Detailed Monitoring Summary:

DNSSEC Summary
16,131,374 Zones
13,538,317 DNSSEC enabled zones
11,990,899 Zones use both KSKs and ZSKs
56 Zones are serving revoked keys
9,246,800 DNSSEC verified zones
10,977,115 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
ECDSA Curve P-256 with SHA-256 [ECDSAP256SHA256]7,467,748
RSA/SHA256 [RSASHA256]19,257,760
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]119,828
ECC/GOST [ECC-GOST]8
Unknown Algorithm1,423
RSA/SHA512 [RSASHA512]296,777
DSA-NSEC3-SHA1 [DSA-NSEC3-SHA1]13
ECDSA Curve P-384 with SHA-384 [ECDSAP384SHA384]176,095
RSA/MD5 [RSAMD5]3
Private [PRIVATEOID]1
RSA/SHA-1 [RSASHA1]86,227
DSA/SHA-1 [DSA]51
DANE Summary
565,438 DANE enabled zones with TLSA records
392 PKIX based Trust Anchor TLSA records (Cert Usage 0)
1,409 PKIX based End Entity TLSA records (Cert Usage 1)
7,705 DANE based Trust Anchor TLSA records (Cert Usage 2)
264,914 DANE based End Entity TLSA records (Cert Usage 3)
1,343 Zones have deployed TLSA for IMAP (Port 143)
107,565 Zones have deployed TLSA for SMTP (Port 25)
2,746 Zones have deployed TLSA for SMTP with STARTTLS (Port 587)
1,033 Zones have deployed TLSA for POP3 (Port 110)
2,155 Zones have deployed TLSA for Secure SMTP (Port 465)
155,927 Zones have deployed TLSA for HTTPS (Port 443)
1,951 Zones have deployed TLSA for Secure IMAP (Port 993)
316 Zones have deployed TLSA for Alternate SMTP (Port 2525)
1,388 Zones have deployed TLSA for Secure POP3 (Port 995)