Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-05-17 09:36:24 UTC

Analyzing DNSSEC problems for aftac.gov

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
gov
Found 1 DS records for gov in the . zone
DS=64280/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
Found 2 DNSKEY records for gov
DS=64280/SHA-256 verifies DNSKEY=64280/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
aftac.gov
No DS records found for aftac.gov in the gov zone
No DNSKEY records found
dstork.aftac.gov is authoritative for aftac.gov
No NSEC records in response
No RRSIGs found
aftac.gov
dsos.aftac.gov is authoritative for aftac.gov
No NSEC records in response
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test aftac.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options