Certificates

Afnic supports secured communication via SSL (Secure Sockets Layer). Here is the list of necessary certificates as well as the zone signing keys (DNSSEC) for the ccTLDs we operate :

Certificates

Zone signing keys (DNSSEC)

Algorithm

• KSK:
  • Size 2048 bits
  • Algorithm RSA/SHA2 (256)
  • Lifetime 2 years
• ZSK:
  • Size 1024 bits
  • Algorithm RSA/SHA2 (256)
  • Lifetime 3 months

Denial of existence signature:

• NSEC3 + opt-out :
  • Salt 32 bits
  • 2 iterations

Signature lifetime: 2 months

TTL: 2 days

fr

KSK in progress

fr. 172800 IN DNSKEY 257 3 8 AwEAAYz/bZVFyefKTiBBFW/aJcWX3IWHc8iI7Wi01mcZNHGC+w5EszmtHcsK/ggIu+V7lnJlHcamTNstxnSl4DAzN2Mgzux7sqd7Jlqa+BtRoI9MO3l2yi+qE6WIViUS0U3atm+l1SQsAgkyXlYBN52Up1jsVZ+FNt+kKGKzvIMo8/qM3mCYxkLhazj+q4Bg7bH+yNhHOaZ5KAiFO++8wZJK2rwrh2Yd5LP+smStJoij42sYALLA9WPdeiSaoxpbjmpYBUQAoDUYdqLnRWOnQds0O1EO5h1PXGSIt9feZpwNbPzTfHL80q2SI1A7qRzfZ6BzA2jZU4BLCv2YhKCcWo3kfbU=

pm

KSK in progress

pm. 172800 IN DNSKEY 257 3 8 AwEAAd8wbkPI7Gp8ppA3KeIEa4QTUvKePdiDzyJ8TWbUTITqwhiC6/Pl iRI4xtCbeYU282di0k9BkSmHa8CglAZ8RZfujBUmXUYbaoTc1UEAWAso RWdeniLxPkzt3rdcA6mnUP2IZADzB+nO2WPtd75sHYKSsUkNkNI9ilXT R/0LwKjuRLlt1wQXYUnIdcf9xttPpiSwKkJ+o9TTOSM5i4tqd69d9I3/ eTg9wHy7v/zEEQxwM/hEFSfQY4UCX7kt0d0zkXXfMEf8lbuLa3tzgPBh m25q5jJGr2q9m6zlfOhZHb+yYGBrWdSMXYmOx0xB2zgwyr42aY85Z2T6 IS6brrJlU8c=

re

KSK in progress

re. 172800 IN DNSKEY 257 3 8 AwEAAajCmbZgQHhdh2O2CNV4akXVEraLgnTRWeK4HxIxDGlP7stUIip5E8ND08TCFea6JcHklmR6mShrTYEMmVAAB5+qFBDbTSKzpUdYHWnTl+4QyxX5WG3OWRXseaaKBnFw44fnRLCiUCnBmUK0Hdy71nWgQfY/378YSFpCAiRbNOX38LSHDVR+eZFjIw3mdL4i0JqVZL8bEwaaFEivw2Oavfeuy+wCg1VcTxLP5+YS9wLbeNvF4G0SzF/qZ8YOPQIywA6MwDjHSWF9eL0iceVBBlDpiGZp20QodzP2Pe3g4VRBmObUGEu1n4e1TEomytTfxAe7xpmsK9dmYpYXRB4edhk=

tf

KSK in progress

tf. 172800 IN DNSKEY  257 3 8 AwEAAdztV8QQzRW+Ba3Oyb8dWJvMOLLgHko0P9nhIPr1nSpFz9sH9kDx25Bu3UYBzNzZraKOwhDhOsbCXtipXQnkRPslL/jTpE9TDEr2oRq49S0zMtfp83IoeIp2Mftloso4y9TkGKsIMx7EbJghKjPQbg0aiLTrLay7BCbMHXfhZIIR7wRrf3zMZkM1SowDXDNc0l3Eqo66whTMrC908b8OwWHYGwlhLpmYsSBm4uS0BWN51ADAty/1XzxtsRgsRmUt18HqzmYF0csDMtEpNOoDn3Bolvb0w7G9ec/aLI7k4kdNErS9/SNBYHL0ATrK872RwCjBsldjTeKVxmEchBTjxns=

yt

KSK in progress

yt. 172800 IN DNSKEY  257 3 8 AwEAAYeVz2JeaNdQ464sAvF3x9g+88rsiZIB6GBK6kgeGE54SR4Zmsr4hUBqdHUgnrCZgJYwx72Bo0RlIiUDVY0/jc+DB8RZOhandC8cQ8GvVuOdmzPuNj1yxWFpLc81Gh0/hWM2rXcpj6f8IZAwDsyxufOksiNF2jo53DA61IXw7beIC6nM6jzuNXkJK+BuJL4MHVnAAH+Tpix4hXZ7MfbSzjDYOsx2Obh7szKCHZmUUODuA/WxJacCqCYjPvWeHoOeXOLNTHzi2EqOpekfMPDwMX4fMOtT4JmEtrtPmLjYrl+5qj8G33GrTsWb30Si8vWu2nRU2W8fsPC5wYQbMvjzShE=

wf

KSK in progress

wf. 172800 IN DNSKEY 257 3 8 AwEAAZoHyG/1LMw7ru1jf0mVRLp/jp6UQYlf6JAGZssk3V1s45ymRkLJDkdNAgDNl77qZAwGQhppIRjgQPtsRS2dx7q3PgrLImS27WglOUeSeMoR+V62+37T/YRt0O3icOWr+befzwX6GrsXtX+jGcnEVJze69iKfXFemNsln0XVsFB7qdtdqiqPvt8P2iaMduCV/m18IGE87DwrelR7eH/3cPjIvJE4JVEf/Uh11qoeu2q3i5TJWQxrdmP3kJswi+TJ+vYyBXV5Riq13me5ushJwVJqDXIz1+4j0A2SQJ+cI+qXZmGIrJ4A0YkNNX+H5rbYPgYvzl7CSW9TgaVVFO82Yo0= ;{id = 47327 (ksk), size = 2048b}