DNSSEC Analyzer - CONSUMERSENTINELNETWORK.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-02-21 07:17:06 UTC, NTP stratum 4

Analyzing DNSSEC problems for CONSUMERSENTINELNETWORK.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for ./DNSKEY: 'IPv6 transport disabled'
	Received 1425 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (1425 bytes) ;; HEADER SECTION ;; id = 46216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== ) . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	DNSKEY=19164/SEP is revoked
	Found 2 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== )`
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=19164/SEP is now in the chain-of-trust
	Query to d.root-servers.net for CONSUMERSENTINELNETWORK.GOV/A
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for CONSUMERSENTINELNETWORK.GOV/A: 'IPv6 transport disabled'
	Received 682 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (682 bytes) ;; HEADER SECTION ;; id = 16148 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190306050000 20190221040000 16749 . E1ZZ21bA8ntnR2CcQN68ZRPbsangjIdlWglLY09Ovt7w/c0Jubpl+Z6Kb6ScW5VpXIX2ySL/V6xO g3DzFUWcdAc+VfV8/qUweOan2yfDwtNtx+Hdal+5fDRYPeHewLu1V8Qmvl4aR9ig5fJ5/05KVZUc 9eu2qyF3I9ahzTkpoVDlY2yw8PLY1Te0CTwoH24FNT77SMPrPasJ/ay+6TlCrusF0tPktBknl99R U3o/6mZJm7coFIqcW7osTa8dABGh1hdfrs1Xgkl+yGw9OCgUQpA3AZcN3m0YLG1bKckQ8QRiXNhV +73NyoWa1eUCuSZfwEZ8Cj6qU68UZm0JDCbb7w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (661 bytes) ;; HEADER SECTION ;; id = 9261 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190306050000 20190221040000 16749 . E1ZZ21bA8ntnR2CcQN68ZRPbsangjIdlWglLY09Ovt7w/c0Jubpl+Z6Kb6ScW5VpXIX2ySL/V6xO g3DzFUWcdAc+VfV8/qUweOan2yfDwtNtx+Hdal+5fDRYPeHewLu1V8Qmvl4aR9ig5fJ5/05KVZUc 9eu2qyF3I9ahzTkpoVDlY2yw8PLY1Te0CTwoH24FNT77SMPrPasJ/ay+6TlCrusF0tPktBknl99R U3o/6mZJm7coFIqcW7osTa8dABGh1hdfrs1Xgkl+yGw9OCgUQpA3AZcN3m0YLG1bKckQ8QRiXNhV +73NyoWa1eUCuSZfwEZ8Cj6qU68UZm0JDCbb7w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Received 403 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (403 bytes) ;; HEADER SECTION ;; id = 8025 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190306050000 20190221040000 16749 . E1ZZ21bA8ntnR2CcQN68ZRPbsangjIdlWglLY09Ovt7w/c0Jubpl+Z6Kb6ScW5VpXIX2ySL/V6xO g3DzFUWcdAc+VfV8/qUweOan2yfDwtNtx+Hdal+5fDRYPeHewLu1V8Qmvl4aR9ig5fJ5/05KVZUc 9eu2qyF3I9ahzTkpoVDlY2yw8PLY1Te0CTwoH24FNT77SMPrPasJ/ay+6TlCrusF0tPktBknl99R U3o/6mZJm7coFIqcW7osTa8dABGh1hdfrs1Xgkl+yGw9OCgUQpA3AZcN3m0YLG1bKckQ8QRiXNhV +73NyoWa1eUCuSZfwEZ8Cj6qU68UZm0JDCbb7w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190306050000 20190221040000 16749 . E1ZZ21bA8ntnR2CcQN68ZRPbsangjIdlWglLY09Ovt7w/c0Jubpl+Z6Kb6ScW5VpXIX2ySL/V6xO g3DzFUWcdAc+VfV8/qUweOan2yfDwtNtx+Hdal+5fDRYPeHewLu1V8Qmvl4aR9ig5fJ5/05KVZUc 9eu2qyF3I9ahzTkpoVDlY2yw8PLY1Te0CTwoH24FNT77SMPrPasJ/ay+6TlCrusF0tPktBknl99R U3o/6mZJm7coFIqcW7osTa8dABGh1hdfrs1Xgkl+yGw9OCgUQpA3AZcN3m0YLG1bKckQ8QRiXNhV +73NyoWa1eUCuSZfwEZ8Cj6qU68UZm0JDCbb7w== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (743 bytes) ;; HEADER SECTION ;; id = 46279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190303224731 20190216224231 7698 gov. IJNwadcbltKxKxpP+0War8mfKnzLNyIo0YNGrdFE9Fn7taZx50JinEvHHTS03gEoZqEm8G1JnFFr sWxiQlUZOVR3J+jdKiZ9UM+RC6Fxo2rXJ2T+PCGz6S2C8/Xl9YCPiV17a/HiPZhuwF4U+n6Np1ox bSfY1/GRL4oN5r6OMlEfqZAdoZh58axSBByvbDNcxC7j40RUFGYzvvpUYsj4DLcJlw+LS0zt0hVs iVfQmnQXiHx5ku0riOJQf8zMtnQ/R1ZiwdsBuDvrM7I5GndEBZFlb6O16eLs84ibjD2+R+4QE1lw INZzWsKg5G7B3qRnULzqjEbmY4adUMCN5CGMwg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190303224731 20190216224231 7698 gov. IJNwadcbltKxKxpP+0War8mfKnzLNyIo0YNGrdFE9Fn7taZx50JinEvHHTS03gEoZqEm8G1JnFFr sWxiQlUZOVR3J+jdKiZ9UM+RC6Fxo2rXJ2T+PCGz6S2C8/Xl9YCPiV17a/HiPZhuwF4U+n6Np1ox bSfY1/GRL4oN5r6OMlEfqZAdoZh58axSBByvbDNcxC7j40RUFGYzvvpUYsj4DLcJlw+LS0zt0hVs iVfQmnQXiHx5ku0riOJQf8zMtnQ/R1ZiwdsBuDvrM7I5GndEBZFlb6O16eLs84ibjD2+R+4QE1lw INZzWsKg5G7B3qRnULzqjEbmY4adUMCN5CGMwg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=28157 is now in the chain-of-trust
	Query to c.gov-servers.net for CONSUMERSENTINELNETWORK.GOV/A
	Received 351 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (351 bytes) ;; HEADER SECTION ;; id = 56638 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 1 609f0e817ed813beed422c7451052b65ed0554d6 ) CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 2 9e8204c63acf2c2563e50d787fa180a4cb730d962adc2f8b16b0dc85089a3f0f ) CONSUMERSENTINELNETWORK.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190228041006 20190221041006 28157 gov. qecjgbVAP/D5y1gPamCyjYAJh0NnVlU0kqSrGm3utF3ZFvI5YuONOPsLYceS2OSTc/GbsFNOnutt 7xLyi61Dz/XBvDOyCX/DIozmz9bmsAzGbp2p+eo5vRJzOC4iZK2PdMo221qMHxqtJdWs2vTwx5s/ 5KOXYWK9ULFQz4E3r18= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.gov-servers.net for CONSUMERSENTINELNETWORK.GOV/DNSKEY
	Received 351 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (351 bytes) ;; HEADER SECTION ;; id = 14567 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 1 609f0e817ed813beed422c7451052b65ed0554d6 ) CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 2 9e8204c63acf2c2563e50d787fa180a4cb730d962adc2f8b16b0dc85089a3f0f ) CONSUMERSENTINELNETWORK.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190228041006 20190221041006 28157 gov. qecjgbVAP/D5y1gPamCyjYAJh0NnVlU0kqSrGm3utF3ZFvI5YuONOPsLYceS2OSTc/GbsFNOnutt 7xLyi61Dz/XBvDOyCX/DIozmz9bmsAzGbp2p+eo5vRJzOC4iZK2PdMo221qMHxqtJdWs2vTwx5s/ 5KOXYWK9ULFQz4E3r18= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone CONSUMERSENTINELNETWORK.GOV

CONSUMERSENTINELNETWORK.GOV

	Checking DS between GOV and CONSUMERSENTINELNETWORK.GOV
	Query to c.gov-servers.net for CONSUMERSENTINELNETWORK.GOV/DS
	Received 303 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (303 bytes) ;; HEADER SECTION ;; id = 31230 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN DS ;; ANSWER SECTION (3 records) CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 1 609f0e817ed813beed422c7451052b65ed0554d6 ) CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 2 9e8204c63acf2c2563e50d787fa180a4cb730d962adc2f8b16b0dc85089a3f0f ) CONSUMERSENTINELNETWORK.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190228041006 20190221041006 28157 gov. qecjgbVAP/D5y1gPamCyjYAJh0NnVlU0kqSrGm3utF3ZFvI5YuONOPsLYceS2OSTc/GbsFNOnutt 7xLyi61Dz/XBvDOyCX/DIozmz9bmsAzGbp2p+eo5vRJzOC4iZK2PdMo221qMHxqtJdWs2vTwx5s/ 5KOXYWK9ULFQz4E3r18= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for CONSUMERSENTINELNETWORK.GOV in the GOV zone
	DS=24370/SHA-1 has algorithm RSASHA256
	DS=24370/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`CONSUMERSENTINELNETWORK.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190228041006 20190221041006 28157 gov. qecjgbVAP/D5y1gPamCyjYAJh0NnVlU0kqSrGm3utF3ZFvI5YuONOPsLYceS2OSTc/GbsFNOnutt 7xLyi61Dz/XBvDOyCX/DIozmz9bmsAzGbp2p+eo5vRJzOC4iZK2PdMo221qMHxqtJdWs2vTwx5s/ 5KOXYWK9ULFQz4E3r18= )`
	RRSIG=28157 and DNSKEY=28157 verifies the DS RRset
	DS=24370/SHA-1 is now in the chain-of-trust
	`CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 1 609f0e817ed813beed422c7451052b65ed0554d6 )`
	`CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 2 9e8204c63acf2c2563e50d787fa180a4cb730d962adc2f8b16b0dc85089a3f0f )`
	Query to dns1.l-secb.net for CONSUMERSENTINELNETWORK.GOV/DNSKEY
	Error querying dns1.l-secb.net/2001:1900:2268:770:198:77:70:37 for CONSUMERSENTINELNETWORK.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1317 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (1317 bytes) ;; HEADER SECTION ;; id = 6890 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAd+s+zGUoZmg2BhIxbaMavaJMoBB8GQzIhbLRflgm2DRI+zOKYx1myGVtP2joN/Z9T3QiFJI o0uWfBBCWe7VbbJwbUeD/y6Ekun8w+j2n/i0SUhbROVKUaMo1bxO2+uXEA+iU9WjkJdIBbtiVbpQ zAIpSn8uf2Inbmcjr/3Qpmih ) ; Key ID = 29649 CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZdJ1wXceVxqcHbiy9imrJv7vI8w6gfIS8TqHbXzWPtBsTEkCIJrcIpkAjimcyZxXvfZGZbl DNsbn+6UJwRrKkDcEwZDDnywnhsI3+Gi1+OtekutTzLsibe4QJWSB8oBFLeHx9eGgaZxr6FaiejU 440robWRn6N9sM3eHwgp2J25 ) ; Key ID = 42663 CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbrAaPZBzkrn80ZQU94uUPA4O7T+DN11dMVBsd84MnDhTdZ4b7MR0WP0RnguvdTNaSfKFJzV /cg0OyT26vko2byJHp1IMPVN3ytMYXrFpStUNHGCI/32i9Sfi38uV8HAvEvBZGvCj32hvUE7MbRe xUwH6faSveSkpfbauazsfJL6mCudiM0hqozJkFrb+xTMX2cFZBYgx92STgfGPEJIo1/MgO7xga8a 3fYaG8yulkeKgnIfGCCGwsdYoEGOMbDeTMLmNEI387QFO43vW+kYADO5zPfQO69VcszD1e8zOyfc GGB7MBw6jUyaIrX0WESk5Z5y+KUsXpeXKqD0Af35z5c= ) ; Key ID = 24370 CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227230911 20190220230911 29649 consumersentinelnetwork.gov. oZLXCPEpRTUbJN1pwnX4ZkC+zQSnftLTuBONCw3V169wSfV9TSXBEhFMNkFlscNFd7iZ75AwkjKs KEOjvJRNH9rY0Y446EVv9hAi5ZM5dS9JaylgHjYD9qswlD/3zqjB6Cf2qfz5Y1u1E65VK+rrpRPI sgvCQdeGNH7xuirfm+M= ) CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227230911 20190220230911 42663 consumersentinelnetwork.gov. dVsjUPSgArxqzpxUs5uviXNzNN09Cmb00z2szrxJkgS+HG96Q4ixF6KUbwxFVWUFmzaThCWTXz6G bWU+VmIroMjyiKJuAwt8UXVuNqL9SFb0VThclKDRsCQaWwNifThOu84+nERXkYdan1e4xaHmS1K2 ovmfPMcXNoZAgIYQQBc= ) CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227230911 20190220230911 24370 consumersentinelnetwork.gov. S1FvaEgL/hX2FrZ2dO7QDktEkUXEB0MbpkwPKSRQODZ6nthk6S4PKWT2JuJDefiz4NbEwy198+37 mrbrPcBVYtxWKUFEmy3xwvXBaEzORTlxPwRfnJhuFBUnUMNwD/gWGblcY8ubKHkL/DtzfVfd8cyn TVKgjbiNrdxCnLRAF2Dmh5WreTKPFyBEOPqh8LGbRBDVfpjul/i70U9DYYOKdJX131erG0PEpJ8a BreUup/BgGoWGk4arAuXy1KK8tUC67O8qz4NSybelz2aIAFt0BJpFPXTCshhcSqk/33dBc51Pt5b 9oNZzonvVohpRS8eXUrjnxLMqj6uWJhT9IFDvw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for CONSUMERSENTINELNETWORK.GOV
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAd+s+zGUoZmg2BhIxbaMavaJMoBB8GQzIhbLRflgm2DRI+zOKYx1myGVtP2joN/Z9T3QiFJI o0uWfBBCWe7VbbJwbUeD/y6Ekun8w+j2n/i0SUhbROVKUaMo1bxO2+uXEA+iU9WjkJdIBbtiVbpQ zAIpSn8uf2Inbmcjr/3Qpmih ) ; Key ID = 29649`
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZdJ1wXceVxqcHbiy9imrJv7vI8w6gfIS8TqHbXzWPtBsTEkCIJrcIpkAjimcyZxXvfZGZbl DNsbn+6UJwRrKkDcEwZDDnywnhsI3+Gi1+OtekutTzLsibe4QJWSB8oBFLeHx9eGgaZxr6FaiejU 440robWRn6N9sM3eHwgp2J25 ) ; Key ID = 42663`
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbrAaPZBzkrn80ZQU94uUPA4O7T+DN11dMVBsd84MnDhTdZ4b7MR0WP0RnguvdTNaSfKFJzV /cg0OyT26vko2byJHp1IMPVN3ytMYXrFpStUNHGCI/32i9Sfi38uV8HAvEvBZGvCj32hvUE7MbRe xUwH6faSveSkpfbauazsfJL6mCudiM0hqozJkFrb+xTMX2cFZBYgx92STgfGPEJIo1/MgO7xga8a 3fYaG8yulkeKgnIfGCCGwsdYoEGOMbDeTMLmNEI387QFO43vW+kYADO5zPfQO69VcszD1e8zOyfc GGB7MBw6jUyaIrX0WESk5Z5y+KUsXpeXKqD0Af35z5c= ) ; Key ID = 24370`
	DNSKEY=24370/SEP is now in the chain-of-trust
	DS=24370/SHA-1 verifies DNSKEY=24370/SEP
	DS=24370/SHA-256 verifies DNSKEY=24370/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227230911 20190220230911 29649 consumersentinelnetwork.gov. oZLXCPEpRTUbJN1pwnX4ZkC+zQSnftLTuBONCw3V169wSfV9TSXBEhFMNkFlscNFd7iZ75AwkjKs KEOjvJRNH9rY0Y446EVv9hAi5ZM5dS9JaylgHjYD9qswlD/3zqjB6Cf2qfz5Y1u1E65VK+rrpRPI sgvCQdeGNH7xuirfm+M= )`
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227230911 20190220230911 42663 consumersentinelnetwork.gov. dVsjUPSgArxqzpxUs5uviXNzNN09Cmb00z2szrxJkgS+HG96Q4ixF6KUbwxFVWUFmzaThCWTXz6G bWU+VmIroMjyiKJuAwt8UXVuNqL9SFb0VThclKDRsCQaWwNifThOu84+nERXkYdan1e4xaHmS1K2 ovmfPMcXNoZAgIYQQBc= )`
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190227230911 20190220230911 24370 consumersentinelnetwork.gov. S1FvaEgL/hX2FrZ2dO7QDktEkUXEB0MbpkwPKSRQODZ6nthk6S4PKWT2JuJDefiz4NbEwy198+37 mrbrPcBVYtxWKUFEmy3xwvXBaEzORTlxPwRfnJhuFBUnUMNwD/gWGblcY8ubKHkL/DtzfVfd8cyn TVKgjbiNrdxCnLRAF2Dmh5WreTKPFyBEOPqh8LGbRBDVfpjul/i70U9DYYOKdJX131erG0PEpJ8a BreUup/BgGoWGk4arAuXy1KK8tUC67O8qz4NSybelz2aIAFt0BJpFPXTCshhcSqk/33dBc51Pt5b 9oNZzonvVohpRS8eXUrjnxLMqj6uWJhT9IFDvw== )`
	RRSIG=29649 and DNSKEY=29649 verifies the DNSKEY RRset
	RRSIG=42663 and DNSKEY=42663 verifies the DNSKEY RRset
	RRSIG=24370 and DNSKEY=24370/SEP verifies the DNSKEY RRset
	DNSKEY=29649 is now in the chain-of-trust
	DNSKEY=42663 is now in the chain-of-trust
	Query to dns1.l-secb.net for CONSUMERSENTINELNETWORK.GOV/A
	Error querying dns1.l-secb.net/2001:1900:2268:770:198:77:70:37 for CONSUMERSENTINELNETWORK.GOV/A: 'IPv6 transport disabled'
	Received 954 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (954 bytes) ;; HEADER SECTION ;; id = 41870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2018062001 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20190227025043 20190220025043 29649 consumersentinelnetwork.gov. hK3dX+7EdWgq/KE2lPt53s5VZHJSoh52sTarHZKGUGQcenlRGyMe25KDqJ5vI9O2j6G5HMZpG1lL sx8WwMIBpeSG789dQc/ahq27VXeBXN5jnOqU2cTJc44XZtZRP56bNGDbfQII5Vc06sKsDi7vF4kp W2nyJLd598dfdg0QKTY= ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20190227220632 20190220220632 42663 consumersentinelnetwork.gov. I/6p0jBMIheUPBVKoB39tsmtpB0wYIs/Uit+MPU+9HOBswJ1bc9pd+VSHhqVht9Ekby5tGWIWTlf ZYO6nmUKPgwWn/XfbAilDPQkVfSdnRJ6VY+rPREdu0YI4eA/DBNDbqdH8d5TineK1gO4zxTTVSrS SD0zVEItDjeoTXVlBvc= ) mng65mocq04mjvfmg57rnf2bu4qufah1.CONSUMERSENTINELNETWORK.GOV. 900 IN NSEC3 ( 1 0 1 158bae2c9c2f9e95 mng65mocq04mjvfmg57rnf2bu4qufah2 NS SOA RRSIG DNSKEY NSEC3PARAM ) mng65mocq04mjvfmg57rnf2bu4qufah1.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20190227065311 20190220065311 29649 consumersentinelnetwork.gov. RlfFfpfPy11FyJJMxIpvf9qdq/GluklGmSmEvDjoAs5OzNUm5L/ssF/+fY2dacTO2ZFxlC23111E qJWQY/Hl2xwiKDtSz2GPaY1Uzn79Dr8y7vRPwYo5zfe7fPv69/gDmYmN7s6dBB/LmQNHTuJEJTsD 5cr70Upm2iZvRtLvhl8= ) mng65mocq04mjvfmg57rnf2bu4qufah1.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20190227222702 20190220222702 42663 consumersentinelnetwork.gov. g3Y39bZYmYsSdbcg04EuOq6qVi0Se1+4myDhARJqLiwvyE43Lp8Ev0KVrGeZA2S3bhwWegM3zc6q daiwqjTZRTxHa3AF5V6DwYxWl1AH9U2XgYxtbifs1r8RTHJcg674tXO9ueL6qgo2amc1Gx/QUmgk Ijv7iaSAHwrJLwCVgOM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CONSUMERSENTINELNETWORK.GOV is authoritative for CONSUMERSENTINELNETWORK.GOV
	Found RRSIG signed by consumersentinelnetwork.gov zone
	Query to dns3.l-secb.net for CONSUMERSENTINELNETWORK.GOV/SOA
	Error querying dns3.l-secb.net/2600:1f14:a2e:4b00:35:163:67:210 for CONSUMERSENTINELNETWORK.GOV/SOA: 'IPv6 transport disabled'
	Received 987 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (987 bytes) ;; HEADER SECTION ;; id = 29620 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2018062001 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20190228000159 20190221000159 42663 consumersentinelnetwork.gov. IwNOvWUvpLVRbY4FGV2A/thG1waNFBbUNWn3/8FcHvCvUvPWpdl4kjbSO67beEYlDRpYb2lrDAtx bBVIBupP3H5scRyURgmkkn18ZtESs5UgK5zHC1Oe2RQn14sSfpreYMM6w9pl3I86xf2YT1zYI5IL TfaH/mMczxkikbJG/cQ= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20190228071706 20190221071706 29649 consumersentinelnetwork.gov. VgpGIG8os7SG1NnkU2q2MXN1SFYdR+QQEjDYclQBEj0VLZTs4IOZzwclK6Gj3QCUakjWBoAR9Lkx VTMyVEmht1Eb+jkWd/9sP3WRGDmL8fglBA6qQL6Bkq5JTKs9PZWElLgSBP6TDAt6FdvO6qTkno4x vC1bBqofWpjMZSTXnps= ) ;; AUTHORITY SECTION (4 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20190227170806 20190220170806 29649 consumersentinelnetwork.gov. P8gxSeAFL/bx+E2NDTbsPsx32n7w1NKXBtwPehPA7zY/8jvghziObaTB8eA1OITZdWKeou2vnug4 QwFmIGHsvKfYgtp1bya0k89otXf7fJvtXFOxXQYmYEsHpDFbQFfhFCJXvUXyVSgbEulNVOeDMgH1 GEEFiMlt2JC4/QIBLWE= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20190227230721 20190220230721 42663 consumersentinelnetwork.gov. V+RH40BS3cmpmaIjwZtJt8mVKQ8FylsnP2NFlS6HYaLN8lIHI3Hyn1G6569htNCW+zYGcc8P080z n5d2WFMOWkndkpTt0eKuH11PGx/zt7l2slQ7C8oDNWs2wLYTIkvBrgxfcusVVtidGJFqLhLTTN88 tE+EbYx+S5DE0KmAewc= ) ;; ADDITIONAL SECTION (5 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for CONSUMERSENTINELNETWORK.GOV/SOA
	Received 987 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (987 bytes) ;; HEADER SECTION ;; id = 3696 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2018062001 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20190228000200 20190221000200 42663 consumersentinelnetwork.gov. Y95RlfOC3syJTuu8pSkzoktDS/O1NKoHUT1VzdICuT3SPdUfGl3C5ZLRJD08VNNxePEe5U3jCYwp 6iKHCpav9rk+r9ew9hxHSCSQ8djivde7DQwWmoD+zanlmLGCee3qvfCQ6A7gxvb5YAR0F5Msy+lT R0M3PSX6alOI73AgU+c= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20190228071706 20190221071706 29649 consumersentinelnetwork.gov. VgpGIG8os7SG1NnkU2q2MXN1SFYdR+QQEjDYclQBEj0VLZTs4IOZzwclK6Gj3QCUakjWBoAR9Lkx VTMyVEmht1Eb+jkWd/9sP3WRGDmL8fglBA6qQL6Bkq5JTKs9PZWElLgSBP6TDAt6FdvO6qTkno4x vC1bBqofWpjMZSTXnps= ) ;; AUTHORITY SECTION (4 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20190227042450 20190220042450 29649 consumersentinelnetwork.gov. XejdpfouJ2S9us7RLn59pAN3ycDBl8OPEl2bzJt9uAA6FwJqpTFJCFlsl4JQy03zkGdh2iVN0AVV BTFVfWIv4NC0gsz8124Tmr8SCoQQAV1jFaRKpqFtHggJ11wYbeoYQHcreFfof73Rt2b8ymsTrcle RoJakscm+zw+VSGGyWM= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20190227230031 20190220230031 42663 consumersentinelnetwork.gov. AXyve5KklAQFk+pgpCbYOuXa7Jp0+BkHFSa2ak9GVAAinrLmmjslRjAwteuYfF7rgXAbuK7vhYh1 /1Mo2c8CuHykHuZ8FUlDFAjF2dyFn9OOlj4aQofgHOQVa3fugl01Fr6p0cniQnPlpYpT/gi2ww4V o001v9U/2cyLqiAenGc= ) ;; ADDITIONAL SECTION (5 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for CONSUMERSENTINELNETWORK.GOV/A
	Received 954 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (954 bytes) ;; HEADER SECTION ;; id = 40649 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2018062001 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20190227025043 20190220025043 29649 consumersentinelnetwork.gov. hK3dX+7EdWgq/KE2lPt53s5VZHJSoh52sTarHZKGUGQcenlRGyMe25KDqJ5vI9O2j6G5HMZpG1lL sx8WwMIBpeSG789dQc/ahq27VXeBXN5jnOqU2cTJc44XZtZRP56bNGDbfQII5Vc06sKsDi7vF4kp W2nyJLd598dfdg0QKTY= ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20190227220632 20190220220632 42663 consumersentinelnetwork.gov. I/6p0jBMIheUPBVKoB39tsmtpB0wYIs/Uit+MPU+9HOBswJ1bc9pd+VSHhqVht9Ekby5tGWIWTlf ZYO6nmUKPgwWn/XfbAilDPQkVfSdnRJ6VY+rPREdu0YI4eA/DBNDbqdH8d5TineK1gO4zxTTVSrS SD0zVEItDjeoTXVlBvc= ) mng65mocq04mjvfmg57rnf2bu4qufah1.CONSUMERSENTINELNETWORK.GOV. 900 IN NSEC3 ( 1 0 1 158bae2c9c2f9e95 mng65mocq04mjvfmg57rnf2bu4qufah2 NS SOA RRSIG DNSKEY NSEC3PARAM ) mng65mocq04mjvfmg57rnf2bu4qufah1.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20190227065311 20190220065311 29649 consumersentinelnetwork.gov. RlfFfpfPy11FyJJMxIpvf9qdq/GluklGmSmEvDjoAs5OzNUm5L/ssF/+fY2dacTO2ZFxlC23111E qJWQY/Hl2xwiKDtSz2GPaY1Uzn79Dr8y7vRPwYo5zfe7fPv69/gDmYmN7s6dBB/LmQNHTuJEJTsD 5cr70Upm2iZvRtLvhl8= ) mng65mocq04mjvfmg57rnf2bu4qufah1.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20190227222702 20190220222702 42663 consumersentinelnetwork.gov. g3Y39bZYmYsSdbcg04EuOq6qVi0Se1+4myDhARJqLiwvyE43Lp8Ev0KVrGeZA2S3bhwWegM3zc6q daiwqjTZRTxHa3AF5V6DwYxWl1AH9U2XgYxtbifs1r8RTHJcg674tXO9ueL6qgo2amc1Gx/QUmgk Ijv7iaSAHwrJLwCVgOM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20190227025043 20190220025043 29649 consumersentinelnetwork.gov. hK3dX+7EdWgq/KE2lPt53s5VZHJSoh52sTarHZKGUGQcenlRGyMe25KDqJ5vI9O2j6G5HMZpG1lL sx8WwMIBpeSG789dQc/ahq27VXeBXN5jnOqU2cTJc44XZtZRP56bNGDbfQII5Vc06sKsDi7vF4kp W2nyJLd598dfdg0QKTY= )`
	`CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20190227220632 20190220220632 42663 consumersentinelnetwork.gov. I/6p0jBMIheUPBVKoB39tsmtpB0wYIs/Uit+MPU+9HOBswJ1bc9pd+VSHhqVht9Ekby5tGWIWTlf ZYO6nmUKPgwWn/XfbAilDPQkVfSdnRJ6VY+rPREdu0YI4eA/DBNDbqdH8d5TineK1gO4zxTTVSrS SD0zVEItDjeoTXVlBvc= )`
	RRSIG=29649 and DNSKEY=29649 verifies the SOA RRset
	RRSIG=42663 and DNSKEY=42663 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test CONSUMERSENTINELNETWORK.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: