www.bag.admin.ch
Updated:
2024-05-28 17:37:48 UTC (111 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Insecure (4)
- cloudfront.net/SOA
- d9s8vru4m2rpq.cloudfront.net/A
- d9s8vru4m2rpq.cloudfront.net/A
- www.bag.admin.ch/CNAME
Secure (3)
- admin.ch/SOA
- net/SOA
- net/SOA
DNSKEY/DS/NSEC status
Secure (16)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 5613)
- NSEC3 proving non-existence of bag.admin.ch/DS
- NSEC3 proving non-existence of cloudfront.net/DS
- admin.ch/DNSKEY (alg 8, id 28496)
- admin.ch/DNSKEY (alg 8, id 42546)
- admin.ch/DNSKEY (alg 8, id 6036)
- admin.ch/DS (alg 8, id 19420)
- admin.ch/DS (alg 8, id 28496)
- ch/DNSKEY (alg 13, id 1126)
- ch/DNSKEY (alg 13, id 450)
- ch/DNSKEY (alg 13, id 8233)
- ch/DS (alg 13, id 450)
- net/DNSKEY (alg 13, id 37331)
- net/DNSKEY (alg 13, id 51809)
- net/DS (alg 13, id 37331)
Non_existent (1)
- admin.ch/DNSKEY (alg 8, id 19420)
Delegation status
Insecure (3)
- admin.ch to bag.admin.ch
- cloudfront.net to d9s8vru4m2rpq.cloudfront.net
- net to cloudfront.net
Secure (3)
- . to ch
- . to net
- ch to admin.ch
Notices
Errors (2)
- NSEC3 proving non-existence of bag.admin.ch/DS: An iterations count of 0 must be used in NSEC3 records to alleviate computational burdens. See RFC 9276, Sec. 3.1.
- NSEC3 proving non-existence of bag.admin.ch/DS: An iterations count of 0 must be used in NSEC3 records to alleviate computational burdens. See RFC 9276, Sec. 3.1.
Warnings (3)
- NSEC3 proving non-existence of bag.admin.ch/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
- NSEC3 proving non-existence of bag.admin.ch/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
- net to cloudfront.net: Authoritative AAAA records exist for ns-666.awsdns-19.net, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.
JavaScript is required to make the graph below interactive.
