Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2025-05-09 07:31:29 UTC

Analyzing DNSSEC problems for www.nrc.gov

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
gov
Found 1 DS records for gov in the . zone
DS=2536/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
Found 2 DNSKEY records for gov
DS=2536/SHA-256 verifies DNSKEY=2536/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
nrc.gov
Found 4 DS records for nrc.gov in the gov zone
DS=17389/SHA-1 uses a deprecated digest algorithm
DS=4057/SHA-1 uses a deprecated digest algorithm
DS=17389/SHA-1 has algorithm RSASHA256
DS=17389/SHA-256 has algorithm RSASHA256
DS=4057/SHA-1 has algorithm RSASHA256
DS=4057/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
Found 3 DNSKEY records for nrc.gov
DS=4057/SHA-1 verifies DNSKEY=4057/SEP
Found 3 RRSIGs over DNSKEY RRset
RRSIG=4057 and DNSKEY=4057/SEP verifies the DNSKEY RRset
a18-65.akam.net is authoritative for www.nrc.gov
www.nrc.gov is a CNAME to www.nrc.gov.edgekey.net
Found 2 RRSIGs over CNAME RRset
RRSIG=39033 and DNSKEY=39033 verifies the CNAME RRset
.
net
Found 1 DS records for net in the . zone
DS=37331/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
Found 2 DNSKEY records for net
DS=37331/SHA-256 verifies DNSKEY=37331/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
edgekey.net
No DS records found for edgekey.net in the net zone
No DNSKEY records found
a10-66.akam.net is authoritative for www.nrc.gov.edgekey.net
www.nrc.gov.edgekey.net is a CNAME to e3628.dsca.akamaiedge.net
No RRSIGs found
net
akamaiedge.net
No DS records found for akamaiedge.net in the net zone
No DNSKEY records found
dsca.akamaiedge.net
No DS records found for dsca.akamaiedge.net in the akamaiedge.net zone
No DNSKEY records found
n2dsca.akamaiedge.net is authoritative for e3628.dsca.akamaiedge.net
e3628.dsca.akamaiedge.net A RR has value 184.24.66.193
No RRSIGs found
dsca.akamaiedge.net
n4dsca.akamaiedge.net is authoritative for e3628.dsca.akamaiedge.net
e3628.dsca.akamaiedge.net A RR has value 184.24.66.193
No RRSIGs found
dsca.akamaiedge.net
n6dsca.akamaiedge.net is authoritative for e3628.dsca.akamaiedge.net
e3628.dsca.akamaiedge.net A RR has value 184.24.66.193
No RRSIGs found
dsca.akamaiedge.net
n5dsca.akamaiedge.net is authoritative for e3628.dsca.akamaiedge.net
e3628.dsca.akamaiedge.net A RR has value 184.24.66.193
No RRSIGs found
dsca.akamaiedge.net
n7dsca.akamaiedge.net is authoritative for e3628.dsca.akamaiedge.net
e3628.dsca.akamaiedge.net A RR has value 184.24.66.193
No RRSIGs found
dsca.akamaiedge.net
n1dsca.akamaiedge.net is authoritative for e3628.dsca.akamaiedge.net
e3628.dsca.akamaiedge.net A RR has value 184.24.66.193
No RRSIGs found
dsca.akamaiedge.net
n0dsca.akamaiedge.net is authoritative for e3628.dsca.akamaiedge.net
e3628.dsca.akamaiedge.net A RR has value 184.24.66.193
No RRSIGs found
dsca.akamaiedge.net
n3dsca.akamaiedge.net is authoritative for e3628.dsca.akamaiedge.net
e3628.dsca.akamaiedge.net A RR has value 184.24.66.193
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.nrc.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options