Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2026-03-12 21:48:15 UTC

Analyzing DNSSEC problems for bookings.cloud.microsoft

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
microsoft
Found 1 DS records for microsoft in the . zone
DS=55012/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
Found 2 DNSKEY records for microsoft
DS=55012/SHA-256 verifies DNSKEY=55012/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=55012 and DNSKEY=55012/SEP verifies the DNSKEY RRset
cloud.microsoft
Found 1 DS records for cloud.microsoft in the microsoft zone
DS=61899/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=26161 and DNSKEY=26161 verifies the DS RRset
Found 2 DNSKEY records for cloud.microsoft
DS=61899/SHA-256 verifies DNSKEY=61899/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=61899 and DNSKEY=61899/SEP verifies the DNSKEY RRset
ns4-33.azure-dns.info is authoritative for bookings.cloud.microsoft
bookings.cloud.microsoft is a CNAME to outlook.office365.com
Found 1 RRSIGs over CNAME RRset
RRSIG=35344 and DNSKEY=35344 verifies the CNAME RRset
.
com
Found 1 DS records for com in the . zone
DS=19718/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
Found 2 DNSKEY records for com
DS=19718/SHA-256 verifies DNSKEY=19718/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
office365.com
No DS records found for office365.com in the com zone
No DNSKEY records found
ns3-07.azure-dns.org is authoritative for outlook.office365.com
outlook.office365.com is a CNAME to ooc-g2.tm-4.office.com
No RRSIGs found
com
office.com
No DS records found for office.com in the com zone
No DNSKEY records found
tm-4.office.com
No DS records found for tm-4.office.com in the office.com zone
No DNSKEY records found
ns1.tm-4.office.com is authoritative for ooc-g2.tm-4.office.com
ooc-g2.tm-4.office.com is a CNAME to outlook.ms-acdc.office.com
No RRSIGs found
office.com
ms-acdc.office.com
No DS records found for ms-acdc.office.com in the office.com zone
No DNSKEY records found
ns3-ms-acdc.office.com is authoritative for outlook.ms-acdc.office.com
outlook.ms-acdc.office.com is a CNAME to MNZ-efz.ms-acdc.office.com
No RRSIGs found
ns3-ms-acdc.office.com is authoritative for MNZ-efz.ms-acdc.office.com
ns2-ms-acdc.office.com serial (2054121224) differs from ns4-ms-acdc.office.com serial (2054029784)
ns1-ms-acdc.office.com serial (2050451143) differs from ns4-ms-acdc.office.com serial (2054029784)
MNZ-efz.ms-acdc.office.com A RR has value 52.96.58.98
ms-acdc.office.com
ns4-ms-acdc.office.com is authoritative for MNZ-efz.ms-acdc.office.com
MNZ-efz.ms-acdc.office.com A RR has value 52.96.9.178
No RRSIGs found
ms-acdc.office.com
ns2-ms-acdc.office.com is authoritative for MNZ-efz.ms-acdc.office.com
MNZ-efz.ms-acdc.office.com A RR has value 52.96.40.242
No RRSIGs found
ms-acdc.office.com
ns1-ms-acdc.office.com is authoritative for MNZ-efz.ms-acdc.office.com
MNZ-efz.ms-acdc.office.com A RR has value 52.96.111.2
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bookings.cloud.microsoft at dnsviz.net.

DNSSEC Debugger

↓ Advanced options