Detailed Monitoring Summary:

DNSSEC Summary
16,140,542 Zones
12,690,628 DNSSEC enabled zones
10,972,875 Zones use both KSKs and ZSKs
71 Zones are serving revoked keys
7,470,425 DNSSEC verified zones
11,000,286 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
RSA/SHA256 [RSASHA256]15,570,259
Reserved 01
DSA/SHA-1 [DSA]38
ECDSA Curve P-256 with SHA-256 [ECDSAP256SHA256]9,118,792
RSA/SHA512 [RSASHA512]258,678
Private [PRIVATEOID]1
DSA-NSEC3-SHA1 [DSA-NSEC3-SHA1]9
ECDSA Curve P-384 with SHA-384 [ECDSAP384SHA384]148,767
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]92,558
RSA/MD5 [RSAMD5]7
Unknown Algorithm460,963
RSA/SHA-1 [RSASHA1]23,199
Diffie-Hellman [DH]9
ECC/GOST [ECC-GOST]6
DANE Summary
678,852 DANE enabled zones with TLSA records
727 PKIX based Trust Anchor TLSA records (Cert Usage 0)
1,598 PKIX based End Entity TLSA records (Cert Usage 1)
9,183 DANE based Trust Anchor TLSA records (Cert Usage 2)
246,023 DANE based End Entity TLSA records (Cert Usage 3)
1,960 Zones have deployed TLSA for Secure POP3 (Port 995)
295 Zones have deployed TLSA for Alternate SMTP (Port 2525)
1,545 Zones have deployed TLSA for POP3 (Port 110)
2,932 Zones have deployed TLSA for Secure SMTP (Port 465)
149,131 Zones have deployed TLSA for HTTPS (Port 443)
3,545 Zones have deployed TLSA for SMTP with STARTTLS (Port 587)
2,582 Zones have deployed TLSA for Secure IMAP (Port 993)
94,315 Zones have deployed TLSA for SMTP (Port 25)
1,231 Zones have deployed TLSA for IMAP (Port 143)