Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-03-28 14:58:52 UTC

Analyzing DNSSEC problems for www.usembassy.gov

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
gov
Found 1 DS records for gov in the . zone
DS=64280/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=30903 and DNSKEY=30903 verifies the DS RRset
Found 2 DNSKEY records for gov
DS=64280/SHA-256 verifies DNSKEY=64280/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
usembassy.gov
Found 4 DS records for usembassy.gov in the gov zone
DS=39784/SHA-1 uses a deprecated digest algorithm
DS=40579/SHA-1 uses a deprecated digest algorithm
DS=39784/SHA-1 has algorithm RSASHA256
DS=39784/SHA-256 has algorithm RSASHA256
DS=40579/SHA-1 has algorithm RSASHA256
DS=40579/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
Found 5 DNSKEY records for usembassy.gov
DS=39784/SHA-1 verifies DNSKEY=39784/SEP
DS=40579/SHA-1 verifies DNSKEY=40579/SEP
Found 3 RRSIGs over DNSKEY RRset
RRSIG=19488 and DNSKEY=19488 verifies the DNSKEY RRset
a1-63.akam.net is authoritative for www.usembassy.gov
www.usembassy.gov is a CNAME to d1oj4yrmnvvraf.cloudfront.net
Found 1 RRSIGs over CNAME RRset
RRSIG=19488 and DNSKEY=19488 verifies the CNAME RRset
.
net
Found 1 DS records for net in the . zone
DS=37331/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=30903 and DNSKEY=30903 verifies the DS RRset
Found 2 DNSKEY records for net
DS=37331/SHA-256 verifies DNSKEY=37331/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
cloudfront.net
No DS records found for cloudfront.net in the net zone
No DNSKEY records found
d1oj4yrmnvvraf.cloudfront.net
No DS records found for d1oj4yrmnvvraf.cloudfront.net in the cloudfront.net zone
No DNSKEY records found
ns-171.awsdns-21.com is authoritative for d1oj4yrmnvvraf.cloudfront.net
d1oj4yrmnvvraf.cloudfront.net A RR has value 13.224.214.83
No RRSIGs found
d1oj4yrmnvvraf.cloudfront.net
ns-605.awsdns-11.net is authoritative for d1oj4yrmnvvraf.cloudfront.net
d1oj4yrmnvvraf.cloudfront.net A RR has value 13.224.214.83
No RRSIGs found
d1oj4yrmnvvraf.cloudfront.net
ns-1135.awsdns-13.org is authoritative for d1oj4yrmnvvraf.cloudfront.net
d1oj4yrmnvvraf.cloudfront.net A RR has value 13.224.214.58
No RRSIGs found
d1oj4yrmnvvraf.cloudfront.net
ns-1866.awsdns-41.co.uk is authoritative for d1oj4yrmnvvraf.cloudfront.net
d1oj4yrmnvvraf.cloudfront.net A RR has value 13.224.214.115
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.usembassy.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options