Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2026-07-06 14:38:07 UTC

Analyzing DNSSEC problems for curl.haxx.se

.
Found 4 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
DS=38696/SHA-256 verifies DNSKEY=38696/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
se
Found 1 DS records for se in the . zone
DS=59407/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
Found 2 DNSKEY records for se
DS=59407/SHA-256 verifies DNSKEY=59407/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=59407 and DNSKEY=59407/SEP verifies the DNSKEY RRset
haxx.se
No DS records found for haxx.se in the se zone
No DNSKEY records found
ns1.haxx.se is authoritative for curl.haxx.se
curl.haxx.se is a CNAME to dualstack.c.sni.global.fastly.net
No RRSIGs found
.
net
Found 1 DS records for net in the . zone
DS=37331/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
Found 2 DNSKEY records for net
DS=37331/SHA-256 verifies DNSKEY=37331/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
fastly.net
No DS records found for fastly.net in the net zone
No DNSKEY records found
ns4.fastly.net is authoritative for dualstack.c.sni.global.fastly.net
dualstack.c.sni.global.fastly.net A RR has value 199.232.38.49
No RRSIGs found
fastly.net
ns3.fastly.net is authoritative for dualstack.c.sni.global.fastly.net
dualstack.c.sni.global.fastly.net A RR has value 151.101.46.49
No RRSIGs found
fastly.net
ns1.fastly.net is authoritative for dualstack.c.sni.global.fastly.net
dualstack.c.sni.global.fastly.net A RR has value 199.232.38.49
No RRSIGs found
fastly.net
ns2.fastly.net is authoritative for dualstack.c.sni.global.fastly.net
dualstack.c.sni.global.fastly.net A RR has value 146.75.30.49
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test curl.haxx.se at dnsviz.net.

DNSSEC Debugger

↓ Advanced options