Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2026-07-19 02:53:19 UTC

Analyzing DNSSEC problems for s.sb

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
DS=38696/SHA-256 verifies DNSKEY=38696/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
sb
Found 1 DS records for sb in the . zone
DS=17635/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
Found 2 DNSKEY records for sb
DS=17635/SHA-256 verifies DNSKEY=17635/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=17635 and DNSKEY=17635/SEP verifies the DNSKEY RRset
pch.nic.sb returns SERVFAIL for s.sb/DNSKEY
s.sb
Found 1 DS records for s.sb in the sb zone
DS=41043/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=19728 and DNSKEY=19728 verifies the DS RRset
Found 2 DNSKEY records for s.sb
DS=41043/SHA-256 verifies DNSKEY=41043/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=41043 and DNSKEY=41043/SEP verifies the DNSKEY RRset
ns1.cctld.com is authoritative for s.sb
s.sb A RR has value 104.21.14.203
Found 1 RRSIGs over A RRset
RRSIG=29852 and DNSKEY=29852 verifies the A RRset
s.sb
ns2.cctld.com is authoritative for s.sb
s.sb A RR has value 104.21.14.203
Found 1 RRSIGs over A RRset
RRSIG=29852 and DNSKEY=29852 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test s.sb at dnsviz.net.

DNSSEC Debugger

↓ Advanced options