How this tool works
DNS tools validate the input name, query the relevant record type, and present normalized answers instead of raw resolver output. This helps compare records after DNS changes, hosting moves, or service onboarding.
DNS Records
DNSSEC Checker
Check DS, DNSKEY, and RRSIG through DNS-over-HTTPS with the DO flag enabled.
What is DNSSEC Checker for?
Checks DS, DNSKEY, and RRSIG records to confirm whether a domain exposes DNSSEC validation data. The output is organized for quick review, copying, and cross-checking with nearby tools in the DNS Records group.
Part of this tool group
Open nearby tools in the same group to cross-check, inspect deeper, or complete a small workflow.
Open DNS Records hubFrequently asked questions
When should I use DNSSEC Checker?
Checks DS, DNSKEY, and RRSIG records to confirm whether a domain exposes DNSSEC validation data. Use it when you need a quick, readable result before cross-checking with production data or related tools in the DNS Records group.
Should I verify the result before applying changes?
Yes. Treat the output as an operational aid: review the source input, compare it with authoritative systems, and test changes in the correct environment before rollout.
