www.verisign.com

Updated: 2024-11-12 20:27:24 UTC (40 days ago) Go to most recent »

DNSSEC options (hide)

Notices

DNSSEC Authentication Chain

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 61050)
NSEC3 proving non-existence of www.verisign.com/DS
com/DNSKEY (alg 13, id 19718)
com/DNSKEY (alg 13, id 29942)
com/DS (alg 13, id 19718)
verisign.com/DNSKEY (alg 8, id 47406)
verisign.com/DNSKEY (alg 8, id 55204)
verisign.com/DS (alg 8, id 55204)

www.verisign.com/TXT has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/CDS has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/MX has errors; select the "Denial of existence" DNSSEC option to see them.
986rz.mg08c.www.verisign.com/A has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/NSEC3PARAM has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/SOA has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/NS has errors; select the "Denial of existence" DNSSEC option to see them.
www.verisign.com/CDNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.

NSEC3 proving non-existence of www.verisign.com/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
NSEC3 proving non-existence of www.verisign.com/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
com/DS (alg 13, id 19718): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (192.33.4.12, UDP_-_EDNS0_4096_D_KN)
com/DS (alg 13, id 19718): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (192.33.4.12, UDP_-_EDNS0_4096_D_KN)
verisign.com to www.verisign.com: The following NS name(s) were found in the delegation NS RRset (i.e., in the verisign.com zone), but not in the authoritative NS RRset: gslb.ash3.verisign.com, gslb.brn1.verisign.com, gslb.ilg1.verisign.com See RFC 1034, Sec. 4.2.2.
www.verisign.com/DS has warnings; select the "Denial of existence" DNSSEC option to see them.