Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2026-03-27 02:53:58 UTC

Analyzing DNSSEC problems for business.comcast.com

.
Found 4 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
com
Found 1 DS records for com in the . zone
DS=19718/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
Found 2 DNSKEY records for com
DS=19718/SHA-256 verifies DNSKEY=19718/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
comcast.com
Found 2 DS records for comcast.com in the com zone
DS=35356/SHA-1 uses a deprecated digest algorithm
DS=35356/SHA-256 has algorithm RSASHA1
DS=35356/SHA-1 has algorithm RSASHA1
Found 1 RRSIGs over DS RRset
RRSIG=35511 and DNSKEY=35511 verifies the DS RRset
Found 2 DNSKEY records for comcast.com
DS=35356/SHA-256 verifies DNSKEY=35356/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=35356 and DNSKEY=35356/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
RRSIG=8970 and DNSKEY=8970 does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
None of the 2 RRSIG and 2 DNSKEY records validate the DNSKEY RRset
The DNSKEY RRset was not signed by any trusted keys
dns102.comcast.net is authoritative for business.comcast.com
business.comcast.com is a CNAME to business.comcast.com.edgekey.net
Found 1 RRSIGs over CNAME RRset
RRSIG=8970 and DNSKEY=8970 does not verify the CNAME RRset (libcrypto error (SEC.xs line 223)signature verification failed)
None of the 1 RRSIG and 2 DNSKEY records validate the CNAME RRset
.
net
Found 1 DS records for net in the . zone
DS=37331/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
Found 2 DNSKEY records for net
DS=37331/SHA-256 verifies DNSKEY=37331/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
edgekey.net
No DS records found for edgekey.net in the net zone
No DNSKEY records found
a1-66.akam.net is authoritative for business.comcast.com.edgekey.net
business.comcast.com.edgekey.net is a CNAME to e26014.dscx.akamaiedge.net
No RRSIGs found
net
akamaiedge.net
No DS records found for akamaiedge.net in the net zone
No DNSKEY records found
dscx.akamaiedge.net
No DS records found for dscx.akamaiedge.net in the akamaiedge.net zone
No DNSKEY records found
n3dscx.akamaiedge.net is authoritative for e26014.dscx.akamaiedge.net
e26014.dscx.akamaiedge.net A RR has value 23.73.207.15
No RRSIGs found
dscx.akamaiedge.net
n1dscx.akamaiedge.net is authoritative for e26014.dscx.akamaiedge.net
e26014.dscx.akamaiedge.net A RR has value 23.73.207.15
No RRSIGs found
dscx.akamaiedge.net
n5dscx.akamaiedge.net is authoritative for e26014.dscx.akamaiedge.net
e26014.dscx.akamaiedge.net A RR has value 23.73.207.16
No RRSIGs found
dscx.akamaiedge.net
n6dscx.akamaiedge.net is authoritative for e26014.dscx.akamaiedge.net
e26014.dscx.akamaiedge.net A RR has value 23.73.207.15
No RRSIGs found
dscx.akamaiedge.net
n2dscx.akamaiedge.net is authoritative for e26014.dscx.akamaiedge.net
e26014.dscx.akamaiedge.net A RR has value 23.73.207.16
No RRSIGs found
dscx.akamaiedge.net
n7dscx.akamaiedge.net is authoritative for e26014.dscx.akamaiedge.net
e26014.dscx.akamaiedge.net A RR has value 23.73.207.15
No RRSIGs found
dscx.akamaiedge.net
n0dscx.akamaiedge.net is authoritative for e26014.dscx.akamaiedge.net
e26014.dscx.akamaiedge.net A RR has value 23.73.207.15
No RRSIGs found
dscx.akamaiedge.net
n4dscx.akamaiedge.net is authoritative for e26014.dscx.akamaiedge.net
e26014.dscx.akamaiedge.net A RR has value 23.73.207.15
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test business.comcast.com at dnsviz.net.

DNSSEC Debugger

↓ Advanced options