Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-09-08 02:29:13 UTC

Analyzing DNSSEC problems for raffy.home.raffy.xyz

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
xyz
Found 2 DS records for xyz in the . zone
DS=3599/SHA-256 has algorithm RSASHA256
DS=18130/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
Found 2 DNSKEY records for xyz
DS=18130/SHA-256 verifies DNSKEY=18130/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=18130 and DNSKEY=18130/SEP verifies the DNSKEY RRset
raffy.xyz
Found 1 DS records for raffy.xyz in the xyz zone
DS=15848/SHA-1 uses a deprecated digest algorithm
DS=15848/SHA-1 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=65206 and DNSKEY=65206 verifies the DS RRset
Found 2 DNSKEY records for raffy.xyz
DS=15848/SHA-1 verifies DNSKEY=15848/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=15848 and DNSKEY=15848/SEP verifies the DNSKEY RRset
dns1.registrar-servers.com is authoritative for raffy.home.raffy.xyz
No NSEC record could prove that no records of type A for *.raffy.xyz exist
Found 1 RRSIGs over NSEC RRset
RRSIG=44800 and DNSKEY=44800 verifies the NSEC RRset
NSEC proves no records exist with name raffy.home.raffy.xyz
Found 1 RRSIGs over SOA RRset
RRSIG=44800 and DNSKEY=44800 verifies the SOA RRset
raffy.xyz
dns2.registrar-servers.com is authoritative for raffy.home.raffy.xyz
No NSEC record could prove that no records of type A for *.raffy.xyz exist
Found 1 RRSIGs over NSEC RRset
RRSIG=44800 and DNSKEY=44800 verifies the NSEC RRset
NSEC proves no records exist with name raffy.home.raffy.xyz
Found 1 RRSIGs over SOA RRset
RRSIG=44800 and DNSKEY=44800 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test raffy.home.raffy.xyz at dnsviz.net.

DNSSEC Debugger

↓ Advanced options