NSEC3 proving non-existence of cafebazaar.cloud/DS
cloud/DNSKEY (alg 8, id 2538)
cloud/DNSKEY (alg 8, id 49804)
cloud/DS (alg 8, id 49804)
cloud/DS (alg 8, id 49804)
com/DNSKEY (alg 8, id 30909)
com/DNSKEY (alg 8, id 38535)
com/DS (alg 8, id 30909)
Non_existent (1)
activity.basalam.com/DNSKEY (alg 13, id 63298)
Delegation status
Insecure (3)
cafebazaar.cloud to cdn.cafebazaar.cloud
cloud to cafebazaar.cloud
com to basalam.com
Secure (2)
. to cloud
. to com
Notices
Errors (1)
RRSIG activity.basalam.com/CNAME alg 13, id 63298: The Signer's Name field of the RRSIG RR (activity.basalam.com) does not match the name of the zone containing the RRset (basalam.com).
Warnings (4)
cloud/DS (alg 8, id 49804): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
cloud/DS (alg 8, id 49804): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
cloud/DS (alg 8, id 49804): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
cloud/DS (alg 8, id 49804): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.