NSEC3 proving non-existence of www.verisign.com/DS
com/DNSKEY (alg 13, id 19718)
com/DNSKEY (alg 13, id 29942)
com/DS (alg 13, id 19718)
verisign.com/DNSKEY (alg 8, id 47406)
verisign.com/DNSKEY (alg 8, id 55204)
verisign.com/DS (alg 8, id 55204)
Delegation status
Insecure (1)
verisign.com to www.verisign.com
Secure (2)
. to com
com to verisign.com
Notices
Errors (10)
www.verisign.com/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/CDS has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/MX has errors; select the "Denial of existence" DNSSEC option to see them.
igbx5.vcn4q.www.verisign.com/A has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/NSEC3PARAM has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/SOA has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/TXT has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/NS has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/CDNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (6)
NSEC3 proving non-existence of www.verisign.com/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
NSEC3 proving non-existence of www.verisign.com/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
com/DS (alg 13, id 19718): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (192.33.4.12, UDP_-_EDNS0_4096_D_KN)
com/DS (alg 13, id 19718): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (192.33.4.12, UDP_-_EDNS0_4096_D_KN)
verisign.com to www.verisign.com: The following NS name(s) were found in the delegation NS RRset (i.e., in the verisign.com zone), but not in the authoritative NS RRset: gslb.ash3.verisign.com, gslb.brn1.verisign.com, gslb.ilg1.verisign.com See RFC 1034, Sec. 4.2.2.
www.verisign.com/DS has warnings; select the "Denial of existence" DNSSEC option to see them.