RRSIG xfinity.com/A alg 5, id 56700: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG xfinity.com/AAAA alg 5, id 56700: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG xfinity.com/DNSKEY alg 5, id 56700: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG xfinity.com/DNSKEY alg 5, id 56700: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG xfinity.com/DNSKEY alg 5, id 60208: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG xfinity.com/DNSKEY alg 5, id 60208: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG xfinity.com/MX alg 5, id 56700: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG xfinity.com/NS alg 5, id 56700: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG xfinity.com/SOA alg 5, id 56700: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG xfinity.com/TXT alg 5, id 56700: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
xfinity.com/DS (alg 5, id 60208): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
xfinity.com/DS (alg 5, id 60208): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
xfinity.com/DS (alg 5, id 60208): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
xfinity.com/DS (alg 5, id 60208): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.