Check the DNSSEC chain of trust for any domain

Follow DS digest links and DNSKEY signatures from the IANA root anchors to the name you enter. This is not full DNSSEC validation.

Sponsored by

Scicomm Media23M GmbH
Felix Wotschofsky, creator of Domain Digger

Hey there, I am Felix, the creator of Domain Digger. 👋

You can follow me on X and check out my other projects.

Domain Digger has been a great help in improving our email deliverability. It's made checking our domain settings straightforward, providing detailed information that was easy to understand and use. I'd recommend it to anyone looking to optimize their domain performance.
Photo of Anouar Springer

Anouar Springer

Growth @ Superchat

As a software engineering lecturer, I use Domain Digger in my classes to help students understand how the internet works. The different interactive elements and maps help visualize various concepts and provide a fun way for students to learn about DNS interactively.
Photo of Samuel Boguslawski

Samuel Boguslawski

Lecturer @ CODE University

This resource is GOLD for Programmers and DevOps.
A tool that gives you all the info about a domain.

DNS, WHOIS, IPs, Subdomains, certificates and more!
Photo of Miguel Ángel Durán

Miguel Ángel Durán

Content Creator

About this DNSSEC lookup

A parent zone publishes a DS digest for a child zone’s DNSKEY, and that key signs the child’s DNSKEY set. This lookup checks both from the IANA root anchors down to the queried name and shows where the chain stops. It does not yet check signatures over DS records or other records.