{"domain":"example.com","signed":true,"valid":true,"chain":[{"domain":"example.com.","algorithm":13,"digestType":0,"digest":"","flags":{"value":256,"zoneKey":true,"secureEntryPoint":false,"revoked":false},"protocol":3,"publicKey":"kxipjoIbNZDsWqEKaYaGq6fM/XThrRp1ue6AV9R/n3eWxpGCeCWJb47PEEEj/Q6VAYFW/7UFo5mXoZfxKYZa3A==","algorithmName":"ECDSA Curve P-256 with SHA-256"},{"domain":"example.com.","algorithm":13,"digestType":0,"digest":"","flags":{"value":256,"zoneKey":true,"secureEntryPoint":false,"revoked":false},"protocol":3,"publicKey":"oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA==","algorithmName":"ECDSA Curve P-256 with SHA-256"},{"domain":"example.com.","algorithm":13,"digestType":0,"digest":"","flags":{"value":257,"zoneKey":true,"secureEntryPoint":true,"revoked":false},"protocol":3,"publicKey":"mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==","algorithmName":"ECDSA Curve P-256 with SHA-256"},{"domain":"example.com.","algorithm":13,"digestType":0,"digest":"","flags":{"value":256,"zoneKey":true,"secureEntryPoint":false,"revoked":false},"protocol":3,"publicKey":"MjyZielP0GqniI1+j+wAG/3t0ImDDIlj1CxR0oobkZQHSKH2Fqx6tm2NcYu57POJ83SzCWLkqIjZHS1mh5wbaw==","algorithmName":"ECDSA Curve P-256 with SHA-256"},{"domain":"example.com.","algorithm":13,"digestType":2,"digest":"C988EC423E3880EB8DD8A46FE06CA230EE23F35B578D64E78B29C3E1C83D245A","algorithmName":"ECDSA Curve P-256 with SHA-256","digestTypeName":"SHA-256"}],"errors":[],"validationState":"secure","validationMethod":"local-delv","chainValidated":true,"validatorEvidence":[{"validator":"BIND delv","resolver":"1.1.1.1","state":"secure","localCryptographicValidation":true},{"validator":"Google Public DNS","resolver":"https://dns.google/resolve","state":"secure","localCryptographicValidation":false,"ad":true,"dnsStatus":0},{"validator":"Cloudflare 1.1.1.1","resolver":"https://cloudflare-dns.com/dns-query","state":"insecure","localCryptographicValidation":false,"ad":false,"dnsStatus":0}],"nsec3param":{"exists":false,"hashAlgorithm":0,"flags":0,"iterations":0,"salt":"-","rfc9276Compliant":false,"issues":[{"message":"No NSEC3 records found — domain may use NSEC or is not DNSSEC-signed","severity":"info","rfc":"RFC 5155"}]},"rrsig":{"exists":true,"records":[{"typeCovered":"A","algorithm":13,"labels":2,"originalTTL":300,"expiration":"2026-10-06T05:41:36.000Z","inception":"2026-10-04T03:41:36.000Z","keyTag":34505,"signerName":"example.com","daysUntilExpiry":1,"isExpired":false,"isNotYetValid":false}],"algorithmSecurity":"modern","issues":[{"message":"RRSIG for A expires in 1 day(s) — short-lived, normal for auto-managed DNSSEC (e.g. Cloudflare)","severity":"info"}]}}