charente-maritime.fr
!Passed with warnings
31 passed
1 warning
0 failed
3 info
Registration
info.fr country-code · GANDI · expires 2027-03-20
Found
- TLD
- .fr (country-code)
- ICANN policies apply
- no
- Registrar
- GANDI
- Registered
- 23 March 2004
- Last changed
- 8 July 2026
- Expires
- 20 March 2027
- Status
- client transfer prohibited
- Registry nameservers
- ns-104-c.gandi.net, ns-11-b.gandi.net, ns-111-a.gandi.net, z.dns.gandi.net
- RDAP server
- https://rdap.nic.fr/
Checks
-
i#1.fr is a country-code TLD (ccTLD)
-
✓ TLD delegated and signed #2
-
✓ Expires on 2027-03-20 #3
-
✓ Transfer locked #4
-
✓ Registry and delegation match #5
Delegation
infons-104-c.gandi.net, ns-11-b.gandi.net, ns-111-a.gandi.net, z.dns.gandi.net
Found
- Parent zone
- fr
- Delegation from
- d.nic.fr (194.0.9.1)
- NS at the parent
- ns-104-c.gandi.net, ns-11-b.gandi.net, ns-111-a.gandi.net, z.dns.gandi.net
- NS in the zone
- ns-104-c.gandi.net, ns-11-b.gandi.net, ns-111-a.gandi.net, z.dns.gandi.net
| Nameserver | Addresses | Network (AS) | Glue |
|---|---|---|---|
| ns-104-c.gandi.net | 217.70.187.105 2604:3400:aaac::69 | AS29169 GANDI-AS - GANDI SAS, FR AS209453 GANDI-LIVEDNS - GANDI SAS, FR | - |
| ns-11-b.gandi.net | 213.167.230.12 2001:4b98:aaab::c | AS29169 GANDI-AS - GANDI SAS, FR AS209453 GANDI-LIVEDNS - GANDI SAS, FR | - |
| ns-111-a.gandi.net | 173.246.100.112 2001:4b98:aaaa::70 | AS29169 GANDI-AS - GANDI SAS, FR AS209453 GANDI-LIVEDNS - GANDI SAS, FR | - |
| z.dns.gandi.net | 162.159.24.51 162.159.25.250 2400:cb00:2049:1::a29f:19fa 2400:cb00:2049:1::a29f:1833 | AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US | - |
Checks
-
✓ 4 nameservers #6
-
✓ Parent and zone agree #7
-
✓ No glue needed #8
-
✓ All names resolve #9
-
✓ Nameservers in different networks #10
-
✓ 3 autonomous systems #11
-
i#12All nameserver names under .net
-
✓ All reachable over IPv6 #13
Nameservers
warn10 of 10 addresses answer authoritatively
Found
| Nameserver | Answer | Recursion | TCP / EDNS | AXFR | Version |
|---|---|---|---|---|---|
| ns-104-c.gandi.net 217.70.187.105 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | - |
| ns-104-c.gandi.net 2604:3400:aaac::69 | NOERROR, 7 ms, authoritative | no | yes / yes | refused | - |
| ns-11-b.gandi.net 213.167.230.12 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | - |
| ns-11-b.gandi.net 2001:4b98:aaab::c | NOERROR, 6 ms, authoritative | no | yes / yes | refused | - |
| ns-111-a.gandi.net 173.246.100.112 | NOERROR, 3 ms, authoritative | no | yes / yes | refused | - |
| ns-111-a.gandi.net 2001:4b98:aaaa::70 | NOERROR, 4 ms, authoritative | no | yes / yes | refused | - |
| z.dns.gandi.net 162.159.24.51 | NOERROR, 16 ms, authoritative | no | yes / yes | refused | 2026.10.8 |
| z.dns.gandi.net 162.159.25.250 | NOERROR, 16 ms, authoritative | no | yes / yes | refused | 2026.10.8 |
| z.dns.gandi.net 2400:cb00:2049:1::a29f:19fa | NOERROR, 16 ms, authoritative | no | yes / yes | refused | 2026.10.8 |
| z.dns.gandi.net 2400:cb00:2049:1::a29f:1833 | NOERROR, 17 ms, authoritative | no | yes / yes | refused | 2026.10.8 |
Checks
-
✓ All respond #14
-
✓ All authoritative #15
-
✓ No recursion #16
-
!#17Software version disclosed
-
✓ Zone transfers refused #18
-
✓ TCP supported #19
-
✓ EDNS supported #20
-
✓ Public addresses #21
SOA
infoserial 1792627200 · primary ns1.gandi.net
Found
- Primary (MNAME)
- ns1.gandi.net
- Contact (RNAME)
- hostmaster.gandi.net
- Serial
- 1792627200
- Refresh / retry
- 10800 s / 3600 s
- Expire
- 604800 s
- Negative TTL
- 10800 s
Serial per nameserver
| Nameserver | Serial |
|---|---|
| ns-104-c.gandi.net (217.70.187.105) | 1792627200 |
| ns-104-c.gandi.net (2604:3400:aaac::69) | 1792627200 |
| ns-11-b.gandi.net (213.167.230.12) | 1792627200 |
| ns-11-b.gandi.net (2001:4b98:aaab::c) | 1792627200 |
| ns-111-a.gandi.net (173.246.100.112) | 1792627200 |
| ns-111-a.gandi.net (2001:4b98:aaaa::70) | 1792627200 |
| z.dns.gandi.net (162.159.24.51) | 1792627200 |
| z.dns.gandi.net (162.159.25.250) | 1792627200 |
| z.dns.gandi.net (2400:cb00:2049:1::a29f:19fa) | 1792627200 |
| z.dns.gandi.net (2400:cb00:2049:1::a29f:1833) | 1792627200 |
Checks
-
✓ Serial 1792627200 everywhere #22
-
✓ Timers within recommendations #23
-
i#24Hidden master
-
✓ Contact hostmaster@gandi.net #25
-
✓ Timestamp serial #26
DNSSEC
passSigned, DS published at parent
Found
- Validated by resolver
- yes
- Denial of existence
- NSEC3
- NSEC3
- 0 iterations, 0-byte salt
- Signatures valid until
- 5 November 2026
DS at the parent
| Key tag | Algorithm | Digest | Matches a key |
|---|---|---|---|
| 18512 | ECDSAP256SHA256 (13) | SHA256 79F80BDB46AFFD55… | yes |
DNSKEY in the zone
| Key tag | Role | Algorithm |
|---|---|---|
| 18512 | ZSK (256) | ECDSAP256SHA256 (13) |
Checks
-
✓ Signed and validated #27
-
✓ DS matches a key #28
-
✓ Modern algorithms #29
-
✓ Signatures valid until 2026-11-05 #30
-
✓ NSEC3 as recommended #31
Records
pass31 records at the apex
Found
- Read from
- 217.70.187.105:53
| Type | Value | TTL |
|---|---|---|
| SOA | ns1.gandi.net. hostmaster.gandi.net. 1792627200 10800 3600 604800 10800 | 10800 |
| NS | ns-104-c.gandi.net. | 10800 |
| NS | z.dns.gandi.net. | 10800 |
| NS | ns-11-b.gandi.net. | 10800 |
| NS | ns-111-a.gandi.net. | 10800 |
| A | 90.83.107.39 | 300 |
| MX | 1 charentemaritime-fr02b.mail.protection.outlook.com. | 86400 |
| TXT | "hqyjwygkh95rrwyfl49fxz2bdhlsxjhj" | 300 |
| TXT | "v=spf1 include:spf.protection.outlook.com include:spf.charente-maritime.fr -all" | 300 |
| TXT | "_htxsq0da035m8ffu22xlluczzzlezf5" | 300 |
| TXT | "myantiriade=0962e000a07c475cae9e0bb334675dfd" | 300 |
| TXT | "_zn5luyus15omvu6b7bq4ye2bwfgesa1" | 300 |
| TXT | "autodesk-domain-verification=rYeEafpclwV5HyyJ4bWR" | 300 |
| TXT | "_9a8xu6slppj00cbw0li91eztl917n4c" | 300 |
| CAA | 0 issue "digicert.com" | 10800 |
| CAA | 0 issue "thawte.com" | 10800 |
| CAA | 0 iodef "mailto:admin@charente-maritime.fr" | 10800 |
| CAA | 0 issue "rapidssl.com" | 10800 |
| CAA | 0 issue "intermediatecertificate.digitalcertvalidation.com" | 10800 |
| CAA | 0 issue "1and1.digitalcertvalidation.com" | 10800 |
| CAA | 0 issue "trust-provider.com" | 10800 |
| CAA | 0 issue "sectigo.com" | 10800 |
| CAA | 0 issue "stratossl.digitalcertvalidation.com" | 10800 |
| CAA | 0 issue "usertrust.com" | 10800 |
| CAA | 0 issue "symantec.com" | 10800 |
| CAA | 0 issue "geotrust.com" | 10800 |
| CAA | 0 issue "harica.gr" | 10800 |
| CAA | 0 issue "certigna.fr" | 10800 |
| CAA | 0 issue "digitalcertvalidation.com" | 10800 |
| CAA | 0 issue "volusion.digitalcertvalidation.com" | 10800 |
| CAA | 0 issue "globalsign.com" | 10800 |
Checks
-
✓ TTLs within range #32
-
✓ No CNAME at the apex #33
-
✓ No wildcard #34
-
✓ CAA restricts issuance #35