`amazontrust.com`

	DNSSEC	⚠️ Not signed
	A	3.162.163.7^{🇺🇸 Amazon3.162.160.0/22}
	A	3.162.163.54^{🇺🇸 Amazon3.162.160.0/22}
	A	3.162.163.65^{🇺🇸 Amazon3.162.160.0/22}
	A	3.162.163.73^{🇺🇸 Amazon3.162.160.0/22}
	NS	`ns-612.awsdns-12.net` ⭐
	NS	`ns-1249.awsdns-28.org`
	NS	`ns-1794.awsdns-32.co.uk`
	NS	`ns-419.awsdns-52.com`
	MX	`inbound-smtp.us-east-1.amazonaws.com` ⭐
	TXT	`v=spf1 -all`
	SOA	`ns-612.awsdns-12.net`awsdns-hostmaster@amazon.com serial=1

rank #541001 globally
rank #235237 in the tld
📈 Tranco rank: #435

Amazon Trust Services

amazontrust.com is the official domain for Amazon Trust Services, a certificate authority operated by Amazon Web Services (AWS). It serves as the public repository and information hub for AWS's SSL/TLS certificate authority operations, providing trusted digital certificates for securing web communications.

Services

SSL/TLS Certificates — Issues publicly trusted certificates through AWS Certificate Manager (ACM)
Certificate Authority — Operates root and intermediate CAs trusted by major browsers and operating systems
Certificate Repository — Hosts certificate policies, practices, and revocation information

Infrastructure

The domain runs entirely on AWS infrastructure:

Hosting: Amazon CloudFront CDN (4 edge IPs in 13.249.182.x range)
Nameservers: AWS Route 53 (ns-612, ns-419, ns-1249, ns-1794.awsdns)
Mail: AWS SES inbound (inbound-smtp.us-east-1.amazonaws.com)
SPF: Strict policy (v=spf1 -all) — domain does not send email
DNSSEC: Not enabled

Amazon Trust Services certificates are widely trusted and commonly used by AWS customers for securing websites, APIs, and other services hosted on AWS.

Subdomains

crl.rootca2.amazontrust.com

crt.rootca2.amazontrust.com

ocsp.rootca2.amazontrust.com

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, j.gtld-servers.net, h.gtld-servers.net, d.gtld-servers.net...	-
amazontrust.com	ns-612.awsdns-12.net, ns-419.awsdns-52.com, ns-1794.awsdns-32.co.uk, ns-1249.awsdns-28.org	2 records

✅ Authoritative Response

Server:205.251.199.2

NS records: ns-612.awsdns-12.net, ns-419.awsdns-52.com, ns-1794.awsdns-32.co.uk, ns-1249.awsdns-28.org

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for amazontrust.com (unsigned zone)

⏱️ Timing

Total: 255ms | Queries: -

📄 Records

Type	Count	Sample Data

📌 Glue Records Collected

Total: 2

Out-of-bailiwick: 2 (ns-419.awsdns-52.com, ns-419.awsdns-52.com)

rootca2.amazontrust.com - robtex.com