NSEC3 proving non-existence of www.verisign.com/DS
com/DNSKEY (alg 8, id 30909)
com/DNSKEY (alg 8, id 31510)
com/DS (alg 8, id 30909)
verisign.com/DNSKEY (alg 8, id 55204)
verisign.com/DNSKEY (alg 8, id 55645)
verisign.com/DS (alg 8, id 55204)
Delegation status
Insecure (1)
verisign.com to www.verisign.com
Secure (2)
. to com
com to verisign.com
Notices
Errors (7)
www.verisign.com/TXT has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/MX has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/SOA has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
y4v139gidp.www.verisign.com/A has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/NS has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (5)
NSEC3 proving non-existence of www.verisign.com/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
NSEC3 proving non-existence of www.verisign.com/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
com to verisign.com: The following NS name(s) were found in the delegation NS RRset (i.e., in the com zone), but not in the authoritative NS RRset: av4.nstld.com See RFC 1034, Sec. 4.2.2.
verisign.com to www.verisign.com: The following NS name(s) were found in the delegation NS RRset (i.e., in the verisign.com zone), but not in the authoritative NS RRset: gslb.ash3.verisign.com, gslb.brn1.verisign.com, gslb.fri2.verisign.com, gslb.ilg1.verisign.com See RFC 1034, Sec. 4.2.2.
www.verisign.com/DS has warnings; select the "Denial of existence" DNSSEC option to see them.