IPv4 Addresses

TTL

IPv6 Addresses

TTL

Mail Servers

TTL

Certificate Authority Authorization

TTL
0 issue digicert.com ; cansignhttpexchanges=yes
5m
0 issue pki.goog ; cansignhttpexchanges=yes
5m
5m
5m
0 issuewild digicert.com ; cansignhttpexchanges=yes
5m
0 issuewild pki.goog ; cansignhttpexchanges=yes
5m
0 issuewild ssl.com
5m

DMARC

TTL
DMARC Policy

Organizational policy (p): how receivers treat mail that fails aligned DMARC checks — none (monitor only), quarantine (often junk), or reject (block).

none quarantine reject
5m
DMARC Percentage

pct: share of mail that gets quarantine/reject; 100 = all failing messages (default).

100
DMARC RUA

Aggregate DMARC reports (ZIP/XML). Optional but recommended for visibility.

DMARC RUF

Forensic (per-failure) reports. Often omitted for privacy or volume.

DNSSEC Next Secure

TTL
NSEC
.entrust.com.cdn.cloudflare.net ["TYPE65", "TYPE64", "TYPE61", "TYPE55", "TYPE53", "TYPE52", "NSEC", "RRSIG", "TYPE44", "TYPE37", "TYPE35", "SRV", "TYPE29", "AAAA", "TXT", "MX", "TYPE13", "A", "CAA", "TYPE256"]
20m