ajax.aspnetcdn.com | DNSViz

ajax.aspnetcdn.com

Updated: 2022-11-15 09:19:14 UTC (738 days ago) Update now

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Ignore RFC 8624:
|?| Ignore RFC 9276:
|?| Multi-signer:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Insecure (4)

ajax.aspnetcdn.com/CNAME
cs22.wpc.v0cdn.net/A
mscomajax.vo.msecnd.net/CNAME
msecnd.net/SOA

Secure (4)

com/SOA
com/SOA
net/SOA
net/SOA

DNSKEY/DS/NSEC status

Secure (11)

./DNSKEY (alg 8, id 18733)
./DNSKEY (alg 8, id 20326)
NSEC3 proving non-existence of aspnetcdn.com/DS
NSEC3 proving non-existence of msecnd.net/DS
NSEC3 proving non-existence of v0cdn.net/DS
com/DNSKEY (alg 8, id 30909)
com/DNSKEY (alg 8, id 53929)
com/DS (alg 8, id 30909)
net/DNSKEY (alg 8, id 35886)
net/DNSKEY (alg 8, id 57635)
net/DS (alg 8, id 35886)

Delegation status

Insecure (4)

com to aspnetcdn.com
msecnd.net to vo.msecnd.net
net to msecnd.net
net to v0cdn.net

Secure (2)

. to com
. to net

Notices

Warnings (2)

msecnd.net to vo.msecnd.net: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the msecnd.net zone): ns3.vo.msecnd.net, ns2.vo.msecnd.net, ns1.vo.msecnd.net, ns4.vo.msecnd.net See RFC 1034, Sec. 4.2.2.
msecnd.net to vo.msecnd.net: The following NS name(s) were found in the delegation NS RRset (i.e., in the msecnd.net zone), but not in the authoritative NS RRset: ns1.edgecastdns.net, ns2.edgecastdns.net, ns3.edgecastdns.net, ns4.edgecastdns.net See RFC 1034, Sec. 4.2.2.

DNSKEY legend

Full legend

	SEP bit set
	Revoke bit set
	Trust anchor

See also

DNSSEC Debugger by Verisign Labs.

Download: png | svg

Warning

JavaScript is required to make the graph below interactive.

DNSSEC authentication graph