Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-03-28 22:00:25 UTC

Analyzing DNSSEC problems for www.bag.admin.ch

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
ch
Found 1 DS records for ch in the . zone
DS=450/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=30903 and DNSKEY=30903 verifies the DS RRset
Found 3 DNSKEY records for ch
DS=450/SHA-256 verifies DNSKEY=450/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=450 and DNSKEY=450/SEP verifies the DNSKEY RRset
admin.ch
Found 1 DS records for admin.ch in the ch zone
DS=19420/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=39752 and DNSKEY=39752 verifies the DS RRset
Found 3 DNSKEY records for admin.ch
DS=19420/SHA-256 verifies DNSKEY=19420/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=2614 and DNSKEY=2614 verifies the DNSKEY RRset
ins2.admin.ch is authoritative for www.bag.admin.ch
www.bag.admin.ch is a CNAME to d9s8vru4m2rpq.cloudfront.net
Found 1 RRSIGs over CNAME RRset
RRSIG=2614 and DNSKEY=2614 verifies the CNAME RRset
.
net
Found 1 DS records for net in the . zone
DS=37331/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=30903 and DNSKEY=30903 verifies the DS RRset
Found 2 DNSKEY records for net
DS=37331/SHA-256 verifies DNSKEY=37331/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
cloudfront.net
No DS records found for cloudfront.net in the net zone
No DNSKEY records found
d9s8vru4m2rpq.cloudfront.net
No DS records found for d9s8vru4m2rpq.cloudfront.net in the cloudfront.net zone
No DNSKEY records found
ns-1855.awsdns-39.co.uk is authoritative for d9s8vru4m2rpq.cloudfront.net
d9s8vru4m2rpq.cloudfront.net A RR has value 18.165.98.15
No RRSIGs found
d9s8vru4m2rpq.cloudfront.net
ns-1464.awsdns-55.org is authoritative for d9s8vru4m2rpq.cloudfront.net
d9s8vru4m2rpq.cloudfront.net A RR has value 18.165.98.15
No RRSIGs found
d9s8vru4m2rpq.cloudfront.net
ns-924.awsdns-51.net is authoritative for d9s8vru4m2rpq.cloudfront.net
d9s8vru4m2rpq.cloudfront.net A RR has value 18.165.98.95
No RRSIGs found
d9s8vru4m2rpq.cloudfront.net
ns-20.awsdns-02.com is authoritative for d9s8vru4m2rpq.cloudfront.net
d9s8vru4m2rpq.cloudfront.net A RR has value 18.165.98.86
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.bag.admin.ch at dnsviz.net.

DNSSEC Debugger

↓ Advanced options