Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-05-18 08:04:20 UTC

Analyzing DNSSEC problems for dcma.mil

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
mil
Found 1 DS records for mil in the . zone
DS=16801/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
Found 3 DNSKEY records for mil
DS=16801/SHA-256 verifies DNSKEY=16801/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
dcma.mil
Found 2 DS records for dcma.mil in the mil zone
DS=54637/SHA-1 uses a deprecated digest algorithm
DS=54637/SHA-1 has algorithm RSASHA256
DS=54637/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=45154 and DNSKEY=45154 verifies the DS RRset
Found 3 DNSKEY records for dcma.mil
DS=54637/SHA-1 verifies DNSKEY=54637/SEP
Found 3 RRSIGs over DNSKEY RRset
RRSIG=53694 and DNSKEY=53694 verifies the DNSKEY RRset
NS3.DCMA.MIL is authoritative for dcma.mil
No RRSIGs found
dcma.mil
NS4.DCMA.MIL is authoritative for dcma.mil
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dcma.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options