www.verisign.com

Updated: 2023-06-19 13:53:28 UTC (556 days ago) Go to most recent »

DNSSEC options (hide)

Notices

DNSSEC Authentication Chain

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 60955)
NSEC3 proving non-existence of www.verisign.com/DS
com/DNSKEY (alg 8, id 30909)
com/DNSKEY (alg 8, id 46551)
com/DS (alg 8, id 30909)
verisign.com/DNSKEY (alg 8, id 17355)
verisign.com/DNSKEY (alg 8, id 55204)
verisign.com/DS (alg 8, id 55204)

www.verisign.com/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/MX has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/NSEC3PARAM has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/SOA has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/TXT has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/NS has errors; select the "Denial of existence" DNSSEC option to see them.
xlpdsz7uk2.www.verisign.com/A has errors; select the "Denial of existence" DNSSEC option to see them.

NSEC3 proving non-existence of www.verisign.com/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
NSEC3 proving non-existence of www.verisign.com/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
verisign.com to www.verisign.com: The following NS name(s) were found in the delegation NS RRset (i.e., in the verisign.com zone), but not in the authoritative NS RRset: gslb.ash3.verisign.com, gslb.brn1.verisign.com, gslb.ilg1.verisign.com See RFC 1034, Sec. 4.2.2.
www.verisign.com/DS has warnings; select the "Denial of existence" DNSSEC option to see them.