DNS Tools

DNS Lookup ready Query DNS records (A, AAAA, CNAME, MX, PTR, NS, TXT, SOA). Bulk Lookup ready Look up A, MX, and NS records for many domains at once. DNS Traversal ready Trace a lookup from the root servers down to the authoritative nameservers. DNSSEC ready Validate the DNSSEC chain of trust for a domain. Email Auth ready Look up and parse SPF, DKIM, and DMARC records. WHOIS ready Domain and IP registration details. Ping ready Measure round-trip time to a host. Traceroute ready Show the network path packets take to a host. MTR ready Combined traceroute + ping, per-hop loss and latency. PTR Sweep ready Reverse DNS lookups across an IP range (CIDR /24 or smaller). Blacklist Check ready Check an IP against common DNS blacklists (RBLs). HTTP Headers ready Fetch a URL and show status, redirects, and response headers. Port Scan ready Check whether specific TCP ports are open on a host. SSL Checker ready Inspect a live certificate: expiry, issuer, subject, SANs. Bulk SSL Checker ready Check certificate expiry for many hosts at once. SSL & CSR Decoder ready Decode a PEM certificate or CSR and show every field. CSR Generator ready Generate a new private key and Certificate Signing Request. SSL Converter ready Convert certificates between PEM, DER, and PKCS#7 formats. RSA Key Converter ready Convert RSA keys between PEM, DER, and PKCS#8 formats. Key Matcher ready Check whether a cert, CSR, and private key belong together. CA Matcher ready Identify the issuing CA and show its known root/intermediates. CT Log Search ready Search Certificate Transparency logs for a domain (via crt.sh). OCSP Checker ready Check a certificate's revocation status via OCSP. OpenSSL Trace ready Verbose handshake trace of a live TLS connection. Alt DCV Checker ready Check DNS TXT / HTTP file domain-control-validation tokens.