Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-03-29 08:26:57 UTC

Analyzing DNSSEC problems for state.ma.us

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
us
Found 1 DS records for us in the . zone
DS=59017/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=30903 and DNSKEY=30903 verifies the DS RRset
Found 3 DNSKEY records for us
DS=59017/SHA-256 verifies DNSKEY=59017/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=54159 and DNSKEY=54159 verifies the DNSKEY RRset
state.ma.us
Found 2 DS records for state.ma.us in the us zone
DS=54412/SHA-1 uses a deprecated digest algorithm
DS=54412/SHA-256 has algorithm RSASHA256
DS=54412/SHA-1 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=54159 and DNSKEY=54159 verifies the DS RRset
Query sent to 193.108.91.243, but response received from ; ignoring
Found 3 DNSKEY records for state.ma.us
DS=54412/SHA-256 verifies DNSKEY=54412/SEP
Found 3 RRSIGs over DNSKEY RRset
RRSIG=5868 and DNSKEY=5868 verifies the DNSKEY RRset
a5-66.akam.net is authoritative for state.ma.us
Found 2 RRSIGs over SOA RRset
RRSIG=5868 and DNSKEY=5868 verifies the SOA RRset
state.ma.us
a11-66.akam.net is authoritative for state.ma.us
Found 2 RRSIGs over SOA RRset
RRSIG=5868 and DNSKEY=5868 verifies the SOA RRset
state.ma.us
a18-66.akam.net is authoritative for state.ma.us
Found 2 RRSIGs over SOA RRset
RRSIG=5868 and DNSKEY=5868 verifies the SOA RRset
state.ma.us
a1-243.akam.net is authoritative for state.ma.us
Found 2 RRSIGs over SOA RRset
RRSIG=5868 and DNSKEY=5868 verifies the SOA RRset
state.ma.us
a16-64.akam.net is authoritative for state.ma.us
Found 2 RRSIGs over SOA RRset
RRSIG=5868 and DNSKEY=5868 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test state.ma.us at dnsviz.net.

DNSSEC Debugger

↓ Advanced options