Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-11-08 20:44:28 UTC

Analyzing DNSSEC problems for www.bag.admin.ch

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
ch
Found 1 DS records for ch in the . zone
DS=450/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
Found 3 DNSKEY records for ch
DS=450/SHA-256 verifies DNSKEY=450/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=450 and DNSKEY=450/SEP verifies the DNSKEY RRset
admin.ch
Found 2 DS records for admin.ch in the ch zone
DS=28496/SHA-256 has algorithm RSASHA256
DS=38519/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=28518 and DNSKEY=28518 verifies the DS RRset
Found 3 DNSKEY records for admin.ch
DS=38519/SHA-256 verifies DNSKEY=38519/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=26274 and DNSKEY=26274 verifies the DNSKEY RRset
ins1.admin.ch is authoritative for www.bag.admin.ch
bag.admin.ch
Found 1 DS records for bag.admin.ch in the admin.ch zone
DS=56026/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=20433 expires (in 2.49 days) before end of TTL (15.00 days)
RRSIG=20433 and DNSKEY=20433 verifies the DS RRset
Found 3 DNSKEY records for bag.admin.ch
DS=56026/SHA-256 verifies DNSKEY=56026/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=28729 and DNSKEY=28729 verifies the DNSKEY RRset
ins3.admin.ch is authoritative for www.bag.admin.ch
www.bag.admin.ch is a CNAME to d9s8vru4m2rpq.cloudfront.net
Found 1 RRSIGs over CNAME RRset
RRSIG=28729 and DNSKEY=28729 verifies the CNAME RRset
.
net
Found 1 DS records for net in the . zone
DS=37331/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
Found 2 DNSKEY records for net
DS=37331/SHA-256 verifies DNSKEY=37331/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
cloudfront.net
No DS records found for cloudfront.net in the net zone
No DNSKEY records found
d9s8vru4m2rpq.cloudfront.net
No DS records found for d9s8vru4m2rpq.cloudfront.net in the cloudfront.net zone
No DNSKEY records found
ns-20.awsdns-02.com is authoritative for d9s8vru4m2rpq.cloudfront.net
d9s8vru4m2rpq.cloudfront.net A RR has value 18.238.4.121
No RRSIGs found
d9s8vru4m2rpq.cloudfront.net
ns-1855.awsdns-39.co.uk is authoritative for d9s8vru4m2rpq.cloudfront.net
d9s8vru4m2rpq.cloudfront.net A RR has value 18.238.4.82
No RRSIGs found
d9s8vru4m2rpq.cloudfront.net
ns-924.awsdns-51.net is authoritative for d9s8vru4m2rpq.cloudfront.net
d9s8vru4m2rpq.cloudfront.net A RR has value 18.238.4.82
No RRSIGs found
d9s8vru4m2rpq.cloudfront.net
ns-1464.awsdns-55.org is authoritative for d9s8vru4m2rpq.cloudfront.net
d9s8vru4m2rpq.cloudfront.net A RR has value 18.238.4.74
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.bag.admin.ch at dnsviz.net.

DNSSEC Debugger

↓ Advanced options