ianawww.vip.icann.org
Updated:
2023-06-22 13:24:20 UTC (565 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Secure (2)
- ianawww.vip.icann.org/A
- ianawww.vip.icann.org/AAAA
DNSKEY/DS/NSEC status
Secure (16)
- ./DNSKEY (alg 8, id 11019)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 60955)
- icann.org/DNSKEY (alg 7, id 18060)
- icann.org/DNSKEY (alg 7, id 42420)
- icann.org/DNSKEY (alg 7, id 63048)
- icann.org/DS (alg 7, id 17248)
- icann.org/DS (alg 7, id 18060)
- icann.org/DS (alg 7, id 23584)
- org/DNSKEY (alg 8, id 26974)
- org/DNSKEY (alg 8, id 33369)
- org/DNSKEY (alg 8, id 33825)
- org/DS (alg 8, id 26974)
- vip.icann.org/DNSKEY (alg 8, id 5163)
- vip.icann.org/DNSKEY (alg 8, id 6025)
- vip.icann.org/DS (alg 8, id 6025)
Non_existent (2)
- icann.org/DNSKEY (alg 7, id 17248)
- icann.org/DNSKEY (alg 7, id 23584)
Delegation status
Secure (3)
- . to org
- icann.org to vip.icann.org
- org to icann.org
Notices
Errors (2)
- org zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2001:500:e::1, 2001:500:f::1)
- vip.icann.org/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (8)
- RRSIG icann.org/DNSKEY alg 7, id 18060: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG icann.org/DNSKEY alg 7, id 18060: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG icann.org/DNSKEY alg 7, id 18060: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG icann.org/DNSKEY alg 7, id 63048: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG icann.org/DNSKEY alg 7, id 63048: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG icann.org/DNSKEY alg 7, id 63048: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG vip.icann.org/DS alg 7, id 42420: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- vip.icann.org/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
