Domain extension

.cx

Country code · Christmas Island · Christmas Island Domain Administration Limited

.cx
🔒 Signed (DS in the root)
Category
Country code
IANA type
Country Code
Country
Christmas Island
Manager
Christmas Island Domain Administration Limited
Script
Latin
DS in root
1 record(s)
Algorithm
8 · RSASHA256
Second-level
1 suffixes
IDN names
no IDN tables at IANA
WHOIS
whois.nic.cx
RDAP
yes

Checked 26 Oct 2026 by our weekly check.

Is a .cx name registered?

Looked up from your browser in the registry's RDAP service; if that does not answer, in DNS. Nothing is stored on dnssec.in.

What this means

The root zone holds a DS record for .cx, so the extension is signed and anchored. A domain under .cx can use DNSSEC with a full chain of trust: it needs to be signed at its DNS host and have its own DS at the registrar. .cx is the country code for Christmas Island; its registry sets who can register.

Second-level suffixes under .cx (1)

You can register names directly under .cx or under these suffixes, for example example.gov.cx. Some are restricted to certain users (government, education, banks). Source: the Public Suffix List.

  • .gov.cx

IDN names under .cx

No IDN tables for .cx at IANA: names are usually ASCII only (a–z, 0–9 and hyphen).

Length

DNS limits are the same everywhere: each label is 1 to 63 characters, the whole name at most 253, letters, digits and hyphens, not starting or ending with a hyphen. IDN labels count their xn-- form, so fewer native characters fit. A registry can set a higher minimum (often 2 or 3 characters) or reserve short names: that is in its own policy.

WHOIS and RDAP

RDAP (the JSON successor to WHOIS) answers at https://rdap.nic.cx/. Classic WHOIS (port 43) answers at whois.nic.cx.

Lifecycle and drop

Country code extensions set their own lifecycle: grace periods, redemption and release dates differ from country to country and are not covered by ICANN's gTLD policies. Read the registry's rules: https://cxda.org.cx.

More: Country code

All domain extensions →

Learn DNSSEC