Sponsor Star on GitHub

Loading DNSSEC chain

Created with love by Felix Wotschofsky

Free Tools

DNS Lookup Global DNS Lookup DNSSEC Lookup WHOIS Lookup Certificate Logs Subdomains Finder

Source on GitHub Powered by Vercel

DNSSEC Lookup for www.shell.com - Domain Digger

Results forwww.shell.com

Registrar

Creation Date

DNSSEC

DNS
DNS Map
DNSSEC
Whois
Certs
Subdomains

Chain intact

www.shell.com is not a zone of its own; it is covered by shell.com.

This view checks DS digest links and DNSKEY signatures.

.

Intact

DNSKEYs

8763 RSASHA256 · ZSK
20326 RSASHA256 · KSK
38696 RSASHA256 · KSK

Signature: Valid until 2026-11-11

IANA trust anchor

20326SHA-256Matched
E06D44B80B8F1D39…C7F8EC8D
38696SHA-256Matched
683D2D0ACB8C9B71…C0FB2B16

com

Intact

DNSKEYs

65344 ECDSAP256SHA256 · ZSK
19718 ECDSAP256SHA256 · KSK

Signature: Valid until 2026-11-08

Parent DS

19718SHA-256Matched
8ACBB0CD28F41250…71D7805A

shell.com

Intact

DNSKEYs

59155 RSASHA256 · KSK
1108 RSASHA256 · ZSK
11449 RSASHA256 · ZSK
25716 RSASHA256 · ZSK
43612 RSASHA256 · KSK

Signature: Valid until 2026-10-30

Parent DS

59155SHA-256Matched
FA7F62F351B1CFBF…F8559462
21682SHA-256No match
0577BE699302C222…57739C33

Signatures over DS records and the queried name’s own records are not verified yet, so a forged DS or record is not detected.