4MlVafH8keUCf0Z0gZslDrzW4tVCV/DGyKYXlUzAkfObnD7WdAlcVrnF1c nRtmjDPzf3OwqCsbTpCgeP841H4CVM4QBGZMXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for systron.de
	`systron.de. 3600 IN DNSKEY ( 256 3 8 AwEAAcvJB/3EvVECut2YfwQRJPY0CbgJv40gkr0M8M8e+p69zz+qgC5spKokm4S02InwZxerTeDU TxPoDV1rWX4R6UXp1nL2l59OiCPPO7rXL6d29W+GMryku6EVfkGpFBJCdHX4q3pXlZT3yizFVkmq C4PYDJNsSeTYS6pt50MYho7t/fiAS2AlS5jYhnq1rweGyUHmt9GsZrC+mQ5PlpdB2ECSwyyDrXRp 7uPhY+Gep4/pcMON6Mb7QJKWqqsM3t9pHP67RCGp4zUAgWjeBVTodYnEjjuO0SNk3tQmaTaQfDvA qfLCQacWuW7O2V0pRTvZ0QoVqIemeKJ/FEagthlzT7s= ) ; keytag 2503`
	`systron.de. 3600 IN DNSKEY ( 257 3 8 AwEAAboOSIzkog6g+tBFxqkxSrZ2azPdu3rPkDqLu7/+tynNVhrs7RJEUQ6l4RgOR9jFdVnLmsDY XEdQadAedDeUv12xQ99roU9Pk8HS15VzQ6JyjY55STbpBhuA4CNJRNdIcY3SytfEwlFNB/1c5vx4 l4GBN/ObMxAZqecaRgvAPyy0qNXq26ImZ0B/1uFCniuTkcHGnzTZmtLVc+b1II8Mfrv4R87IsICu /0OfRd/N0B1TzODye4rrh/IKMq02VtXb6EFuv65nLwrYDNxVk1EVWJNjrbL1G0C5JLxy/cxkViA0 4t4QrTqb5Vsy7UUg8rWcgJj/CCpdGa0Lad5yyz1Ujlk= ) ; keytag 38671`
	DNSKEY=38671/SEP is now in the chain-of-trust
	DS=38671/SHA-256 verifies DNSKEY=38671/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`systron.de. 3600 IN RRSIG ( DNSKEY 8 2 3600 20260328055352 20260314051429 38671 systron.de. Uz/loQf6lJXWOplTZ+6SKGxHb9QHPOi02Jje18Q0QAiKBcvIYpbqbAdtWiDW6ncWQN3GWIGKNpKL iRZVXp4FRGyIsNyWAX16POE88fu3q6CXCmxFuXQCHWPXCPh0KTDq4r4MWMgTQRT/yH3MiQ7I7Krm MycMHzSl5xmjSXULBuNqHMbBr9vIrBPVcdPizUM4RNiguunviAyP6T8Nb50AtXp1pCphJEyZWy9l Ktd2I5/hM63cUMCnmB4MlVafH8keUCf0Z0gZslDrzW4tVCV/DGyKYXlUzAkfObnD7WdAlcVrnF1c nRtmjDPzf3OwqCsbTpCgeP841H4CVM4QBGZMXQ== )`
	RRSIG=38671 and DNSKEY=38671/SEP verifies the DNSKEY RRset
	DNSKEY=2503 is now in the chain-of-trust
	Query to ns1.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 109.91.140.201
	;; Response received from [109.91.140.201] 1174 octets ;; HEADER SECTION ;; id = 1991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260328033300 20260314024201 2503 systron.de. QU0KjuxhNYYR8mfUPVXwd3C0SU8TUwikTWjySv1brfaJZ92rJzsQe37PlU06ma4f8wpuQB5ycq3A yhrsTF8qV0YIvNyuUkabEIxESqJUVZK7c8rCmxhtscjXQUa+dZpYqHUtATZOpkvea1Unc/j5mJPz G9luvKjK9B1Q2SDrsVfaI9G9aqnxTmkbLkosc7MjsL2IdRbZfI1cLziazaZJmsFO+dMr5dX/I2ar 8xE/u3MNYINkPpdlEOEBxE9zLp4gOXglK0x37zGOgaH9szLdSSzd6LmNS3ZSK9IeqFdiS9Av47jX q0sPvNob6Ho43CgLeb91MPdosnpnni8iLfdKNQ== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260328033300 20260314024201 2503 systron.de. YigfXQVeCrTLiPCedW9tczKBXas/VWFYrE6Rm+R3FQDsud+bNpwctz2pTSbEHUiJVPCQSc4tcxpD Y0Sbr9QaCBVJCmuiyoPjx2wzTLpIwOrVqqPc/3HucWP663pEpGvvrIVFFn/+bDvLU80d2upz4jHw q19X3mrGB1YKs4SoS0VeyLRp2te8tD6iBxgjEn4wF18NcoLRT1Plw2PHmnOLE8ALPRwKf1QNQpxn 2CHptIXB72rqf4hC9YR0YqFhqpFjWGqXLaOjfPv5wsjwhhO9yB2CnJUpAfyjfUwR/d86Y6cV76ZR sAPNycViKyMzvBILElr4Z02r29QD/2vKkihozA== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260402202220 20260319194432 2503 systron.de. el1mTIvA1TaPWtO3eqqznmyxp0RbBW2kH6shZLbKhvx580gnde0SH9uzNv0xJFdpxGT+/TN57wbu igKlQ/TEok2w6Tat9r3sJVAO7Gr8Ozh5mSkHTHlHjFT5pjC/zhxqXCt8UMiYu+Ad64n57Kz/qDwM 0vv52FmYfu66U8Foez4Tl/X2Nj6ZRSTZQhMiCc5Ghd0vMoBHyz/0PxDXcNsTIvkVD9LwUWRSAL2Z 2GTyMO3/b87NGJvzYNXHdsatREL1ZACKBv69J9LYu/PH0BpDWBunBEqR0BRLp5Ow5ISL3NG3Sb7C DuR7RvGXPsC1v9y1D+QRpqoDJRcvtZAXNICVQA== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	ns1.systron.de is authoritative for _acme-challenge.systron.de
	Query to ns2.systron.de for _acme-challenge.systron.de/DNSKEY
	Received 1534 bytes from 89.58.12.225
	;; Response received from [89.58.12.225] 1534 octets ;; HEADER SECTION ;; id = 37929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN NSEC3 ( 1 0 0 - l6ipu76dhb5m9ikg3mlg41p4b7re57f0 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY CAA ) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260328012818 20260314010136 2503 systron.de. Ognrn0OHAnc9hP+DfL+MX123Lk92c5FkFUAAhQ/B5koB1GVH/HIfVCrHlWDFnG8iYGHo0N2gqOEF suTHsD1U/SOIoJzQLv3sYbumsIw3dH6ClOLh9Jmt5JDVZaUpfG2f84EKtpFaU08UCDwAOTiwsAx0 /sZQoobdyT3Yz0Zv5Mc06UG2KCAlv6YTnmrIUNX8W+MLMg+dmfnyMA/OXym9WpDFdOFbDUFq4QM2 QFJa3zayFpOeHDh8UWYGYIo2eagkqWK6CRdBqwnjFckq4dbZK/pY+IZ+PIpvbJdRIRt392It848/ Octg4iENbbDs3fe13i3s9Kv86dKBIua3IVF3fg== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260402202220 20260319194432 2503 systron.de. el1mTIvA1TaPWtO3eqqznmyxp0RbBW2kH6shZLbKhvx580gnde0SH9uzNv0xJFdpxGT+/TN57wbu igKlQ/TEok2w6Tat9r3sJVAO7Gr8Ozh5mSkHTHlHjFT5pjC/zhxqXCt8UMiYu+Ad64n57Kz/qDwM 0vv52FmYfu66U8Foez4Tl/X2Nj6ZRSTZQhMiCc5Ghd0vMoBHyz/0PxDXcNsTIvkVD9LwUWRSAL2Z 2GTyMO3/b87NGJvzYNXHdsatREL1ZACKBv69J9LYu/PH0BpDWBunBEqR0BRLp5Ow5ISL3NG3Sb7C DuR7RvGXPsC1v9y1D+QRpqoDJRcvtZAXNICVQA== ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN NSEC3 ( 1 0 0 - brnjcmhfcq1tenfcjvms6uqo9nckuiqm A RRSIG ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260404181415 20260321172456 2503 systron.de. rUH6zQ8hS+6fVwKLOzdhmGTUwn136Ub120CpC3kYPegWyh+7+ScnZ+XfUzqN2TQCwZKXGybnmjDJ eizzdUIPe2SgUD9JvMCEXioX4G8AI36/RNnVSNvAqy/L+X4gS8RFH4sYIphGMTl/qXJ8VhTVTNS+ QaW79fSwNV1ZSpxoKiX0I6uJ7wUfrn3gAYTnwquQ0C3ZCrCksmoo8fFA61EKOFpJ/Rf3t0vTFL0X sdyuvj/ycX7NDl9ZqcgpRGhBWoXPoaI4rcPN0hixB4FN/fAsEH6PduNEqepnFy9MEHHRTqgsyyt5 WIsnK3CTi+6SUbsbMOPomMhNnOYR6BIbaX+nAQ== ) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2025101622 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260405202612 20260322192612 2503 systron.de. AgcJ/rW/dU5C4T3QIsB0NYrcRj0uI4oW77uAV5+CK4id1SwIfOAQu0mewaw1vBB8ekZpgbYfts5f iXdQ6IYIv8YInw9wN4QPz9Wl5Ut/Z4tztDpuqLdNgZoAMdIQLhxBkEnSbpXHiGU498l+v7sbOZsQ x7hzOmuRMbKY7DFZxrNCQtNsCywEVEJDF/KlVOiUjUB+8T9RIwhiQQDfO8Rxn/P4G2Cmr248k9Ml YYkAQHAUStcHqrDvdPo1cwechI5knyB6LMwqhicTxiSgbARM1QtH/rqCSV785Y2MgdZbqVSyzwAs aAJwSHbUcl5EV056Ny/08TLaJ2hubQpOEQA1EQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by systron.de zone
	Query to ns3.systron.de for systron.de/SOA
	Received 1132 bytes from 81.7.13.30
	;; Response received from [81.7.13.30] 1132 octets ;; HEADER SECTION ;; id = 49709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN SOA ;; ANSWER SECTION (2 records) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2025101622 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260405202612 20260322192612 2503 systron.de. AgcJ/rW/dU5C4T3QIsB0NYrcRj0uI4oW77uAV5+CK4id1SwIfOAQu0mewaw1vBB8ekZpgbYfts5f iXdQ6IYIv8YInw9wN4QPz9Wl5Ut/Z4tztDpuqLdNgZoAMdIQLhxBkEnSbpXHiGU498l+v7sbOZsQ x7hzOmuRMbKY7DFZxrNCQtNsCywEVEJDF/KlVOiUjUB+8T9RIwhiQQDfO8Rxn/P4G2Cmr248k9Ml YYkAQHAUStcHqrDvdPo1cwechI5knyB6LMwqhicTxiSgbARM1QtH/rqCSV785Y2MgdZbqVSyzwAs aAJwSHbUcl5EV056Ny/08TLaJ2hubQpOEQA1EQ== ) ;; AUTHORITY SECTION (4 records) systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260328033300 20260314024201 2503 systron.de. YigfXQVeCrTLiPCedW9tczKBXas/VWFYrE6Rm+R3FQDsud+bNpwctz2pTSbEHUiJVPCQSc4tcxpD Y0Sbr9QaCBVJCmuiyoPjx2wzTLpIwOrVqqPc/3HucWP663pEpGvvrIVFFn/+bDvLU80d2upz4jHw q19X3mrGB1YKs4SoS0VeyLRp2te8tD6iBxgjEn4wF18NcoLRT1Plw2PHmnOLE8ALPRwKf1QNQpxn 2CHptIXB72rqf4hC9YR0YqFhqpFjWGqXLaOjfPv5wsjwhhO9yB2CnJUpAfyjfUwR/d86Y6cV76ZR sAPNycViKyMzvBILElr4Z02r29QD/2vKkihozA== ) ;; ADDITIONAL SECTION (7 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ns3.systron.de. 3600 IN AAAA 2a02:180:6:1::278f ns1.systron.de. 3600 IN RRSIG ( A 8 3 3600 20260328075035 20260314070426 2503 systron.de. C8LUmP5HE2H+TiUErwFSfdo8EtUYLJtXf3A4pwFgHHgOV0B+IU4ZfSWSNJIM6bmL5UDitx+bvL2N d7yFlDnY2V4zaugZSc9GNtp3BAUMzkUgs4l/P6oO1RcFTbrxO4o5pJhD5qsE7t2GC/5M0LsUU5p9 PVPrPw2bgDa7soubE/eAqyMEyHHwnufbchBYIbmSmz2G2g3YBH1t8Y8hKBL4Z8HDpYn18dQpQwmm AyqR6Xow+3q5lqBi27b4k0jobJ8vSkzOsHustD3tTgMjFq7MwekF6+d3ICENmMQTXJUdeRY0KZUv SuKgMImipVEMIe4p/Ks2TF/AFeTNYRm0f5F81Q== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.systron.de for systron.de/SOA
	Received 1132 bytes from 89.58.12.225
	;; Response received from [89.58.12.225] 1132 octets ;; HEADER SECTION ;; id = 13362 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; systron.de. IN SOA ;; ANSWER SECTION (2 records) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2025101622 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260405202612 20260322192612 2503 systron.de. AgcJ/rW/dU5C4T3QIsB0NYrcRj0uI4oW77uAV5+CK4id1SwIfOAQu0mewaw1vBB8ekZpgbYfts5f iXdQ6IYIv8YInw9wN4QPz9Wl5Ut/Z4tztDpuqLdNgZoAMdIQLhxBkEnSbpXHiGU498l+v7sbOZsQ x7hzOmuRMbKY7DFZxrNCQtNsCywEVEJDF/KlVOiUjUB+8T9RIwhiQQDfO8Rxn/P4G2Cmr248k9Ml YYkAQHAUStcHqrDvdPo1cwechI5knyB6LMwqhicTxiSgbARM1QtH/rqCSV785Y2MgdZbqVSyzwAs aAJwSHbUcl5EV056Ny/08TLaJ2hubQpOEQA1EQ== ) ;; AUTHORITY SECTION (4 records) systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260328033300 20260314024201 2503 systron.de. YigfXQVeCrTLiPCedW9tczKBXas/VWFYrE6Rm+R3FQDsud+bNpwctz2pTSbEHUiJVPCQSc4tcxpD Y0Sbr9QaCBVJCmuiyoPjx2wzTLpIwOrVqqPc/3HucWP663pEpGvvrIVFFn/+bDvLU80d2upz4jHw q19X3mrGB1YKs4SoS0VeyLRp2te8tD6iBxgjEn4wF18NcoLRT1Plw2PHmnOLE8ALPRwKf1QNQpxn 2CHptIXB72rqf4hC9YR0YqFhqpFjWGqXLaOjfPv5wsjwhhO9yB2CnJUpAfyjfUwR/d86Y6cV76ZR sAPNycViKyMzvBILElr4Z02r29QD/2vKkihozA== ) ;; ADDITIONAL SECTION (7 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ns3.systron.de. 3600 IN AAAA 2a02:180:6:1::278f ns1.systron.de. 3600 IN RRSIG ( A 8 3 3600 20260328075035 20260314070426 2503 systron.de. C8LUmP5HE2H+TiUErwFSfdo8EtUYLJtXf3A4pwFgHHgOV0B+IU4ZfSWSNJIM6bmL5UDitx+bvL2N d7yFlDnY2V4zaugZSc9GNtp3BAUMzkUgs4l/P6oO1RcFTbrxO4o5pJhD5qsE7t2GC/5M0LsUU5p9 PVPrPw2bgDa7soubE/eAqyMEyHHwnufbchBYIbmSmz2G2g3YBH1t8Y8hKBL4Z8HDpYn18dQpQwmm AyqR6Xow+3q5lqBi27b4k0jobJ8vSkzOsHustD3tTgMjFq7MwekF6+d3ICENmMQTXJUdeRY0KZUv SuKgMImipVEMIe4p/Ks2TF/AFeTNYRm0f5F81Q== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 109.91.140.201
	;; Response received from [109.91.140.201] 1174 octets ;; HEADER SECTION ;; id = 32704 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260328033300 20260314024201 2503 systron.de. QU0KjuxhNYYR8mfUPVXwd3C0SU8TUwikTWjySv1brfaJZ92rJzsQe37PlU06ma4f8wpuQB5ycq3A yhrsTF8qV0YIvNyuUkabEIxESqJUVZK7c8rCmxhtscjXQUa+dZpYqHUtATZOpkvea1Unc/j5mJPz G9luvKjK9B1Q2SDrsVfaI9G9aqnxTmkbLkosc7MjsL2IdRbZfI1cLziazaZJmsFO+dMr5dX/I2ar 8xE/u3MNYINkPpdlEOEBxE9zLp4gOXglK0x37zGOgaH9szLdSSzd6LmNS3ZSK9IeqFdiS9Av47jX q0sPvNob6Ho43CgLeb91MPdosnpnni8iLfdKNQ== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260328033300 20260314024201 2503 systron.de. YigfXQVeCrTLiPCedW9tczKBXas/VWFYrE6Rm+R3FQDsud+bNpwctz2pTSbEHUiJVPCQSc4tcxpD Y0Sbr9QaCBVJCmuiyoPjx2wzTLpIwOrVqqPc/3HucWP663pEpGvvrIVFFn/+bDvLU80d2upz4jHw q19X3mrGB1YKs4SoS0VeyLRp2te8tD6iBxgjEn4wF18NcoLRT1Plw2PHmnOLE8ALPRwKf1QNQpxn 2CHptIXB72rqf4hC9YR0YqFhqpFjWGqXLaOjfPv5wsjwhhO9yB2CnJUpAfyjfUwR/d86Y6cV76ZR sAPNycViKyMzvBILElr4Z02r29QD/2vKkihozA== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260402202220 20260319194432 2503 systron.de. el1mTIvA1TaPWtO3eqqznmyxp0RbBW2kH6shZLbKhvx580gnde0SH9uzNv0xJFdpxGT+/TN57wbu igKlQ/TEok2w6Tat9r3sJVAO7Gr8Ozh5mSkHTHlHjFT5pjC/zhxqXCt8UMiYu+Ad64n57Kz/qDwM 0vv52FmYfu66U8Foez4Tl/X2Nj6ZRSTZQhMiCc5Ghd0vMoBHyz/0PxDXcNsTIvkVD9LwUWRSAL2Z 2GTyMO3/b87NGJvzYNXHdsatREL1ZACKBv69J9LYu/PH0BpDWBunBEqR0BRLp5Ow5ISL3NG3Sb7C DuR7RvGXPsC1v9y1D+QRpqoDJRcvtZAXNICVQA== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	_acme-challenge.systron.de A RR has value 109.91.140.201
	Found 1 RRSIGs over A RRset
	`_acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260328033300 20260314024201 2503 systron.de. QU0KjuxhNYYR8mfUPVXwd3C0SU8TUwikTWjySv1brfaJZ92rJzsQe37PlU06ma4f8wpuQB5ycq3A yhrsTF8qV0YIvNyuUkabEIxESqJUVZK7c8rCmxhtscjXQUa+dZpYqHUtATZOpkvea1Unc/j5mJPz G9luvKjK9B1Q2SDrsVfaI9G9aqnxTmkbLkosc7MjsL2IdRbZfI1cLziazaZJmsFO+dMr5dX/I2ar 8xE/u3MNYINkPpdlEOEBxE9zLp4gOXglK0x37zGOgaH9szLdSSzd6LmNS3ZSK9IeqFdiS9Av47jX q0sPvNob6Ho43CgLeb91MPdosnpnni8iLfdKNQ== )`
	RRSIG=2503 and DNSKEY=2503 verifies the A RRset

systron.de

	Query to ns2.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 89.58.12.225
	;; Response received from [89.58.12.225] 1174 octets ;; HEADER SECTION ;; id = 37105 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260328033300 20260314024201 2503 systron.de. QU0KjuxhNYYR8mfUPVXwd3C0SU8TUwikTWjySv1brfaJZ92rJzsQe37PlU06ma4f8wpuQB5ycq3A yhrsTF8qV0YIvNyuUkabEIxESqJUVZK7c8rCmxhtscjXQUa+dZpYqHUtATZOpkvea1Unc/j5mJPz G9luvKjK9B1Q2SDrsVfaI9G9aqnxTmkbLkosc7MjsL2IdRbZfI1cLziazaZJmsFO+dMr5dX/I2ar 8xE/u3MNYINkPpdlEOEBxE9zLp4gOXglK0x37zGOgaH9szLdSSzd6LmNS3ZSK9IeqFdiS9Av47jX q0sPvNob6Ho43CgLeb91MPdosnpnni8iLfdKNQ== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260328033300 20260314024201 2503 systron.de. YigfXQVeCrTLiPCedW9tczKBXas/VWFYrE6Rm+R3FQDsud+bNpwctz2pTSbEHUiJVPCQSc4tcxpD Y0Sbr9QaCBVJCmuiyoPjx2wzTLpIwOrVqqPc/3HucWP663pEpGvvrIVFFn/+bDvLU80d2upz4jHw q19X3mrGB1YKs4SoS0VeyLRp2te8tD6iBxgjEn4wF18NcoLRT1Plw2PHmnOLE8ALPRwKf1QNQpxn 2CHptIXB72rqf4hC9YR0YqFhqpFjWGqXLaOjfPv5wsjwhhO9yB2CnJUpAfyjfUwR/d86Y6cV76ZR sAPNycViKyMzvBILElr4Z02r29QD/2vKkihozA== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260402202220 20260319194432 2503 systron.de. el1mTIvA1TaPWtO3eqqznmyxp0RbBW2kH6shZLbKhvx580gnde0SH9uzNv0xJFdpxGT+/TN57wbu igKlQ/TEok2w6Tat9r3sJVAO7Gr8Ozh5mSkHTHlHjFT5pjC/zhxqXCt8UMiYu+Ad64n57Kz/qDwM 0vv52FmYfu66U8Foez4Tl/X2Nj6ZRSTZQhMiCc5Ghd0vMoBHyz/0PxDXcNsTIvkVD9LwUWRSAL2Z 2GTyMO3/b87NGJvzYNXHdsatREL1ZACKBv69J9LYu/PH0BpDWBunBEqR0BRLp5Ow5ISL3NG3Sb7C DuR7RvGXPsC1v9y1D+QRpqoDJRcvtZAXNICVQA== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	ns2.systron.de is authoritative for _acme-challenge.systron.de
	Query to ns2.systron.de for _acme-challenge.systron.de/DNSKEY
	Received 1534 bytes from 89.58.12.225
	;; Response received from [89.58.12.225] 1534 octets ;; HEADER SECTION ;; id = 61008 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN NSEC3 ( 1 0 0 - l6ipu76dhb5m9ikg3mlg41p4b7re57f0 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY CAA ) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260328012818 20260314010136 2503 systron.de. Ognrn0OHAnc9hP+DfL+MX123Lk92c5FkFUAAhQ/B5koB1GVH/HIfVCrHlWDFnG8iYGHo0N2gqOEF suTHsD1U/SOIoJzQLv3sYbumsIw3dH6ClOLh9Jmt5JDVZaUpfG2f84EKtpFaU08UCDwAOTiwsAx0 /sZQoobdyT3Yz0Zv5Mc06UG2KCAlv6YTnmrIUNX8W+MLMg+dmfnyMA/OXym9WpDFdOFbDUFq4QM2 QFJa3zayFpOeHDh8UWYGYIo2eagkqWK6CRdBqwnjFckq4dbZK/pY+IZ+PIpvbJdRIRt392It848/ Octg4iENbbDs3fe13i3s9Kv86dKBIua3IVF3fg== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260402202220 20260319194432 2503 systron.de. el1mTIvA1TaPWtO3eqqznmyxp0RbBW2kH6shZLbKhvx580gnde0SH9uzNv0xJFdpxGT+/TN57wbu igKlQ/TEok2w6Tat9r3sJVAO7Gr8Ozh5mSkHTHlHjFT5pjC/zhxqXCt8UMiYu+Ad64n57Kz/qDwM 0vv52FmYfu66U8Foez4Tl/X2Nj6ZRSTZQhMiCc5Ghd0vMoBHyz/0PxDXcNsTIvkVD9LwUWRSAL2Z 2GTyMO3/b87NGJvzYNXHdsatREL1ZACKBv69J9LYu/PH0BpDWBunBEqR0BRLp5Ow5ISL3NG3Sb7C DuR7RvGXPsC1v9y1D+QRpqoDJRcvtZAXNICVQA== ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN NSEC3 ( 1 0 0 - brnjcmhfcq1tenfcjvms6uqo9nckuiqm A RRSIG ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260404181415 20260321172456 2503 systron.de. rUH6zQ8hS+6fVwKLOzdhmGTUwn136Ub120CpC3kYPegWyh+7+ScnZ+XfUzqN2TQCwZKXGybnmjDJ eizzdUIPe2SgUD9JvMCEXioX4G8AI36/RNnVSNvAqy/L+X4gS8RFH4sYIphGMTl/qXJ8VhTVTNS+ QaW79fSwNV1ZSpxoKiX0I6uJ7wUfrn3gAYTnwquQ0C3ZCrCksmoo8fFA61EKOFpJ/Rf3t0vTFL0X sdyuvj/ycX7NDl9ZqcgpRGhBWoXPoaI4rcPN0hixB4FN/fAsEH6PduNEqepnFy9MEHHRTqgsyyt5 WIsnK3CTi+6SUbsbMOPomMhNnOYR6BIbaX+nAQ== ) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2025101622 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260405202612 20260322192612 2503 systron.de. AgcJ/rW/dU5C4T3QIsB0NYrcRj0uI4oW77uAV5+CK4id1SwIfOAQu0mewaw1vBB8ekZpgbYfts5f iXdQ6IYIv8YInw9wN4QPz9Wl5Ut/Z4tztDpuqLdNgZoAMdIQLhxBkEnSbpXHiGU498l+v7sbOZsQ x7hzOmuRMbKY7DFZxrNCQtNsCywEVEJDF/KlVOiUjUB+8T9RIwhiQQDfO8Rxn/P4G2Cmr248k9Ml YYkAQHAUStcHqrDvdPo1cwechI5knyB6LMwqhicTxiSgbARM1QtH/rqCSV785Y2MgdZbqVSyzwAs aAJwSHbUcl5EV056Ny/08TLaJ2hubQpOEQA1EQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by systron.de zone
	Query to ns2.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 89.58.12.225
	;; Response received from [89.58.12.225] 1174 octets ;; HEADER SECTION ;; id = 45932 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260328033300 20260314024201 2503 systron.de. QU0KjuxhNYYR8mfUPVXwd3C0SU8TUwikTWjySv1brfaJZ92rJzsQe37PlU06ma4f8wpuQB5ycq3A yhrsTF8qV0YIvNyuUkabEIxESqJUVZK7c8rCmxhtscjXQUa+dZpYqHUtATZOpkvea1Unc/j5mJPz G9luvKjK9B1Q2SDrsVfaI9G9aqnxTmkbLkosc7MjsL2IdRbZfI1cLziazaZJmsFO+dMr5dX/I2ar 8xE/u3MNYINkPpdlEOEBxE9zLp4gOXglK0x37zGOgaH9szLdSSzd6LmNS3ZSK9IeqFdiS9Av47jX q0sPvNob6Ho43CgLeb91MPdosnpnni8iLfdKNQ== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260328033300 20260314024201 2503 systron.de. YigfXQVeCrTLiPCedW9tczKBXas/VWFYrE6Rm+R3FQDsud+bNpwctz2pTSbEHUiJVPCQSc4tcxpD Y0Sbr9QaCBVJCmuiyoPjx2wzTLpIwOrVqqPc/3HucWP663pEpGvvrIVFFn/+bDvLU80d2upz4jHw q19X3mrGB1YKs4SoS0VeyLRp2te8tD6iBxgjEn4wF18NcoLRT1Plw2PHmnOLE8ALPRwKf1QNQpxn 2CHptIXB72rqf4hC9YR0YqFhqpFjWGqXLaOjfPv5wsjwhhO9yB2CnJUpAfyjfUwR/d86Y6cV76ZR sAPNycViKyMzvBILElr4Z02r29QD/2vKkihozA== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260402202220 20260319194432 2503 systron.de. el1mTIvA1TaPWtO3eqqznmyxp0RbBW2kH6shZLbKhvx580gnde0SH9uzNv0xJFdpxGT+/TN57wbu igKlQ/TEok2w6Tat9r3sJVAO7Gr8Ozh5mSkHTHlHjFT5pjC/zhxqXCt8UMiYu+Ad64n57Kz/qDwM 0vv52FmYfu66U8Foez4Tl/X2Nj6ZRSTZQhMiCc5Ghd0vMoBHyz/0PxDXcNsTIvkVD9LwUWRSAL2Z 2GTyMO3/b87NGJvzYNXHdsatREL1ZACKBv69J9LYu/PH0BpDWBunBEqR0BRLp5Ow5ISL3NG3Sb7C DuR7RvGXPsC1v9y1D+QRpqoDJRcvtZAXNICVQA== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	_acme-challenge.systron.de A RR has value 109.91.140.201
	Found 1 RRSIGs over A RRset
	`_acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260328033300 20260314024201 2503 systron.de. QU0KjuxhNYYR8mfUPVXwd3C0SU8TUwikTWjySv1brfaJZ92rJzsQe37PlU06ma4f8wpuQB5ycq3A yhrsTF8qV0YIvNyuUkabEIxESqJUVZK7c8rCmxhtscjXQUa+dZpYqHUtATZOpkvea1Unc/j5mJPz G9luvKjK9B1Q2SDrsVfaI9G9aqnxTmkbLkosc7MjsL2IdRbZfI1cLziazaZJmsFO+dMr5dX/I2ar 8xE/u3MNYINkPpdlEOEBxE9zLp4gOXglK0x37zGOgaH9szLdSSzd6LmNS3ZSK9IeqFdiS9Av47jX q0sPvNob6Ho43CgLeb91MPdosnpnni8iLfdKNQ== )`
	RRSIG=2503 and DNSKEY=2503 verifies the A RRset

systron.de

	Query to ns3.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 81.7.13.30
	;; Response received from [81.7.13.30] 1174 octets ;; HEADER SECTION ;; id = 7133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260328033300 20260314024201 2503 systron.de. QU0KjuxhNYYR8mfUPVXwd3C0SU8TUwikTWjySv1brfaJZ92rJzsQe37PlU06ma4f8wpuQB5ycq3A yhrsTF8qV0YIvNyuUkabEIxESqJUVZK7c8rCmxhtscjXQUa+dZpYqHUtATZOpkvea1Unc/j5mJPz G9luvKjK9B1Q2SDrsVfaI9G9aqnxTmkbLkosc7MjsL2IdRbZfI1cLziazaZJmsFO+dMr5dX/I2ar 8xE/u3MNYINkPpdlEOEBxE9zLp4gOXglK0x37zGOgaH9szLdSSzd6LmNS3ZSK9IeqFdiS9Av47jX q0sPvNob6Ho43CgLeb91MPdosnpnni8iLfdKNQ== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260328033300 20260314024201 2503 systron.de. YigfXQVeCrTLiPCedW9tczKBXas/VWFYrE6Rm+R3FQDsud+bNpwctz2pTSbEHUiJVPCQSc4tcxpD Y0Sbr9QaCBVJCmuiyoPjx2wzTLpIwOrVqqPc/3HucWP663pEpGvvrIVFFn/+bDvLU80d2upz4jHw q19X3mrGB1YKs4SoS0VeyLRp2te8tD6iBxgjEn4wF18NcoLRT1Plw2PHmnOLE8ALPRwKf1QNQpxn 2CHptIXB72rqf4hC9YR0YqFhqpFjWGqXLaOjfPv5wsjwhhO9yB2CnJUpAfyjfUwR/d86Y6cV76ZR sAPNycViKyMzvBILElr4Z02r29QD/2vKkihozA== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260402202220 20260319194432 2503 systron.de. el1mTIvA1TaPWtO3eqqznmyxp0RbBW2kH6shZLbKhvx580gnde0SH9uzNv0xJFdpxGT+/TN57wbu igKlQ/TEok2w6Tat9r3sJVAO7Gr8Ozh5mSkHTHlHjFT5pjC/zhxqXCt8UMiYu+Ad64n57Kz/qDwM 0vv52FmYfu66U8Foez4Tl/X2Nj6ZRSTZQhMiCc5Ghd0vMoBHyz/0PxDXcNsTIvkVD9LwUWRSAL2Z 2GTyMO3/b87NGJvzYNXHdsatREL1ZACKBv69J9LYu/PH0BpDWBunBEqR0BRLp5Ow5ISL3NG3Sb7C DuR7RvGXPsC1v9y1D+QRpqoDJRcvtZAXNICVQA== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	ns3.systron.de is authoritative for _acme-challenge.systron.de
	Query to ns3.systron.de for _acme-challenge.systron.de/DNSKEY
	Received 1534 bytes from 81.7.13.30
	;; Response received from [81.7.13.30] 1534 octets ;; HEADER SECTION ;; id = 17609 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN NSEC3 ( 1 0 0 - l6ipu76dhb5m9ikg3mlg41p4b7re57f0 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY CAA ) L2NNMGJ375AOSGKHQL97GB9L134SN07D.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260328012818 20260314010136 2503 systron.de. Ognrn0OHAnc9hP+DfL+MX123Lk92c5FkFUAAhQ/B5koB1GVH/HIfVCrHlWDFnG8iYGHo0N2gqOEF suTHsD1U/SOIoJzQLv3sYbumsIw3dH6ClOLh9Jmt5JDVZaUpfG2f84EKtpFaU08UCDwAOTiwsAx0 /sZQoobdyT3Yz0Zv5Mc06UG2KCAlv6YTnmrIUNX8W+MLMg+dmfnyMA/OXym9WpDFdOFbDUFq4QM2 QFJa3zayFpOeHDh8UWYGYIo2eagkqWK6CRdBqwnjFckq4dbZK/pY+IZ+PIpvbJdRIRt392It848/ Octg4iENbbDs3fe13i3s9Kv86dKBIua3IVF3fg== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260402202220 20260319194432 2503 systron.de. el1mTIvA1TaPWtO3eqqznmyxp0RbBW2kH6shZLbKhvx580gnde0SH9uzNv0xJFdpxGT+/TN57wbu igKlQ/TEok2w6Tat9r3sJVAO7Gr8Ozh5mSkHTHlHjFT5pjC/zhxqXCt8UMiYu+Ad64n57Kz/qDwM 0vv52FmYfu66U8Foez4Tl/X2Nj6ZRSTZQhMiCc5Ghd0vMoBHyz/0PxDXcNsTIvkVD9LwUWRSAL2Z 2GTyMO3/b87NGJvzYNXHdsatREL1ZACKBv69J9LYu/PH0BpDWBunBEqR0BRLp5Ow5ISL3NG3Sb7C DuR7RvGXPsC1v9y1D+QRpqoDJRcvtZAXNICVQA== ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN NSEC3 ( 1 0 0 - brnjcmhfcq1tenfcjvms6uqo9nckuiqm A RRSIG ) BBIILC5ROJ4PQGEVV7K087AKHVNVH7AU.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260404181415 20260321172456 2503 systron.de. rUH6zQ8hS+6fVwKLOzdhmGTUwn136Ub120CpC3kYPegWyh+7+ScnZ+XfUzqN2TQCwZKXGybnmjDJ eizzdUIPe2SgUD9JvMCEXioX4G8AI36/RNnVSNvAqy/L+X4gS8RFH4sYIphGMTl/qXJ8VhTVTNS+ QaW79fSwNV1ZSpxoKiX0I6uJ7wUfrn3gAYTnwquQ0C3ZCrCksmoo8fFA61EKOFpJ/Rf3t0vTFL0X sdyuvj/ycX7NDl9ZqcgpRGhBWoXPoaI4rcPN0hixB4FN/fAsEH6PduNEqepnFy9MEHHRTqgsyyt5 WIsnK3CTi+6SUbsbMOPomMhNnOYR6BIbaX+nAQ== ) systron.de. 3600 IN SOA ( ns1.systron.de. info.systron.de. 2025101622 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) systron.de. 3600 IN RRSIG ( SOA 8 2 3600 20260405202612 20260322192612 2503 systron.de. AgcJ/rW/dU5C4T3QIsB0NYrcRj0uI4oW77uAV5+CK4id1SwIfOAQu0mewaw1vBB8ekZpgbYfts5f iXdQ6IYIv8YInw9wN4QPz9Wl5Ut/Z4tztDpuqLdNgZoAMdIQLhxBkEnSbpXHiGU498l+v7sbOZsQ x7hzOmuRMbKY7DFZxrNCQtNsCywEVEJDF/KlVOiUjUB+8T9RIwhiQQDfO8Rxn/P4G2Cmr248k9Ml YYkAQHAUStcHqrDvdPo1cwechI5knyB6LMwqhicTxiSgbARM1QtH/rqCSV785Y2MgdZbqVSyzwAs aAJwSHbUcl5EV056Ny/08TLaJ2hubQpOEQA1EQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by systron.de zone
	Query to ns3.systron.de for _acme-challenge.systron.de/A
	Received 1174 bytes from 81.7.13.30
	;; Response received from [81.7.13.30] 1174 octets ;; HEADER SECTION ;; id = 38644 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.systron.de. IN A ;; ANSWER SECTION (2 records) _acme-challenge.systron.de. 3600 IN A 109.91.140.201 _acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260328033300 20260314024201 2503 systron.de. QU0KjuxhNYYR8mfUPVXwd3C0SU8TUwikTWjySv1brfaJZ92rJzsQe37PlU06ma4f8wpuQB5ycq3A yhrsTF8qV0YIvNyuUkabEIxESqJUVZK7c8rCmxhtscjXQUa+dZpYqHUtATZOpkvea1Unc/j5mJPz G9luvKjK9B1Q2SDrsVfaI9G9aqnxTmkbLkosc7MjsL2IdRbZfI1cLziazaZJmsFO+dMr5dX/I2ar 8xE/u3MNYINkPpdlEOEBxE9zLp4gOXglK0x37zGOgaH9szLdSSzd6LmNS3ZSK9IeqFdiS9Av47jX q0sPvNob6Ho43CgLeb91MPdosnpnni8iLfdKNQ== ) ;; AUTHORITY SECTION (6 records) systron.de. 3600 IN NS ns1.systron.de. systron.de. 3600 IN NS ns2.systron.de. systron.de. 3600 IN NS ns3.systron.de. systron.de. 3600 IN RRSIG ( NS 8 2 3600 20260328033300 20260314024201 2503 systron.de. YigfXQVeCrTLiPCedW9tczKBXas/VWFYrE6Rm+R3FQDsud+bNpwctz2pTSbEHUiJVPCQSc4tcxpD Y0Sbr9QaCBVJCmuiyoPjx2wzTLpIwOrVqqPc/3HucWP663pEpGvvrIVFFn/+bDvLU80d2upz4jHw q19X3mrGB1YKs4SoS0VeyLRp2te8tD6iBxgjEn4wF18NcoLRT1Plw2PHmnOLE8ALPRwKf1QNQpxn 2CHptIXB72rqf4hC9YR0YqFhqpFjWGqXLaOjfPv5wsjwhhO9yB2CnJUpAfyjfUwR/d86Y6cV76ZR sAPNycViKyMzvBILElr4Z02r29QD/2vKkihozA== ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN NSEC3 ( 1 0 0 - 6fiibd85hltq69c6ead6v1ieqqo8ld06 CNAME RRSIG ) 44FRUT2I01HTGABUOHR5RG4JTAG39UUA.systron.de. 3600 IN RRSIG ( NSEC3 8 3 3600 20260402202220 20260319194432 2503 systron.de. el1mTIvA1TaPWtO3eqqznmyxp0RbBW2kH6shZLbKhvx580gnde0SH9uzNv0xJFdpxGT+/TN57wbu igKlQ/TEok2w6Tat9r3sJVAO7Gr8Ozh5mSkHTHlHjFT5pjC/zhxqXCt8UMiYu+Ad64n57Kz/qDwM 0vv52FmYfu66U8Foez4Tl/X2Nj6ZRSTZQhMiCc5Ghd0vMoBHyz/0PxDXcNsTIvkVD9LwUWRSAL2Z 2GTyMO3/b87NGJvzYNXHdsatREL1ZACKBv69J9LYu/PH0BpDWBunBEqR0BRLp5Ow5ISL3NG3Sb7C DuR7RvGXPsC1v9y1D+QRpqoDJRcvtZAXNICVQA== ) ;; ADDITIONAL SECTION (5 records) ns1.systron.de. 3600 IN A 109.91.140.201 ns2.systron.de. 3600 IN A 89.58.12.225 ns3.systron.de. 3600 IN A 81.7.13.30 ns1.systron.de. 3600 IN AAAA 2a02:908:c200:b51c:fc00:ff:fe00:6 ;; { "EDNS-VERSION": 0 }
	_acme-challenge.systron.de A RR has value 109.91.140.201
	Found 1 RRSIGs over A RRset
	`_acme-challenge.systron.de. 3600 IN RRSIG ( A 8 2 3600 20260328033300 20260314024201 2503 systron.de. QU0KjuxhNYYR8mfUPVXwd3C0SU8TUwikTWjySv1brfaJZ92rJzsQe37PlU06ma4f8wpuQB5ycq3A yhrsTF8qV0YIvNyuUkabEIxESqJUVZK7c8rCmxhtscjXQUa+dZpYqHUtATZOpkvea1Unc/j5mJPz G9luvKjK9B1Q2SDrsVfaI9G9aqnxTmkbLkosc7MjsL2IdRbZfI1cLziazaZJmsFO+dMr5dX/I2ar 8xE/u3MNYINkPpdlEOEBxE9zLp4gOXglK0x37zGOgaH9szLdSSzd6LmNS3ZSK9IeqFdiS9Av47jX q0sPvNob6Ho43CgLeb91MPdosnpnni8iLfdKNQ== )`
	RRSIG=2503 and DNSKEY=2503 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test _acme-challenge.systron.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: