DNSSEC Checker
DNSSEC checker
DNSSEC signs your zone so a resolver can tell your answers from someone else's. It has two halves — keys in the zone, and a DS record at the registrar pointing at them — and the interesting failures all come from the halves disagreeing.