Website

The front page of pki.goog
Captured
Answer
200 OKin 93 ms
Title
Google Trust Services | Home
Server
sffe
Protocols
HTTP/2, HTTP/3
Certificate
Google Trust Services (WE2) for *.pki.goog and pki.goog, valid until
www
Redirects to https://pki.goog/ (301)

DNS records

NameTypeValueTTL
pki.googA5 min
pki.googAAAA5 min
pki.googMX10 min
pki.googNS6 hours
pki.googTXT
  • google-site-verification=bldSOD4em6X-G7MCd9EJUqkBhBcN0Ch9eVi4l-rhHU8
  • v=spf1 -all
5 min
pki.googSOA1 hour
pki.googCAA
  • 0 issue "pki.goog"
1 day
www.pki.googCNAME1 hour
www.pki.googA5 min
www.pki.googAAAA5 min
_dmarc.pki.googTXT
  • v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com
5 min

As ns3.zdns.google answers them

Reputation

Domain blocklists

  • Spamhaus DBL Not listed
  • SURBL Not listed
  • URIBL Not listed

Rankings

179 Tranco rank up from 232 on 2026-09-14
6.95Open PageRank, out of 10
15,661Open PageRank position
157Referring domains

From Tranco and Open PageRank

RDAP

From https://pubapi.registry.google/rdap/domain/pki.goog

Show the RDAP record
{
  "rdapConformance": [
    "rdap_level_0",
    "icann_rdap_response_profile_1",
    "icann_rdap_technical_implementation_guide_1"
  ],
  "objectClassName": "domain",
  "entities": [
    {
      "objectClassName": "entity",
      "entities": [
        {
          "objectClassName": "entity",
          "roles": [
            "abuse"
          ],
          "status": [
            "active"
          ],
          "vcardArray": [
            "vcard",
            [
              [
                "version",
                {},
                "text",
                "4.0"
              ],
              [
                "fn",
                {},
                "text",
                "Prudence Malinki"
              ],
              [
                "tel",
                {
                  "type": [
                    "voice"
                  ]
                },
                "uri",
                "tel:+1.2083895740"
              ],
              [
                "email",
                {},
                "text",
                "registryescalations@markmonitor.com"
              ]
            ]
          ]
        }
      ],
      "handle": "292",
      "links": [
        {
          "href": "https://pubapi.registry.google/rdap/entity/292",
          "rel": "self",
          "type": "application/rdap+json",
          "value": "https://pubapi.registry.google/rdap/domain/pki.goog"
        },
        {
          "href": "http://www.markmonitor.com",
          "rel": "about",
          "type": "text/html",
          "value": "https://rdap.markmonitor.com/rdap/"
        }
      ],
      "publicIds": [
        {
          "identifier": "292",
          "type": "IANA Registrar ID"
        }
      ],
      "remarks": [
        {
          "description": [
            "Summary data only. For complete data, send a specific query for the object."
          ],
          "title": "Incomplete Data",
          "type": "object truncated due to unexplainable reasons"
        }
      ],
      "roles": [
        "registrar"
      ],
      "vcardArray": [
        "vcard",
        [
          [
            "version",
            {},
            "text",
            "4.0"
          ],
          [
            "fn",
            {},
            "text",
            "MarkMonitor Inc."
          ]
        ]
      ]
    }
  ],
  "events": [
    {
      "eventAction": "registration",
      "eventActor": "CharlestonRoad",
      "eventDate": "2016-06-13T13:23:05.631Z"
    },
    {
      "eventAction": "expiration",
      "eventDate": "2027-06-13T13:23:05.631Z"
    },
    {
      "eventAction": "last update of RDAP database",
      "eventDate": "2026-10-24T10:41:11.803Z"
    },
    {
      "eventAction": "last changed",
      "eventDate": "2026-05-17T10:33:36.858Z"
    }
  ],
  "handle": "2749311D1-GOOG",
  "ldhName": "pki.goog",
  "links": [
    {
      "href": "https://pubapi.registry.google/rdap/domain/pki.goog",
      "rel": "self",
      "type": "application/rdap+json",
      "value": "https://pubapi.registry.google/rdap/domain/pki.goog"
    },
    {
      "href": "https://rdap.markmonitor.com/rdap/domain/pki.goog",
      "rel": "related",
      "type": "application/rdap+json",
      "value": "https://pubapi.registry.google/rdap/domain/pki.goog"
    }
  ],
  "nameservers": [
    {
      "objectClassName": "nameserver",
      "handle": "77C811_GOOGLE-GOOGLE",
      "ldhName": "ns1.zdns.google",
      "links": [
        {
          "href": "https://pubapi.registry.google/rdap/nameserver/ns1.zdns.google",
          "rel": "self",
          "type": "application/rdap+json",
          "value": "https://pubapi.registry.google/rdap/domain/pki.goog"
        }
      ],
      "remarks": [
        {
          "description": [
            "Summary data only. For complete data, send a specific query for the object."
          ],
          "title": "Incomplete Data",
          "type": "object truncated due to unexplainable reasons"
        }
      ]
    },
    {
      "objectClassName": "nameserver",
      "handle": "1B2921_GOOGLE-GOOGLE",
      "ldhName": "ns2.zdns.google",
      "links": [
        {
          "href": "https://pubapi.registry.google/rdap/nameserver/ns2.zdns.google",
          "rel": "self",
          "type": "application/rdap+json",
          "value": "https://pubapi.registry.google/rdap/domain/pki.goog"
        }
      ],
      "remarks": [
        {
          "description": [
            "Summary data only. For complete data, send a specific query for the object."
          ],
          "title": "Incomplete Data",
          "type": "object truncated due to unexplainable reasons"
        }
      ]
    },
    {
      "objectClassName": "nameserver",
      "handle": "585931_GOOGLE-GOOGLE",
      "ldhName": "ns3.zdns.google",
      "links": [
        {
          "href": "https://pubapi.registry.google/rdap/nameserver/ns3.zdns.google",
          "rel": "self",
          "type": "application/rdap+json",
          "value": "https://pubapi.registry.google/rdap/domain/pki.goog"
        }
      ],
      "remarks": [
        {
          "description": [
            "Summary data only. For complete data, send a specific query for the object."
          ],
          "title": "Incomplete Data",
          "type": "object truncated due to unexplainable reasons"
        }
      ]
    },
    {
      "objectClassName": "nameserver",
      "handle": "4853A2_GOOGLE-GOOGLE",
      "ldhName": "ns4.zdns.google",
      "links": [
        {
          "href": "https://pubapi.registry.google/rdap/nameserver/ns4.zdns.google",
          "rel": "self",
          "type": "application/rdap+json",
          "value": "https://pubapi.registry.google/rdap/domain/pki.goog"
        }
      ],
      "remarks": [
        {
          "description": [
            "Summary data only. For complete data, send a specific query for the object."
          ],
          "title": "Incomplete Data",
          "type": "object truncated due to unexplainable reasons"
        }
      ]
    }
  ],
  "secureDNS": {
    "delegationSigned": true,
    "dsData": [
      {
        "algorithm": 8,
        "digest": "03F0BA36C7A85539F4CA1549DC062BD1CBC217B499023D492258EC2C1753F98D",
        "digestType": 2,
        "keyTag": 19801
      }
    ],
    "zoneSigned": true
  },
  "status": [
    "client delete prohibited",
    "client transfer prohibited",
    "client update prohibited",
    "server delete prohibited",
    "server transfer prohibited",
    "server update prohibited"
  ],
  "notices": [
    {
      "description": [
        "By querying our Domain Database as part of the RDAP pilot program (RDAP Domain Database), you are agreeing to comply with these terms and acknowledging that your information will be used in accordance with Charleston Road Registry's Privacy Policy (https://www.registry.google/about/privacy.html), so please read the terms and Privacy Policy carefully.",
        "Any information provided is 'as is' without any guarantee of accuracy.",
        "Please do not misuse the RDAP Domain Database. It is intended solely for query-based access on an experimental basis and should not be used for or relied upon for any other purpose.",
        "Don't use the RDAP Domain Database to allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations.",
        "Don't access our RDAP Domain Database through the use of high volume, automated electronic processes that send queries or data to the systems of Charleston Road Registry or any ICANN-accredited registrar.",
        "You may only use the information contained in the RDAP Domain Database for lawful purposes.",
        "Do not compile, repackage, disseminate, or otherwise use the information contained in the RDAP Domain Database in its entirety, or in any substantial portion, without our prior written permission.",
        "We may retain certain details about queries to our RDAP Domain Database for the purposes of detecting and preventing misuse.",
        "We reserve the right to restrict or deny your access to the RDAP Domain Database if we suspect that you have failed to comply with these terms.",
        "We reserve the right to modify or discontinue our participation in the RDAP pilot program and suspend or terminate access to the RDAP Domain Database at any time and for any reason in our sole discretion.",
        "Reminder that underlying Registrant data may be requested via ICANN's RDRS service (https://rdrs.icann.org/).",
        "We reserve the right to modify this agreement at any time.",
        ""
      ],
      "links": [
        {
          "href": "https://pubapi.registry.google/rdap/help/tos",
          "rel": "self",
          "type": "application/rdap+json",
          "value": "https://pubapi.registry.google/rdap/domain/pki.goog"
        },
        {
          "href": "https://www.registry.google/policies/rdap-terms/",
          "rel": "terms-of-service",
          "type": "text/html",
          "value": "https://pubapi.registry.google/rdap/domain/pki.goog"
        }
      ],
      "title": "RDAP Terms of Service"
    },
    {
      "description": [
        "For more information on domain status codes, please visit https://icann.org/epp"
      ],
      "links": [
        {
          "href": "https://icann.org/epp",
          "rel": "glossary",
          "type": "text/html",
          "value": "https://pubapi.registry.google/rdap/domain/pki.goog"
        }
      ],
      "title": "Status Codes"
    },
    {
      "description": [
        "URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"
      ],
      "links": [
        {
          "href": "https://icann.org/wicf",
          "rel": "help",
          "type": "text/html",
          "value": "https://pubapi.registry.google/rdap/domain/pki.goog"
        }
      ],
      "title": "RDDS Inaccuracy Complaint Form"
    }
  ]
}

DNSSEC

Every link from the root to pki.goog verifies.

. Verified

  • Found 3 DNSKEY records for .
  • DS=20326/SHA-256 verifies DNSKEY=20326/SEP
  • DS=38696/SHA-256 verifies DNSKEY=38696/SEP
  • Found 1 RRSIGs over DNSKEY RRset
  • RRSIG=38696 and DNSKEY=38696/SEP verifies the DNSKEY RRset

goog Verified

  • Found 1 DS records for goog in the . zone
  • DS=8029/SHA-256 has algorithm RSASHA256
  • Found 1 RRSIGs over DS RRset
  • RRSIG=8763 and DNSKEY=8763 verifies the DS RRset
  • Found 2 DNSKEY records for goog
  • DS=8029/SHA-256 verifies DNSKEY=8029/SEP
  • Found 1 RRSIGs over DNSKEY RRset
  • RRSIG=8029 and DNSKEY=8029/SEP verifies the DNSKEY RRset

pki.goog Verified

  • Found 1 DS records for pki.goog in the goog zone
  • DS=19801/SHA-256 has algorithm RSASHA256
  • Found 1 RRSIGs over DS RRset
  • RRSIG=7438 and DNSKEY=7438 verifies the DS RRset
  • Found 2 DNSKEY records for pki.goog
  • DS=19801/SHA-256 verifies DNSKEY=19801/SEP
  • Found 1 RRSIGs over DNSKEY RRset
  • RRSIG=19801 and DNSKEY=19801/SEP verifies the DNSKEY RRset
  • Found 1 RRSIGs over SOA RRset
  • RRSIG=62200 and DNSKEY=62200 verifies the SOA RRset