Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-05-18 13:01:40 UTC

Analyzing DNSSEC problems for uat.car-insurance.atlantic.caa.ca

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
ca
Found 1 DS records for ca in the . zone
DS=18560/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
Found 2 DNSKEY records for ca
DS=18560/SHA-256 verifies DNSKEY=18560/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=18560 and DNSKEY=18560/SEP verifies the DNSKEY RRset
caa.ca
No DS records found for caa.ca in the ca zone
No DNSKEY records found
caa.ca refers to atlantic.caa.ca for uat.car-insurance.atlantic.caa.ca
No DS records found for atlantic.caa.ca in the referral
atlantic.caa.ca
No DS records found for atlantic.caa.ca in the caa.ca zone
No DNSKEY records found
ns11.dnsmadeeasy.com is authoritative for uat.car-insurance.atlantic.caa.ca
uat.car-insurance.atlantic.caa.ca is a CNAME to a40ea18b199b248d2a592564b3719033-802197794.ca-central-1.elb.amazonaws.com
No RRSIGs found
.
com
Found 1 DS records for com in the . zone
DS=19718/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
Found 2 DNSKEY records for com
DS=19718/SHA-256 verifies DNSKEY=19718/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
amazonaws.com
No DS records found for amazonaws.com in the com zone
No DNSKEY records found
ca-central-1.elb.amazonaws.com
No DS records found for ca-central-1.elb.amazonaws.com in the amazonaws.com zone
No DNSKEY records found
ns-616.awsdns-13.net is authoritative for a40ea18b199b248d2a592564b3719033-802197794.ca-central-1.elb.amazonaws.com
a40ea18b199b248d2a592564b3719033-802197794.ca-central-1.elb.amazonaws.com A RR has value 3.98.253.127
No RRSIGs found
ca-central-1.elb.amazonaws.com
ns-1767.awsdns-28.co.uk is authoritative for a40ea18b199b248d2a592564b3719033-802197794.ca-central-1.elb.amazonaws.com
a40ea18b199b248d2a592564b3719033-802197794.ca-central-1.elb.amazonaws.com A RR has value 3.98.253.127
No RRSIGs found
ca-central-1.elb.amazonaws.com
ns-127.awsdns-15.com is authoritative for a40ea18b199b248d2a592564b3719033-802197794.ca-central-1.elb.amazonaws.com
a40ea18b199b248d2a592564b3719033-802197794.ca-central-1.elb.amazonaws.com A RR has value 3.98.253.127
No RRSIGs found
ca-central-1.elb.amazonaws.com
ns-1103.awsdns-09.org is authoritative for a40ea18b199b248d2a592564b3719033-802197794.ca-central-1.elb.amazonaws.com
a40ea18b199b248d2a592564b3719033-802197794.ca-central-1.elb.amazonaws.com A RR has value 3.98.253.127
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test uat.car-insurance.atlantic.caa.ca at dnsviz.net.

DNSSEC Debugger

↓ Advanced options