DNSSEC Check
Check whether a zone is signed (DNSKEY/DS) and validates with a validating resolver.
About the DNSSEC Check tool
Check whether a zone is signed (DNSKEY/DS) and validates with a validating resolver.
Tip: from any lookup box on the site you can type dnssec:example.com to run this tool directly.
Results are generated live by querying the authoritative name servers of the domain, so changes you just published show up immediately. Each finding is graded as an error, warning or pass and explained so that you know what to fix and why it matters.
Monitor this automatically
Get alerted when this check starts failing, when you land on a blacklist or when a certificate or domain is about to expire.
Start free monitoring