www.verisign.com

Updated: 2024-10-21 15:04:06 UTC (66 days ago) Go to most recent »

DNSSEC options (hide)

Notices

DNSSEC Authentication Chain

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 61050)
NSEC3 proving non-existence of www.verisign.com/DS
com/DNSKEY (alg 13, id 19718)
com/DNSKEY (alg 13, id 29942)
com/DS (alg 13, id 19718)
verisign.com/DNSKEY (alg 8, id 47406)
verisign.com/DNSKEY (alg 8, id 55204)
verisign.com/DS (alg 8, id 55204)

bn2zx.tg6kb.www.verisign.com/A has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/CDS has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/MX has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/NSEC3PARAM has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/SOA has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/TXT has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/NS has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/CDNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.

NSEC3 proving non-existence of www.verisign.com/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
NSEC3 proving non-existence of www.verisign.com/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
verisign.com to www.verisign.com: The following NS name(s) were found in the delegation NS RRset (i.e., in the verisign.com zone), but not in the authoritative NS RRset: gslb.ash3.verisign.com, gslb.brn1.verisign.com, gslb.ilg1.verisign.com See RFC 1034, Sec. 4.2.2.
www.verisign.com/DS has warnings; select the "Denial of existence" DNSSEC option to see them.