Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2019-04-20 11:06:30 UTC, NTP stratum 4

Analyzing DNSSEC problems for estada.ch

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
ch
Found 1 DS records for ch in the . zone
DS=11896/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
Found 3 DNSKEY records for ch
DS=11896/SHA-256 verifies DNSKEY=11896/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=11896 and DNSKEY=11896/SEP verifies the DNSKEY RRset
estada.ch
Found 2 DS records for estada.ch in the ch zone
DS=22891/SHA-256 has algorithm RSASHA256
DS=4735/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=2668 and DNSKEY=2668 verifies the DS RRset
Found 2 DNSKEY records for estada.ch
DS=4735/SHA-256 verifies DNSKEY=4735/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=4735 and DNSKEY=4735/SEP verifies the DNSKEY RRset
ns1.estada.ch serial (2019020243) differs from ns0.estada.ch serial (2019020214)
estada.ch A RR has value 185.194.239.73
Found 1 RRSIGs over A RRset
None of the 1 RRSIG and 2 DNSKEY records validate the A RRset
The A RRset was not signed by any keys in the chain-of-trust

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test estada.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options