Why does my government PDF show a yellow question mark?

Indian government PDFs are digitally signed using certificates from NIC, eMudhra, or other CCA India licensed authorities. Adobe Acrobat and most PDF viewers don't include India's Root Certifying Authority (RCAI) in their default trusted certificate store. So even though the signature is completely valid and legally recognised under the Information Technology Act 2000, your PDF viewer shows a yellow question mark because it cannot automatically verify the issuer. Kagazo checks your PDF against the actual CCA India trust hierarchy and gives you a copy with a permanent green tick visible on any device.

Is my document safe? Do you store my PDF?

Your PDF is processed entirely in memory during verification. We never write your file to disk, never store it on our servers, and never share it with any third party. The file is deleted from memory immediately after verification is complete. You can also verify this by checking our open source backend code.

Which documents does Kagazo support?

Kagazo supports any PDF digitally signed under India's CCA certificate hierarchy. This includes e-Aadhaar, PAN card, DigiLocker documents, ITR-V, Form 16, and all state government certificates from Tamil Nadu e-District, AP and Telangana MeeSeva, Karnataka Nadakacheri and eJanma, Kerala Sevana portal, and more.

My Aadhaar PDF is password protected. Will it work?

Yes. Enter your Aadhaar password (first four letters of your name in capital letters followed by your birth year, for example RAMA1995) in the password field that appears after you upload your e-Aadhaar PDF. We decrypt it in memory, verify the signature, and return a verified copy.

What is the difference between "Signature Valid" and "Signature Unknown"?

Signature Valid means the document is genuinely issued by the government authority and has not been modified. Signature Unknown means your PDF viewer cannot verify the certificate chain — this is a viewer configuration issue, not a problem with your document. Signature Invalid means the document may have been tampered with or re-saved after signing.

Does this work on mobile?

Yes. Kagazo is fully mobile responsive and works on any Android or iOS browser. No app installation required. Simply open kagazo.in on your phone browser, upload your PDF and verify instantly.

Authoritative DNS Resolution • Cloudflare 1.1.1.1 DoH

DNS Record Lookup & Zone Inspector

Query authoritative DNS root servers instantly. Inspect A, AAAA, MX, TXT, NS, SOA, and CAA records with live TTL values, JSON exports, and BIND zone formats.

DNS over HTTPS (DoH) Low-Latency Resolution All Standard Record Types

Quick samples:

DNS Records Table

0 records found

No records found for this domain.

Understanding Key DNS Record Types

The Domain Name System acts as the Internet’s phonebook. Here is a breakdown of why each record type matters:

A & AAAA Records

Point your domain to IPv4 (32-bit, e.g. 192.0.2.1) and IPv6 (128-bit, e.g. 2001:db8::1) web hosting server IP addresses.

MX (Mail Exchanger) Records

Direct incoming emails to designated mail servers (e.g. Google Workspace, ProtonMail, Microsoft 365) with priority metrics.

TXT Records (SPF & DKIM)

Contain arbitrary text data critical for domain ownership verification, anti-spoofing SPF records, and DKIM cryptographic keys.

CAA (Certificate Authority Authorization)

Specifies which Certificate Authorities (like Let’s Encrypt or DigiCert) are allowed to issue SSL/TLS certificates for the domain.

Frequently Asked Questions

What is a DNS Lookup and how does it work?

A DNS (Domain Name System) lookup queries authoritative nameservers to translate human-friendly domain names (e.g. example.com) into machine-readable IP addresses and routing configurations, such as mail exchangers (MX) and verification tokens (TXT).

What types of DNS records can I inspect?

Kagazo inspects all primary DNS record types: A (IPv4), AAAA (IPv6), CNAME (Canonical Name Aliases), MX (Mail Exchangers with priority), TXT (SPF, DKIM, site verification tokens), NS (Authoritative Name Servers), SOA (Start of Authority), and CAA (Certificate Authority Authorization).

What is TTL in DNS records?

TTL (Time to Live) is a numerical value in seconds that indicates how long resolvers and caching servers (like ISPs or public DNS providers) should cache the DNS record before requesting a fresh copy from the authoritative nameserver.

Why are my updated DNS records not showing immediately?

When you update DNS records at your registrar or hosting provider, previous records remain cached in intermediate resolvers worldwide until their TTL countdown expires. This propagation period usually takes between 5 minutes and 48 hours.