Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2026-10-01 12:18:26 UTC

Analyzing DNSSEC problems for dns.google

.
Found 4 DNSKEY records for .
DS=38696/SHA-256 verifies DNSKEY=38696/SEP
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
google
Found 1 DS records for google in the . zone
DS=6125/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=8763 and DNSKEY=8763 verifies the DS RRset
Found 2 DNSKEY records for google
DS=6125/SHA-256 verifies DNSKEY=6125/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=6125 and DNSKEY=6125/SEP verifies the DNSKEY RRset
dns.google
Found 1 DS records for dns.google in the google zone
DS=56044/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=23179 and DNSKEY=23179 verifies the DS RRset
Found 2 DNSKEY records for dns.google
DS=56044/SHA-256 verifies DNSKEY=56044/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=56044 and DNSKEY=56044/SEP verifies the DNSKEY RRset
ns2.zdns.google is authoritative for dns.google
dns.google A RR has value 8.8.4.4
Found 1 RRSIGs over A RRset
RRSIG=2760 and DNSKEY=2760 verifies the A RRset
dns.google
ns3.zdns.google is authoritative for dns.google
dns.google A RR has value 8.8.8.8
Found 1 RRSIGs over A RRset
RRSIG=2760 and DNSKEY=2760 verifies the A RRset
dns.google
ns4.zdns.google is authoritative for dns.google
dns.google A RR has value 8.8.8.8
Found 1 RRSIGs over A RRset
RRSIG=2760 and DNSKEY=2760 verifies the A RRset
dns.google
ns1.zdns.google is authoritative for dns.google
dns.google A RR has value 8.8.4.4
Found 1 RRSIGs over A RRset
RRSIG=2760 and DNSKEY=2760 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dns.google at dnsviz.net.

DNSSEC Debugger

↓ Advanced options