Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2023-06-08 14:13:20 UTC, NTP stratum 4

Analyzing DNSSEC problems for www.usembassy.gov

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
gov
Found 1 DS records for gov in the . zone
DS=7698/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=60955 and DNSKEY=60955 verifies the DS RRset
Found 2 DNSKEY records for gov
DS=7698/SHA-256 verifies DNSKEY=7698/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
usembassy.gov
Found 2 DS records for usembassy.gov in the gov zone
DS=40579/SHA-1 has algorithm RSASHA256
DS=40579/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=50011 and DNSKEY=50011 verifies the DS RRset
Found 3 DNSKEY records for usembassy.gov
DS=40579/SHA-1 verifies DNSKEY=40579/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=49278 and DNSKEY=49278 verifies the DNSKEY RRset
a8-67.akam.net is authoritative for www.usembassy.gov
www.usembassy.gov is a CNAME to wildcard.usembassy.gov.edgekey.net
Found 1 RRSIGs over CNAME RRset
RRSIG=49278 and DNSKEY=49278 verifies the CNAME RRset
.
net
Found 1 DS records for net in the . zone
DS=35886/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=60955 and DNSKEY=60955 verifies the DS RRset
Found 2 DNSKEY records for net
DS=35886/SHA-256 verifies DNSKEY=35886/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
edgekey.net
No DS records found for edgekey.net in the net zone
No DNSKEY records found
a28-65.akam.net is authoritative for wildcard.usembassy.gov.edgekey.net
wildcard.usembassy.gov.edgekey.net is a CNAME to e98302.dscb.akamaiedge.net
No RRSIGs found
net
akamaiedge.net
No DS records found for akamaiedge.net in the net zone
No DNSKEY records found
dscb.akamaiedge.net
No DS records found for dscb.akamaiedge.net in the akamaiedge.net zone
No DNSKEY records found
n3dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
n1dscb.akamaiedge.net serial (1686233602) differs from n7dscb.akamaiedge.net serial (1686233601)
n2dscb.akamaiedge.net serial (1686233602) differs from n7dscb.akamaiedge.net serial (1686233601)
n4dscb.akamaiedge.net serial (1686233602) differs from n7dscb.akamaiedge.net serial (1686233601)
n5dscb.akamaiedge.net serial (1686233602) differs from n7dscb.akamaiedge.net serial (1686233601)
n0dscb.akamaiedge.net serial (1686233602) differs from n7dscb.akamaiedge.net serial (1686233601)
e98302.dscb.akamaiedge.net A RR has value 23.47.144.142
No RRSIGs found
dscb.akamaiedge.net
n5dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
e98302.dscb.akamaiedge.net A RR has value 23.47.144.142
No RRSIGs found
dscb.akamaiedge.net
n4dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
e98302.dscb.akamaiedge.net A RR has value 23.47.144.142
No RRSIGs found
dscb.akamaiedge.net
n1dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
No RRSIGs found
dscb.akamaiedge.net
n7dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
No RRSIGs found
dscb.akamaiedge.net
n6dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
No RRSIGs found
dscb.akamaiedge.net
n0dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
No RRSIGs found
dscb.akamaiedge.net
n2dscb.akamaiedge.net is authoritative for e98302.dscb.akamaiedge.net
e98302.dscb.akamaiedge.net A RR has value 23.47.144.134
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.usembassy.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options