Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2026-02-22 23:45:01 UTC

Analyzing DNSSEC problems for dnssec-analyzer.verisignlabs.com

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
com
Found 1 DS records for com in the . zone
DS=19718/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
Found 2 DNSKEY records for com
DS=19718/SHA-256 verifies DNSKEY=19718/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
verisignlabs.com
Found 1 DS records for verisignlabs.com in the com zone
DS=57947/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=35511 and DNSKEY=35511 verifies the DS RRset
Found 3 DNSKEY records for verisignlabs.com
DS=57947/SHA-256 verifies DNSKEY=57947/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=57947 and DNSKEY=57947/SEP verifies the DNSKEY RRset
av4.nstld.com is authoritative for dnssec-analyzer.verisignlabs.com
dnssec-analyzer.verisignlabs.com is a CNAME to dnssec-analyzer-verisignlabs.gslb-bw.verisign.com
Found 2 RRSIGs over CNAME RRset
RRSIG=60630 and DNSKEY=60630 verifies the CNAME RRset
com
verisign.com
Found 1 DS records for verisign.com in the com zone
DS=55204/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=35511 and DNSKEY=35511 verifies the DS RRset
Found 3 DNSKEY records for verisign.com
DS=55204/SHA-256 verifies DNSKEY=55204/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=55204 and DNSKEY=55204/SEP verifies the DNSKEY RRset
gslb-bw.verisign.com
Found 1 DS records for gslb-bw.verisign.com in the verisign.com zone
DS=44545/SHA-256 has algorithm RSASHA256
Found 2 RRSIGs over DS RRset
RRSIG=47095 and DNSKEY=47095 verifies the DS RRset
Found 2 DNSKEY records for gslb-bw.verisign.com
DS=44545/SHA-256 verifies DNSKEY=44545/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=33606 and DNSKEY=33606 verifies the DNSKEY RRset
gslb.ilg1.verisign.com is authoritative for dnssec-analyzer-verisignlabs.gslb-bw.verisign.com
dnssec-analyzer-verisignlabs.gslb-bw.verisign.com A RR has value 209.131.158.42
Found 1 RRSIGs over A RRset
RRSIG=33606 and DNSKEY=33606 verifies the A RRset
gslb-bw.verisign.com
gslb.ash3.verisign.com is authoritative for dnssec-analyzer-verisignlabs.gslb-bw.verisign.com
dnssec-analyzer-verisignlabs.gslb-bw.verisign.com A RR has value 209.131.158.42
Found 1 RRSIGs over A RRset
RRSIG=33606 and DNSKEY=33606 verifies the A RRset
gslb-bw.verisign.com
gslb.brn1.verisign.com is authoritative for dnssec-analyzer-verisignlabs.gslb-bw.verisign.com
dnssec-analyzer-verisignlabs.gslb-bw.verisign.com A RR has value 209.131.161.48
Found 1 RRSIGs over A RRset
RRSIG=33606 and DNSKEY=33606 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dnssec-analyzer.verisignlabs.com at dnsviz.net.

DNSSEC Debugger

↓ Advanced options