DNSSEC Analyzer - hotmann.de

Domain Name:

Time: 2022-07-01 01:56:23 UTC, NTP stratum 16

Analyzing DNSSEC problems for hotmann.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (1141 octets) ;; HEADER SECTION ;; id = 46371 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671 . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220711000000 20220620000000 20326 . CpFdBbv0lZXwIPLDhPn959HSJfQ4vp8r97A/rN0SPFlS4fQigB3EDXz0oeg2ENRPMn6HmrZpp0vB KMKfCXf3oC/4tioT7m18+xA05quW5+h/vJaOA0Iw7zOhTpQr1hTVaUwj/d0NV9JaCqZabjtj7ClN E/+aOBaCdVSXpy3re0WUk7FianexlLd5pL09RHGlH5eRyp8hAt5HqwrUvONfm7zgkhtO8RPtJSjN R5ZB9HDrcjDHiYzkbuw300LTphtzryG/XKwnQqv6E0iL+M6d4g7h9IQWpmM1lyjVM2sgZYGDPnBb N9kgNUCiF6HUHV12LmAJteZAQI65qARGFwADYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220711000000 20220620000000 20326 . CpFdBbv0lZXwIPLDhPn959HSJfQ4vp8r97A/rN0SPFlS4fQigB3EDXz0oeg2ENRPMn6HmrZpp0vB KMKfCXf3oC/4tioT7m18+xA05quW5+h/vJaOA0Iw7zOhTpQr1hTVaUwj/d0NV9JaCqZabjtj7ClN E/+aOBaCdVSXpy3re0WUk7FianexlLd5pL09RHGlH5eRyp8hAt5HqwrUvONfm7zgkhtO8RPtJSjN R5ZB9HDrcjDHiYzkbuw300LTphtzryG/XKwnQqv6E0iL+M6d4g7h9IQWpmM1lyjVM2sgZYGDPnBb N9kgNUCiF6HUHV12LmAJteZAQI65qARGFwADYg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=47671 is now in the chain-of-trust
	DNSKEY=20826 is now in the chain-of-trust
	Query to d.root-servers.net for hotmann.de/A
	Received 744 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (744 octets) ;; HEADER SECTION ;; id = 13074 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; hotmann.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20220713170000 20220630160000 47671 . Z9jTWIpQfBzjqRwdKz3A4YKVbRDybrlmJ+1W5Fvn/BWjqv0+V3Nn45RFXsaJtL4KNfrloSpqiJST ftJQ/jT32sGj3/6mNGmie0p+xjY9OHBq06zkNvgj1QmqsFK9PCR+B8bJ88i7kcgj1xVHiv9Jz2QM PRtiMJ6vrsBh1xTvjoDLZtM26mY5fFjHp+9GKvD1HEMqksNPnJqEy6VKmDD4oPv6AnbcF/sazN0R smt0lnhNTSSKaRlsAdtbbI7J/HS7GSKkouWjNvA/cu95VgckvOneV4AqW2gYXgDVpNmadiCvhnOJ yasrOz4TXWSabNklVFX3u5ifpjhR2DzrgwbskQ== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to i.root-servers.net for de/DNSKEY
	Received 738 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (738 octets) ;; HEADER SECTION ;; id = 42290 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS n.de.net. de. 172800 IN NS z.nic.de. de. 172800 IN NS a.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS f.nic.de. de. 172800 IN NS s.de.net. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20220713170000 20220630160000 47671 . Z9jTWIpQfBzjqRwdKz3A4YKVbRDybrlmJ+1W5Fvn/BWjqv0+V3Nn45RFXsaJtL4KNfrloSpqiJST ftJQ/jT32sGj3/6mNGmie0p+xjY9OHBq06zkNvgj1QmqsFK9PCR+B8bJ88i7kcgj1xVHiv9Jz2QM PRtiMJ6vrsBh1xTvjoDLZtM26mY5fFjHp+9GKvD1HEMqksNPnJqEy6VKmDD4oPv6AnbcF/sazN0R smt0lnhNTSSKaRlsAdtbbI7J/HS7GSKkouWjNvA/cu95VgckvOneV4AqW2gYXgDVpNmadiCvhnOJ yasrOz4TXWSabNklVFX3u5ifpjhR2DzrgwbskQ== ) ;; ADDITIONAL SECTION (13 records) z.nic.de. 172800 IN A 194.246.96.1 s.de.net. 172800 IN A 195.243.137.26 n.de.net. 172800 IN A 194.146.107.6 l.de.net. 172800 IN A 77.67.63.105 f.nic.de. 172800 IN A 81.91.164.5 a.nic.de. 172800 IN A 194.0.0.53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 a.nic.de. 172800 IN AAAA 2001:678:2::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone de

	Checking DS between . and de
	Query to g.root-servers.net for de/DS
	Received 366 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (366 octets) ;; HEADER SECTION ;; id = 55396 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20220713170000 20220630160000 47671 . Z9jTWIpQfBzjqRwdKz3A4YKVbRDybrlmJ+1W5Fvn/BWjqv0+V3Nn45RFXsaJtL4KNfrloSpqiJST ftJQ/jT32sGj3/6mNGmie0p+xjY9OHBq06zkNvgj1QmqsFK9PCR+B8bJ88i7kcgj1xVHiv9Jz2QM PRtiMJ6vrsBh1xTvjoDLZtM26mY5fFjHp+9GKvD1HEMqksNPnJqEy6VKmDD4oPv6AnbcF/sazN0R smt0lnhNTSSKaRlsAdtbbI7J/HS7GSKkouWjNvA/cu95VgckvOneV4AqW2gYXgDVpNmadiCvhnOJ yasrOz4TXWSabNklVFX3u5ifpjhR2DzrgwbskQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20220713170000 20220630160000 47671 . Z9jTWIpQfBzjqRwdKz3A4YKVbRDybrlmJ+1W5Fvn/BWjqv0+V3Nn45RFXsaJtL4KNfrloSpqiJST ftJQ/jT32sGj3/6mNGmie0p+xjY9OHBq06zkNvgj1QmqsFK9PCR+B8bJ88i7kcgj1xVHiv9Jz2QM PRtiMJ6vrsBh1xTvjoDLZtM26mY5fFjHp+9GKvD1HEMqksNPnJqEy6VKmDD4oPv6AnbcF/sazN0R smt0lnhNTSSKaRlsAdtbbI7J/HS7GSKkouWjNvA/cu95VgckvOneV4AqW2gYXgDVpNmadiCvhnOJ yasrOz4TXWSabNklVFX3u5ifpjhR2DzrgwbskQ== )`
	RRSIG=47671 and DNSKEY=47671 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to f.nic.de for de/DNSKEY
	Received 745 bytes from 81.91.164.5
	;; Response received from 81.91.164.5 (745 octets) ;; HEADER SECTION ;; id = 12345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (3 records) de. 300 IN DNSKEY ( 256 3 8 AwEAAcXwt31Og6E/G2N8TQxEJtEbb3qYm8icmeG5ZkJAee01UF6ugY7g1QoQzfNVOOPXUPKgVK89 ZVAJHdOQYbiZnyNCNgV9aV2M9oipBZxMDKH9AThCEOf2/SbVuExK1xJ5czDVDF6y3lCXMmMLue0b 3S6yO9ARgGL14vuDxYKKVu17 ) ; Key ID = 42156 de. 300 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755 de. 300 IN RRSIG ( DNSKEY 8 1 300 20220713104220 20220629091220 26755 de. ZP/xTACoIIPHln3HSaJ8LOmFyPeIjxSwc2WzIfuDZ/4dvBnl9OWajdI0uTFmT82bGxf0lO0U1BnQ oBmn68ymJT3C6c5JT0qqC7DlYX4m8xFp/KDNC7mqHPtw7Q/X83ob3LL+hGX0VKhFxMMiacRH5e+I Cqh7MIIrxgI/7ZvShvrjZTxc1GihHnl73JyR0KAdrMeAVZwy6vxMy18Gvl6jRWNUh5XyYstdf3fw g2wPEpIbFjwBFsWddywfudFK0w40ZRLJp9NlAeUVM2x5dPHLZQw2DAFEkx7mJxjdlH5id22nPiVn VwR46JNLRO5LzoJy3KPmHG7WfI53aG0Yi+KQOA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for de
	`de. 300 IN DNSKEY ( 256 3 8 AwEAAcXwt31Og6E/G2N8TQxEJtEbb3qYm8icmeG5ZkJAee01UF6ugY7g1QoQzfNVOOPXUPKgVK89 ZVAJHdOQYbiZnyNCNgV9aV2M9oipBZxMDKH9AThCEOf2/SbVuExK1xJ5czDVDF6y3lCXMmMLue0b 3S6yO9ARgGL14vuDxYKKVu17 ) ; Key ID = 42156`
	`de. 300 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 300 IN RRSIG ( DNSKEY 8 1 300 20220713104220 20220629091220 26755 de. ZP/xTACoIIPHln3HSaJ8LOmFyPeIjxSwc2WzIfuDZ/4dvBnl9OWajdI0uTFmT82bGxf0lO0U1BnQ oBmn68ymJT3C6c5JT0qqC7DlYX4m8xFp/KDNC7mqHPtw7Q/X83ob3LL+hGX0VKhFxMMiacRH5e+I Cqh7MIIrxgI/7ZvShvrjZTxc1GihHnl73JyR0KAdrMeAVZwy6vxMy18Gvl6jRWNUh5XyYstdf3fw g2wPEpIbFjwBFsWddywfudFK0w40ZRLJp9NlAeUVM2x5dPHLZQw2DAFEkx7mJxjdlH5id22nPiVn VwR46JNLRO5LzoJy3KPmHG7WfI53aG0Yi+KQOA== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=42156 is now in the chain-of-trust
	Query to l.de.net for hotmann.de/A
	Received 304 bytes from 77.67.63.105
	;; Response received from 77.67.63.105 (304 octets) ;; HEADER SECTION ;; id = 11116 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; hotmann.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) hotmann.de. 86400 IN NS rita.ns.cloudflare.com. hotmann.de. 86400 IN NS theo.ns.cloudflare.com. hotmann.de. 86400 IN DS ( 2371 13 2 1cf8ddff87b351eff3f9889482fa433510f40a23ff18c908126f99caf910763d ) hotmann.de. 86400 IN RRSIG ( DS 8 2 86400 20220713114234 20220629101234 42156 de. oxbQdCN9Oj6rsj28qpODvK4/mZMMy/zuQmoKR+knmF4LVJcvZrvDLUhniSM309dbHVqVDU090yKq XnZggGCDl4syIxpr4CN4YHBkOoYOIWYM8fdRd1x3v5w1zZjFunbIQCh7syfOGscofv5SvLQBOSI0 9+7JiXKJiDW6sQQGS2I= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to f.nic.de for hotmann.de/DNSKEY
	Received 304 bytes from 81.91.164.5
	;; Response received from 81.91.164.5 (304 octets) ;; HEADER SECTION ;; id = 21987 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; hotmann.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) hotmann.de. 86400 IN NS rita.ns.cloudflare.com. hotmann.de. 86400 IN NS theo.ns.cloudflare.com. hotmann.de. 86400 IN DS ( 2371 13 2 1cf8ddff87b351eff3f9889482fa433510f40a23ff18c908126f99caf910763d ) hotmann.de. 86400 IN RRSIG ( DS 8 2 86400 20220713114234 20220629101234 42156 de. oxbQdCN9Oj6rsj28qpODvK4/mZMMy/zuQmoKR+knmF4LVJcvZrvDLUhniSM309dbHVqVDU090yKq XnZggGCDl4syIxpr4CN4YHBkOoYOIWYM8fdRd1x3v5w1zZjFunbIQCh7syfOGscofv5SvLQBOSI0 9+7JiXKJiDW6sQQGS2I= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone hotmann.de

hotmann.de

	Checking DS between de and hotmann.de
	Query to z.nic.de for hotmann.de/DS
	Received 249 bytes from 194.246.96.1
	;; Response received from 194.246.96.1 (249 octets) ;; HEADER SECTION ;; id = 50182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; hotmann.de. IN DS ;; ANSWER SECTION (2 records) hotmann.de. 86400 IN DS ( 2371 13 2 1cf8ddff87b351eff3f9889482fa433510f40a23ff18c908126f99caf910763d ) hotmann.de. 86400 IN RRSIG ( DS 8 2 86400 20220713114234 20220629101234 42156 de. oxbQdCN9Oj6rsj28qpODvK4/mZMMy/zuQmoKR+knmF4LVJcvZrvDLUhniSM309dbHVqVDU090yKq XnZggGCDl4syIxpr4CN4YHBkOoYOIWYM8fdRd1x3v5w1zZjFunbIQCh7syfOGscofv5SvLQBOSI0 9+7JiXKJiDW6sQQGS2I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 1 DS records for hotmann.de in the de zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`hotmann.de. 86400 IN RRSIG ( DS 8 2 86400 20220713114234 20220629101234 42156 de. oxbQdCN9Oj6rsj28qpODvK4/mZMMy/zuQmoKR+knmF4LVJcvZrvDLUhniSM309dbHVqVDU090yKq XnZggGCDl4syIxpr4CN4YHBkOoYOIWYM8fdRd1x3v5w1zZjFunbIQCh7syfOGscofv5SvLQBOSI0 9+7JiXKJiDW6sQQGS2I= )`
	RRSIG=42156 and DNSKEY=42156 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`hotmann.de. 86400 IN DS ( 2371 13 2 1cf8ddff87b351eff3f9889482fa433510f40a23ff18c908126f99caf910763d )`
	Query to rita.ns.cloudflare.com for hotmann.de/DNSKEY
	Received 305 bytes from 172.64.32.140
	;; Response received from 172.64.32.140 (305 octets) ;; HEADER SECTION ;; id = 10174 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hotmann.de. IN DNSKEY ;; ANSWER SECTION (3 records) hotmann.de. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 hotmann.de. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 hotmann.de. 3600 IN RRSIG ( DNSKEY 13 2 3600 20220816033830 20220616033830 2371 hotmann.de. fjrItdA61YS6viAIY/5C3/mCwNgrJakFY9sf1RsUqJoJGMpPfAyuIWprmlLLyn0CKn8hPXji4dU5 ms7DZyzz4Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for hotmann.de
	`hotmann.de. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`hotmann.de. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`hotmann.de. 3600 IN RRSIG ( DNSKEY 13 2 3600 20220816033830 20220616033830 2371 hotmann.de. fjrItdA61YS6viAIY/5C3/mCwNgrJakFY9sf1RsUqJoJGMpPfAyuIWprmlLLyn0CKn8hPXji4dU5 ms7DZyzz4Q== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to theo.ns.cloudflare.com for hotmann.de/A
	Received 177 bytes from 108.162.193.144
	;; Response received from 108.162.193.144 (177 octets) ;; HEADER SECTION ;; id = 49876 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hotmann.de. IN A ;; ANSWER SECTION (3 records) hotmann.de. 300 IN A 104.18.21.149 hotmann.de. 300 IN A 104.18.20.149 hotmann.de. 300 IN RRSIG ( A 13 2 300 20220702025624 20220630005624 34505 hotmann.de. 2KrvwC1o/yZh3vEml+v4X8yKsIz/oQbYLQDj642B8iutOSAHX8nytus9WZs3YhxmKZ4oiHEpSk+o n3YhIyeRhA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	theo.ns.cloudflare.com is authoritative for hotmann.de
	Found RRSIG signed by hotmann.de zone
	Query to rita.ns.cloudflare.com for hotmann.de/SOA
	Received 207 bytes from 173.245.58.140
	;; Response received from 173.245.58.140 (207 octets) ;; HEADER SECTION ;; id = 48308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hotmann.de. IN SOA ;; ANSWER SECTION (2 records) hotmann.de. 3600 IN SOA ( rita.ns.cloudflare.com. dns.cloudflare.com. 2281703740 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) hotmann.de. 3600 IN RRSIG ( SOA 13 2 3600 20220702025624 20220630005624 34505 hotmann.de. 0/CNuKfYvf0FDNio6b/dG+cgGoQU04IL7BEm6kwxZ6G3crqWRuzZXnHpYdnhwv8/rp/qiaDr5WPR 0zyJGrDatQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to theo.ns.cloudflare.com for hotmann.de/A
	Received 177 bytes from 173.245.59.144
	;; Response received from 173.245.59.144 (177 octets) ;; HEADER SECTION ;; id = 5935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hotmann.de. IN A ;; ANSWER SECTION (3 records) hotmann.de. 300 IN A 104.18.20.149 hotmann.de. 300 IN A 104.18.21.149 hotmann.de. 300 IN RRSIG ( A 13 2 300 20220702025624 20220630005624 34505 hotmann.de. 4ul4p7Kvk+siLs93pTj8rrM1PbHe2BQneLcgz7KSWIcdqqWts2fsAPVuvufkQ26H9lX81hNJQFOM Fh5jLitz/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	hotmann.de A RR has value 104.18.20.149
	hotmann.de A RR has value 104.18.21.149
	Found 1 RRSIGs over A RRset
	`hotmann.de. 300 IN RRSIG ( A 13 2 300 20220702025624 20220630005624 34505 hotmann.de. 4ul4p7Kvk+siLs93pTj8rrM1PbHe2BQneLcgz7KSWIcdqqWts2fsAPVuvufkQ26H9lX81hNJQFOM Fh5jLitz/Q== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

hotmann.de

	Query to rita.ns.cloudflare.com for hotmann.de/A
	Received 177 bytes from 108.162.192.140
	;; Response received from 108.162.192.140 (177 octets) ;; HEADER SECTION ;; id = 24914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hotmann.de. IN A ;; ANSWER SECTION (3 records) hotmann.de. 300 IN A 104.18.20.149 hotmann.de. 300 IN A 104.18.21.149 hotmann.de. 300 IN RRSIG ( A 13 2 300 20220702025624 20220630005624 34505 hotmann.de. OzUs/LrvwSnB3hanvm7Qu7G3lsJRORVIUFJQUrTbXP5w1MiNSMHJgibhEKPWUGyf+LJqQ5yZ/Wdl jSivYyKF9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	rita.ns.cloudflare.com is authoritative for hotmann.de
	Found RRSIG signed by hotmann.de zone
	Query to rita.ns.cloudflare.com for hotmann.de/A
	Received 177 bytes from 172.64.32.140
	;; Response received from 172.64.32.140 (177 octets) ;; HEADER SECTION ;; id = 307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hotmann.de. IN A ;; ANSWER SECTION (3 records) hotmann.de. 300 IN A 104.18.21.149 hotmann.de. 300 IN A 104.18.20.149 hotmann.de. 300 IN RRSIG ( A 13 2 300 20220702025624 20220630005624 34505 hotmann.de. /2Kprakqs3+uEkPNF2KxaYB/q4q0ByB4XkX2zf8z1gXjcM4TA2sUYm2EXpDeiT8OFQxniTEZ27zI LfmrotjqXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	hotmann.de A RR has value 104.18.21.149
	hotmann.de A RR has value 104.18.20.149
	Found 1 RRSIGs over A RRset
	`hotmann.de. 300 IN RRSIG ( A 13 2 300 20220702025624 20220630005624 34505 hotmann.de. /2Kprakqs3+uEkPNF2KxaYB/q4q0ByB4XkX2zf8z1gXjcM4TA2sUYm2EXpDeiT8OFQxniTEZ27zI LfmrotjqXQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test hotmann.de at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: