dnssec.in › Top 100 domains › cisa.gov
DNSSEC Checker

Is cisa.gov signed?

DNSSEC status from our weekly check. Re-check it live from your browser at any time.

cisa.gov
🔒 Signed & validating

This domain is signed and a validating resolver confirms the chain of trust (AD flag set).

DNSKEY
2 key(s)
Algorithm
13 · ECDSA P-256
DS in parent
1 record(s)
AD flag
set ✓

Checked 26 Oct 2026 by our weekly check.

What this means for cisa.gov

Answers for cisa.gov carry signatures, and the parent zone vouches for its key with a DS record. A validating resolver rejects forged answers for this name instead of passing them on. Read how the AD flag and the DS record fit together.

More: Top 100 domains

Full list: Top 100 domains →

Learn DNSSEC