Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-03-28 15:56:22 UTC

Analyzing DNSSEC problems for srv1.dk

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
dk
Found 1 DS records for dk in the . zone
DS=21369/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=30903 and DNSKEY=30903 verifies the DS RRset
Found 3 DNSKEY records for dk
DS=21369/SHA-256 verifies DNSKEY=21369/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=21369 and DNSKEY=21369/SEP verifies the DNSKEY RRset
srv1.dk
Found 3 DS records for srv1.dk in the dk zone
DS=40649/SHA-1 uses a deprecated digest algorithm
DS=40649/SHA-256 has algorithm ECDSAP256SHA256
DS=40649/SHA-1 has algorithm ECDSAP256SHA256
DS=40649/SHA-384 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=25829 and DNSKEY=25829 verifies the DS RRset
Found 1 DNSKEY records for srv1.dk
DS=40649/SHA-256 verifies DNSKEY=40649/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=40649 and DNSKEY=40649/SEP verifies the DNSKEY RRset
ns3.srv1.dk returns REFUSED for srv1.dk/A
All Queries to ns2.srv1.dk for srv1.dk/A timed out or failed
ns1.srv1.dk is authoritative for srv1.dk
srv1.dk A RR has value 94.231.110.90
Found 1 RRSIGs over A RRset
RRSIG=40649 and DNSKEY=40649/SEP verifies the A RRset
srv1.dk
No response from srv1.dk nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test srv1.dk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options