dnssec.fail

If you can read this, then your client
is NOT doing correct DNSSEC validation.