The DNSSEC Debugger is a web-based diagnostic tool from VeriSign Labs that validates DNSSEC configurations for a domain. It runs iterative DNS resolution and verifies the DNSSEC chain of trust from the root down to the authoritative zone.

Enter a domain to run checks that validate DNSKEY/DS consistency.
Verifies RRSIG validity and expiry, algorithm mismatches, and missing signatures.
Shows a step-by-step resolution trace with per-step status and diagnostic messages.
Provides "Advanced options" to tune queries and inspect raw DNS responses.
Offers actionable hints for common misconfigurations such as key rollovers or absent DS records.

Use it to quickly locate where a DNSSEC chain breaks and to gather concrete debugging details for fixes.