Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2022-08-16 03:30:55 UTC, NTP stratum 16

Analyzing DNSSEC problems for www.bag.admin.ch

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
ch
Found 1 DS records for ch in the . zone
DS=11648/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
Found 3 DNSKEY records for ch
DS=11648/SHA-256 verifies DNSKEY=11648/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=11648 and DNSKEY=11648/SEP verifies the DNSKEY RRset
admin.ch
Found 2 DS records for admin.ch in the ch zone
DS=38494/SHA-256 has algorithm RSASHA256
DS=64396/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=7960 and DNSKEY=7960 verifies the DS RRset
Found 3 DNSKEY records for admin.ch
DS=64396/SHA-256 verifies DNSKEY=64396/SEP
DS=38494/SHA-256 verifies DNSKEY=38494/SEP
Found 3 RRSIGs over DNSKEY RRset
RRSIG=10005 and DNSKEY=10005 verifies the DNSKEY RRset
ins1.admin.ch is authoritative for www.bag.admin.ch
www.bag.admin.ch is a CNAME to d9s8vru4m2rpq.cloudfront.net
Found 1 RRSIGs over CNAME RRset
RRSIG=10005 and DNSKEY=10005 verifies the CNAME RRset
.
net
Found 1 DS records for net in the . zone
DS=35886/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
Found 2 DNSKEY records for net
DS=35886/SHA-256 verifies DNSKEY=35886/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
cloudfront.net
No DS records found for cloudfront.net in the net zone
No DNSKEY records found
d9s8vru4m2rpq.cloudfront.net
No DS records found for d9s8vru4m2rpq.cloudfront.net in the cloudfront.net zone
No DNSKEY records found
ns-20.awsdns-02.com is authoritative for d9s8vru4m2rpq.cloudfront.net
d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.89
No RRSIGs found
d9s8vru4m2rpq.cloudfront.net
ns-1855.awsdns-39.co.uk is authoritative for d9s8vru4m2rpq.cloudfront.net
d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.113
No RRSIGs found
d9s8vru4m2rpq.cloudfront.net
ns-924.awsdns-51.net is authoritative for d9s8vru4m2rpq.cloudfront.net
d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.113
No RRSIGs found
d9s8vru4m2rpq.cloudfront.net
ns-1464.awsdns-55.org is authoritative for d9s8vru4m2rpq.cloudfront.net
d9s8vru4m2rpq.cloudfront.net A RR has value 52.85.92.89
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.bag.admin.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options