17
records
IPv4 Addresses
TTL
cacert.org. 1200 IN A 213.154.225.245
IPv6 Addresses
TTL
20m
cacert.org. 1200 IN AAAA 2001:7B8:3:9C:0:0:0:245
Name Servers
TTL
NS
—
20m
NS
—
20m
NS
—
20m
NS
—
20m
NS
—
20m
cacert.org. 1200 IN NS ns1.cacert.org. cacert.org. 1200 IN NS ns2.cacert.org. cacert.org. 1200 IN NS ns3.cacert.org. cacert.org. 1200 IN NS ns4.cacert.org. cacert.org. 1200 IN NS ns5.cacert.org.
SOA Details
TTL
20m
SOA
Responsible
hostmaster.cacert.org
SOA
Serial
2026050701
SOA
Times
Refresh
4h
Retry
1h
Expire
7d
Minimum TTL
12h
cacert.org. 1200 IN SOA ns1.cacert.org. hostmaster.cacert.org. 2026050701 14400 3600 604800 43200
Certificate Authority Authorization
TTL
20m
20m
20m
20m
cacert.org. 1200 IN CAA 0 iodef "mailto:[email protected]" cacert.org. 1200 IN CAA 0 issue "cacert.org" cacert.org. 1200 IN CAA 0 issue "letsencrypt.org" cacert.org. 1200 IN CAA 0 issuewild "cacert.org"
DMARC
TTL
No DMARC TXT record was returned (expected at `_dmarc.<domain>` with `v=DMARC1`). Without DMARC you cannot publish receiver policy or standard aggregate failure reports (RUA).
DKIM
TTL
No DKIM TXT with `v=DKIM1` was returned for the selector names we probe automatically.
SPF (Sender Policy Framework)
TTL
SPF
SPFv1
| Qualifier | Mechanism | Target / value | Valid | Details |
|---|---|---|---|---|
| + Pass | a |
—
|
|
|
| + Pass | mx |
—
|
|
|
| + Pass | a |
|
||
| + Pass | a |
|
||
| + Pass | a |
|
||
| + Pass | a |
|
||
| + Pass | ip4 |
|
||
| + Pass | ip6 |
|
||
| + Pass | ip6 |
|
||
| - Fail | all |
—
|
|
20m
cacert.org. 1200 IN TXT "v=spf1 a mx a:emailout.cacert.org a:secure.cacert.org a:www1.cacert.org a:ping.cacert.org ip4:213.154.225.230 ip6:2001:7b8:616:162:1::10 ip6:2001:7b8:616:28:50::11 -all"
MTA-STS
TTL
This hostname does not publish an MTA-STS policy (no v=STSv1 TXT at _mta-sts.<name> and/or no policy at https://mta-sts.<name>/.well-known/mta-sts.txt).
DNSSEC Public Keys
TTL
DNSKEY
257 3 13 igIPEataGlUeOEOs5cVsgd/gUwLmJeBuE6X6lAhzUpIf/EleyFs8sNpqmPiDGWYmrLRr4NHPYSgb2asVMSBKSg==
20m
cacert.org. 1200 IN DNSKEY 257 3 13 igIPEataGlUeOEOs5cVsgd/gUwLmJeBuE6X6lAhzUpIf/EleyFs8sNpqmPiDGWYmrLRr4NHPYSgb2asVMSBKSg==
Delegation Signer
TTL
DS
53924 13 2 37AD123A1AB869C22139659C52D3DE1E60A466E8E09B369D77842CA7ABB8CA85
20m
cacert.org. 1200 IN DS 53924 13 2 37AD123A1AB869C22139659C52D3DE1E60A466E8E09B369D77842CA7ABB8CA85
DNSSEC Next Secure
TTL
NSEC
_certs.g1._fp.cacert.org ["DNSKEY", "NSEC", "RRSIG", "AAAA", "TXT", "MX", "SOA", "NS", "A", "CAA"]
20m
cacert.org. 1200 IN NSEC _certs.g1._fp.cacert.org ["DNSKEY", "NSEC", "RRSIG", "AAAA", "TXT", "MX", "SOA", "NS", "A", "CAA"]