Move your mouse over any 
or 
symbols for remediation hints.
Want a second opinion? Test nic.de at dnsviz.net.
Paste a DS or DNSKEY record into the field above to use a Trust Anchor that is not published in the DNS. Validation will begin at the owner name of the DS/DNSKEY record.
You may also supply alternative starting name servers, separated by whitespace or commas. The given name servers must be authoritative for the same zone as the Trust Anchor.