DNSSEC Analyzer - CONSUMERSENTINELNETWORK.GOV

Domain Name:

Time: 2021-04-22 10:16:20 UTC, NTP stratum 4

Analyzing DNSSEC problems for CONSUMERSENTINELNETWORK.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 42242 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to k.root-servers.net for CONSUMERSENTINELNETWORK.GOV/A
	Received 649 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (649 bytes) ;; HEADER SECTION ;; id = 16648 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . pAkjWrKL8QkviX3hidOlwQyHCPdmBNUsEsOyTnAfiZTj12Oh9Cv66L/QdQa/2c9m/+HpFvJgvH5u 9dmHH8MkLnJdpvJprRxsPQFeivKfKJP04MOiewOHemhMRX53CvS+iBpPGzr1jY0NP3xpqRPrZOth fE9x/sWaExbE8FRMDH7DONMq2EivPjBi5p7zF2AasHjE4D1p50Y/casuRDnmvclNdZ3B7DTqX8sx 0s2l1cEIHiPnn8LXBy7yUM/T8vA+rz9HqLwGobTVc8slL+3wW8zcejJtlOBej1GM9Pt7S44hBVB1 UPDNylakIhDLRa/Py5yEn4pL5LuKEJalpjZS3g== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to l.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (622 bytes) ;; HEADER SECTION ;; id = 34776 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . pAkjWrKL8QkviX3hidOlwQyHCPdmBNUsEsOyTnAfiZTj12Oh9Cv66L/QdQa/2c9m/+HpFvJgvH5u 9dmHH8MkLnJdpvJprRxsPQFeivKfKJP04MOiewOHemhMRX53CvS+iBpPGzr1jY0NP3xpqRPrZOth fE9x/sWaExbE8FRMDH7DONMq2EivPjBi5p7zF2AasHjE4D1p50Y/casuRDnmvclNdZ3B7DTqX8sx 0s2l1cEIHiPnn8LXBy7yUM/T8vA+rz9HqLwGobTVc8slL+3wW8zcejJtlOBej1GM9Pt7S44hBVB1 UPDNylakIhDLRa/Py5yEn4pL5LuKEJalpjZS3g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Received 370 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (370 bytes) ;; HEADER SECTION ;; id = 12215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . pAkjWrKL8QkviX3hidOlwQyHCPdmBNUsEsOyTnAfiZTj12Oh9Cv66L/QdQa/2c9m/+HpFvJgvH5u 9dmHH8MkLnJdpvJprRxsPQFeivKfKJP04MOiewOHemhMRX53CvS+iBpPGzr1jY0NP3xpqRPrZOth fE9x/sWaExbE8FRMDH7DONMq2EivPjBi5p7zF2AasHjE4D1p50Y/casuRDnmvclNdZ3B7DTqX8sx 0s2l1cEIHiPnn8LXBy7yUM/T8vA+rz9HqLwGobTVc8slL+3wW8zcejJtlOBej1GM9Pt7S44hBVB1 UPDNylakIhDLRa/Py5yEn4pL5LuKEJalpjZS3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . pAkjWrKL8QkviX3hidOlwQyHCPdmBNUsEsOyTnAfiZTj12Oh9Cv66L/QdQa/2c9m/+HpFvJgvH5u 9dmHH8MkLnJdpvJprRxsPQFeivKfKJP04MOiewOHemhMRX53CvS+iBpPGzr1jY0NP3xpqRPrZOth fE9x/sWaExbE8FRMDH7DONMq2EivPjBi5p7zF2AasHjE4D1p50Y/casuRDnmvclNdZ3B7DTqX8sx 0s2l1cEIHiPnn8LXBy7yUM/T8vA+rz9HqLwGobTVc8slL+3wW8zcejJtlOBej1GM9Pt7S44hBVB1 UPDNylakIhDLRa/Py5yEn4pL5LuKEJalpjZS3g== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 25228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to d.gov-servers.net for CONSUMERSENTINELNETWORK.GOV/A
	Received 402 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (402 bytes) ;; HEADER SECTION ;; id = 36822 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns2.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 2572 8 2 dda3891631489665e374832b982560f28fc1e29dd86f732c55d002d817997da7 ) CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 2572 8 1 0f3bd8726472fa9fcde70a3a4973429444fb5131 ) CONSUMERSENTINELNETWORK.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429091007 20210422091007 48498 gov. PnCwyZmnndInZpg8bb4RX4wMbyt1ljlR9CcQs/yi0XMM1kIk3bfAjHmPEeRKInioccvzS3+ne0zn QDFVfc+PJb6A/IPucUkdF15ZfIF8KQ8I/8bHxd3zVRfgTlFijwQKoFPsIla+722ArefAtJlmlADK UZS6rb9NCnojNjVhpfBlOE8c1XBFVVcJPy0++F7WT+Kn2s/d9x/FO/Simq1DNA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for CONSUMERSENTINELNETWORK.GOV/DNSKEY
	Received 402 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (402 bytes) ;; HEADER SECTION ;; id = 10066 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns2.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 2572 8 2 dda3891631489665e374832b982560f28fc1e29dd86f732c55d002d817997da7 ) CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 2572 8 1 0f3bd8726472fa9fcde70a3a4973429444fb5131 ) CONSUMERSENTINELNETWORK.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429091007 20210422091007 48498 gov. PnCwyZmnndInZpg8bb4RX4wMbyt1ljlR9CcQs/yi0XMM1kIk3bfAjHmPEeRKInioccvzS3+ne0zn QDFVfc+PJb6A/IPucUkdF15ZfIF8KQ8I/8bHxd3zVRfgTlFijwQKoFPsIla+722ArefAtJlmlADK UZS6rb9NCnojNjVhpfBlOE8c1XBFVVcJPy0++F7WT+Kn2s/d9x/FO/Simq1DNA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone CONSUMERSENTINELNETWORK.GOV

CONSUMERSENTINELNETWORK.GOV

	Checking DS between GOV and CONSUMERSENTINELNETWORK.GOV
	Query to b.gov-servers.net for CONSUMERSENTINELNETWORK.GOV/DS
	Received 335 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (335 bytes) ;; HEADER SECTION ;; id = 45274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN DS ;; ANSWER SECTION (3 records) CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 2572 8 2 dda3891631489665e374832b982560f28fc1e29dd86f732c55d002d817997da7 ) CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 2572 8 1 0f3bd8726472fa9fcde70a3a4973429444fb5131 ) CONSUMERSENTINELNETWORK.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429091007 20210422091007 48498 gov. PnCwyZmnndInZpg8bb4RX4wMbyt1ljlR9CcQs/yi0XMM1kIk3bfAjHmPEeRKInioccvzS3+ne0zn QDFVfc+PJb6A/IPucUkdF15ZfIF8KQ8I/8bHxd3zVRfgTlFijwQKoFPsIla+722ArefAtJlmlADK UZS6rb9NCnojNjVhpfBlOE8c1XBFVVcJPy0++F7WT+Kn2s/d9x/FO/Simq1DNA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for CONSUMERSENTINELNETWORK.GOV in the GOV zone
	DS=2572/SHA-256 has algorithm RSASHA256
	DS=2572/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`CONSUMERSENTINELNETWORK.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429091007 20210422091007 48498 gov. PnCwyZmnndInZpg8bb4RX4wMbyt1ljlR9CcQs/yi0XMM1kIk3bfAjHmPEeRKInioccvzS3+ne0zn QDFVfc+PJb6A/IPucUkdF15ZfIF8KQ8I/8bHxd3zVRfgTlFijwQKoFPsIla+722ArefAtJlmlADK UZS6rb9NCnojNjVhpfBlOE8c1XBFVVcJPy0++F7WT+Kn2s/d9x/FO/Simq1DNA== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=2572/SHA-256 is now in the chain-of-trust
	`CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 2572 8 2 dda3891631489665e374832b982560f28fc1e29dd86f732c55d002d817997da7 )`
	`CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 2572 8 1 0f3bd8726472fa9fcde70a3a4973429444fb5131 )`
	Query to dns2.l-secb.net for CONSUMERSENTINELNETWORK.GOV/DNSKEY
	Received 1317 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (1317 bytes) ;; HEADER SECTION ;; id = 20733 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcmOmvshjzlmJCnQO0JKx58jmAi889GFcwWN+z2Z8r8wgyLN7cedUBqIEGoyjvveGbwbsOPL jxhRgY8MSJFitV8tp9EF8ko/nrdiRck7g/8SCRcsnlveNLcf1UVFJdbIM3nLn4uH0pmg0XMZ5BbD rA8QhzsYgfgmUOsCA+pzlP+5 ) ; Key ID = 29403 CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcyaS//eImyEqhwBz75YSkQ0JKFf/JZ9lvgRUYxQeBIuBmQUkOpeHS31fAcwJdagq9WjbYfn Et+ZAp2UkWLgGXpVvB4xxK+Ek7Vfu7tXZRM2HMunW+6towEmvhe34ezH2ezTCw+r9Qa8LYw2S3k6 f+ZBBGzP69+ziiFvx00bt7s3 ) ; Key ID = 2379 CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAalaLCrmQ65KvNVcPADIz1p+z0hkc7NgxSetz3umuq4D4UTk/798zAVhJ9W6d9Zy1/F/YfZB K77D0IbnfmZ+P0WjuHT/CgFizw2+1BX99/xdPMSvw76PmI3i0GbVko79JIZi7gW7+6I5AvbgL4Cj YIIKLzHdIWUHJ2K8aFlhBQeC7cco7jq+Kxik8S5TacdHuSR0n2dIpRI4E+NB2KAweSS4nZAL1/io 7db+cT89hiR/oqKFkNR7rw1WM2ENNuSO2rCXaZsj1bd4UZ4Zurefv1hLEGOKZ49tq8qqKIA3yvDn wtYzMvDKiUZk8yVBX6lu4gEklr/mE0mI0YBXND2RW/0= ) ; Key ID = 2572 CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210427062902 20210420062902 29403 consumersentinelnetwork.gov. K019ZFBNWNOg9LgSoJ3oqgXBlcZfgGJz8Pcx884mdtsihHFJ3YPxagUVvk1k3ga8zVz9hdaKqvZH e0kqKZQ90wgDdSsFEP8NajU5LOwZE6Bv6Y/c30+uVMFCKzdV/gXDkpoOpQZ6/Hl+ITIRUGS5ow60 KJ5v+QTWfr96WdJijfk= ) CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210427062902 20210420062902 2379 consumersentinelnetwork.gov. HcSb/KzVRleNjra9ZdlYLz6Oad7m12BwhTn5YJIQ6Nc9QaZs3MOKqgwQKOr6PniNbYgmfpk83oi5 RRZCLZd3WB6jySWdINz69oxZtFOOLmZNW9ydIYu1a1xurvFgT9X27DQZuCPYpiOsPKyPxck4u3KV nEvR6LG/gF/46mNtoGo= ) CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210427062902 20210420062902 2572 consumersentinelnetwork.gov. CRbFLRmd5NmtnJo9RdXlKd/mt7M4A2Ucu3xrmsU0dfgabYiqmHFOyVh/YGNSgd379HKc0VIskoGL pJNQJUvsiU+Fa4ixCkWimnzd5j8uwwN0PW4hMYXClsugdA+iIBjLUahLUOvgstyXK/n2F1/jvClQ hsM5I9Zf6S5jcfqDFMDclfbsOrBTr32V0v3jniZUFkLN/LuRwrdUnIpnk6EEIn93eWvC3yNyIIRb wrNwjx5FyZv9zhwLSi6uinCSh8ArduDGqi3/fMt9GtvdEC7yO5w3ydIVVDGR8swhfhLRC6GjKxex v/w3kYQGQz4R2BCAyj8cq1vYpoTBmJP/jYx9vQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for CONSUMERSENTINELNETWORK.GOV
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcmOmvshjzlmJCnQO0JKx58jmAi889GFcwWN+z2Z8r8wgyLN7cedUBqIEGoyjvveGbwbsOPL jxhRgY8MSJFitV8tp9EF8ko/nrdiRck7g/8SCRcsnlveNLcf1UVFJdbIM3nLn4uH0pmg0XMZ5BbD rA8QhzsYgfgmUOsCA+pzlP+5 ) ; Key ID = 29403`
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcyaS//eImyEqhwBz75YSkQ0JKFf/JZ9lvgRUYxQeBIuBmQUkOpeHS31fAcwJdagq9WjbYfn Et+ZAp2UkWLgGXpVvB4xxK+Ek7Vfu7tXZRM2HMunW+6towEmvhe34ezH2ezTCw+r9Qa8LYw2S3k6 f+ZBBGzP69+ziiFvx00bt7s3 ) ; Key ID = 2379`
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAalaLCrmQ65KvNVcPADIz1p+z0hkc7NgxSetz3umuq4D4UTk/798zAVhJ9W6d9Zy1/F/YfZB K77D0IbnfmZ+P0WjuHT/CgFizw2+1BX99/xdPMSvw76PmI3i0GbVko79JIZi7gW7+6I5AvbgL4Cj YIIKLzHdIWUHJ2K8aFlhBQeC7cco7jq+Kxik8S5TacdHuSR0n2dIpRI4E+NB2KAweSS4nZAL1/io 7db+cT89hiR/oqKFkNR7rw1WM2ENNuSO2rCXaZsj1bd4UZ4Zurefv1hLEGOKZ49tq8qqKIA3yvDn wtYzMvDKiUZk8yVBX6lu4gEklr/mE0mI0YBXND2RW/0= ) ; Key ID = 2572`
	DNSKEY=2572/SEP is now in the chain-of-trust
	DS=2572/SHA-256 verifies DNSKEY=2572/SEP
	DS=2572/SHA-1 verifies DNSKEY=2572/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210427062902 20210420062902 29403 consumersentinelnetwork.gov. K019ZFBNWNOg9LgSoJ3oqgXBlcZfgGJz8Pcx884mdtsihHFJ3YPxagUVvk1k3ga8zVz9hdaKqvZH e0kqKZQ90wgDdSsFEP8NajU5LOwZE6Bv6Y/c30+uVMFCKzdV/gXDkpoOpQZ6/Hl+ITIRUGS5ow60 KJ5v+QTWfr96WdJijfk= )`
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210427062902 20210420062902 2379 consumersentinelnetwork.gov. HcSb/KzVRleNjra9ZdlYLz6Oad7m12BwhTn5YJIQ6Nc9QaZs3MOKqgwQKOr6PniNbYgmfpk83oi5 RRZCLZd3WB6jySWdINz69oxZtFOOLmZNW9ydIYu1a1xurvFgT9X27DQZuCPYpiOsPKyPxck4u3KV nEvR6LG/gF/46mNtoGo= )`
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210427062902 20210420062902 2572 consumersentinelnetwork.gov. CRbFLRmd5NmtnJo9RdXlKd/mt7M4A2Ucu3xrmsU0dfgabYiqmHFOyVh/YGNSgd379HKc0VIskoGL pJNQJUvsiU+Fa4ixCkWimnzd5j8uwwN0PW4hMYXClsugdA+iIBjLUahLUOvgstyXK/n2F1/jvClQ hsM5I9Zf6S5jcfqDFMDclfbsOrBTr32V0v3jniZUFkLN/LuRwrdUnIpnk6EEIn93eWvC3yNyIIRb wrNwjx5FyZv9zhwLSi6uinCSh8ArduDGqi3/fMt9GtvdEC7yO5w3ydIVVDGR8swhfhLRC6GjKxex v/w3kYQGQz4R2BCAyj8cq1vYpoTBmJP/jYx9vQ== )`
	RRSIG=29403 and DNSKEY=29403 verifies the DNSKEY RRset
	RRSIG=2379 and DNSKEY=2379 verifies the DNSKEY RRset
	RRSIG=2572 and DNSKEY=2572/SEP verifies the DNSKEY RRset
	DNSKEY=29403 is now in the chain-of-trust
	DNSKEY=2379 is now in the chain-of-trust
	Query to dns3.l-secb.net for CONSUMERSENTINELNETWORK.GOV/A
	Received 954 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (954 bytes) ;; HEADER SECTION ;; id = 35841 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2021020301 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426105355 20210419105355 29403 consumersentinelnetwork.gov. HMhqG/2mfO3im2e29zw9gjLmb4F3jCAMcM2gpYDfWUzpqwjlIa7tCMS1S32jDB6cuvwXmBGkMJ96 JLCcuXrZCKbN2NdbDeQWTsprdVmJRGHMIlPeyAlDGex7oy521VjWz7KU+xq0HOLL5+drPppGeUpZ R5XxpEmEUwhAo/Qk7DM= ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210427072314 20210420072314 2379 consumersentinelnetwork.gov. wugDi1XHd/GCHEksrCZctXSRy0AX4VVdWrkdu/M/Ws6vzyrzkaVZDAKpTf5CYQXHrPBuVFHRO0XS Ziw0qGFXSEk32+HKrss0BXhq4L0ZVsyfOeg0Ykrw5Jonq68oOd8PoDjA11LrBnRpUV6+QX6J5nzG fmAVFkFbafr3mi4QaDU= ) jj2ho4289508377tq96r5n6tejlau508.CONSUMERSENTINELNETWORK.GOV. 900 IN NSEC3 ( 1 0 1 0abee936cf116dd4 jj2ho4289508377tq96r5n6tejlau509 NS SOA RRSIG DNSKEY NSEC3PARAM ) jj2ho4289508377tq96r5n6tejlau508.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426160538 20210419160538 29403 consumersentinelnetwork.gov. s6eegxsYTrwwjlGbENPoRlalS6sLCdX43PW5EPm2apb939wf9bbtkX2WzFWlivNE7myCRKKN1XYL FOHbGC3KQSLtjxGwnImhPFu+Hgiz6kSpKB5nLv7Ms5js4GcXPDgoAxfY87OFgCcC1zLDerUmVQAU d4tGs468e7khHA/UgvA= ) jj2ho4289508377tq96r5n6tejlau508.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210427072314 20210420072314 2379 consumersentinelnetwork.gov. F7zr23mW/CPO+WBXbHvVaXvpwlnbFQrXNzb9e/kEKlkQnyrP3kPFTKor0tHtg5WzAkgatbCbIU/d TdKfsFcPlGJrsDeYxDGp+GBZ3QL+/S+/2FR4WbYD9KmVZtUeVq57z6IGTZuJel+MD4NUSoP5U3l6 mnWggczc6W5JUoJ6xEw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns3.l-secb.net is authoritative for CONSUMERSENTINELNETWORK.GOV
	Found RRSIG signed by consumersentinelnetwork.gov zone
	Query to dns2.l-secb.net for CONSUMERSENTINELNETWORK.GOV/SOA
	Received 987 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (987 bytes) ;; HEADER SECTION ;; id = 3603 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2021020301 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20210429054044 20210422054044 29403 consumersentinelnetwork.gov. nQn4U6Yr3sAPXN3vVh5/Zbp24WR3zkijusJCEEHnnQ/I3Hay9Lg8tm8yJ6xwGMsrg+NMPMYRLuSt dQHWsAvEvg7j8zCtAHDLOr9JKqGTlyNSuQnLLvYKxysdq7JcIPhGtsOrOtzKi5atWr+GNeSppszF UltsBPZH9PylQ7LBoC8= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20210429054044 20210422054044 2379 consumersentinelnetwork.gov. LdPhz7hdvNSf1sakHq/H7jgg7Q6H9c3iTAgnhfClwia+B5vQFUtlQ98pVJIRiKr9pfOQZOJHvSQY YDwwsUZLN0wXRsDu4QqkOYo2WQl+MT2IuW9Ihn2ZOLoFnRhSzURzfGw0SRacDbPBviatc9ZMaYLM UQycOJYn2UsiaqfFIbA= ) ;; AUTHORITY SECTION (4 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20210427131645 20210420131645 29403 consumersentinelnetwork.gov. ZhQm5XXIPMIQLPThtcHtM+H9EUCqfWFp9kXSSQQkHMCvUSBCL1GHvL96W5k6rXv7tc4+pQo0uylk tGKXbKGCL1T7wUjqmFwwvX1P5uxakzhOCpZeJ+HOqLmINZLftgjf91wQIjmo5dPuLiLcC8dJAg0x SRrsycptNiTKwYrm9Qs= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20210428031542 20210421031542 2379 consumersentinelnetwork.gov. e3YRs2dAKiLaovTwz9MO/wO4jFSQ2Oka5MapGOjV676ydvRq3ITR4RGdyFmw60+kQTEkHgYU9qI6 9Sdg/uqLzcyxDd9b2ezO9z747HbrP77K/V7lzpSHjIIEkpvvNHH5hypkabj9MK6elVzZC+50CAGQ /ng77EaAXusGTdPgRtY= ) ;; ADDITIONAL SECTION (5 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for CONSUMERSENTINELNETWORK.GOV/SOA
	Received 987 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (987 bytes) ;; HEADER SECTION ;; id = 24678 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2021020301 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20210425000126 20210418000126 29403 consumersentinelnetwork.gov. DNryG2gVb/dofTIjYLH7NIZrJX8CMXR68N0wZyufEZnrIWc8bZszU/qdWlw4nKEol7Y+NfqUpGer pxg2F0XjdiFuNLYAUAZYZRaOEm0Mahi/JtrLjJTydloHXf0a68/gaq3goqZTNYpkivvkMJeNUECW wpVoIfNxFRVo0WjX+6M= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20210428000128 20210421000128 2379 consumersentinelnetwork.gov. DnHn+aNy9pDwr3NDZ49rb3Vss0Akej+ai3By/TDMCpxJugdnX9VLaucvNWrEsfuWnw2IuQU8ELv/ lOp+rX/sR2iG+gU16elUimE1Uzlf6dNs+ByM65b+HTG38uaRDtrsPMrJI2DglxV9+FMfLgEQ7e23 QslEaoioy3RG/NqbLn0= ) ;; AUTHORITY SECTION (4 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20210426194057 20210419194057 29403 consumersentinelnetwork.gov. NjQbK31DLdDaNGcQPPYHaOlQ2v7GMPKICuzjljOwRROS3raeC3RnBZR8rJ7bc8oufZCBKmbMcgCk 3BrWfpTlhfi7DJ+W87HkPlwA1Uq5TKj0ckJ/wx08JaKTuQZQWpRIm/GC2DNxk5/jRMveXAmYMt6f 1va2gPAM6/Ap9jLpmj8= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20210427190145 20210420190145 2379 consumersentinelnetwork.gov. JmKs++1mhhG7CqpV1JepcGu3fqZR4xHkvSwsCcC7udgcQzgzPsjm5kRCcSvULaRumntAU06EAn7b ZxRAPfkbcYwiYMW0Chz7aZ0plrSf6bbZj67RERhGQpCFRsQU7Fp+Xs/MKOJYzgAtG9XBGA2z2dWM 8gpeZiI4t/DNjMUx7h8= ) ;; ADDITIONAL SECTION (5 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for CONSUMERSENTINELNETWORK.GOV/A
	Received 954 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (954 bytes) ;; HEADER SECTION ;; id = 46710 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2021020301 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426171300 20210419171300 29403 consumersentinelnetwork.gov. GWojMLBwDzggSSo4HVCcvUdSAsFXFLlSU3ebyOL2dtoL2JntgGip37mmJwvF91j6v8O9DcpSe8ow G8b3k94VA8uX9iN3mXy1ZeRTRIF5/lQjqUPy0ZNhWXw/msgA/pzc8jbFScWa0gEvOz2gej0z2tly ZKG9w1YMXYIKJlrctQA= ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210427111516 20210420111516 2379 consumersentinelnetwork.gov. jci97iotdvMARJO3boIkU0tgPaI4JLZoIIoBt83jiEsjfTd2UNvT/5ZpNEffh9r79/e0RR+xgpAJ W/5YQq8ko38xECjQ/Br63t3Vnf0rJC7wo1xHvCQAgVvQ3ukJ7cS6YWuT0SyRtcS+Mz3KNigUqz6h 8Oj+hYt55soeYcrFt7M= ) 4aupp1covj2ba61f4gop1btb3p57k34k.CONSUMERSENTINELNETWORK.GOV. 900 IN NSEC3 ( 1 0 1 af0fcefe970c4211 4aupp1covj2ba61f4gop1btb3p57k34l NS SOA RRSIG DNSKEY NSEC3PARAM ) 4aupp1covj2ba61f4gop1btb3p57k34k.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210427114052 20210420114052 29403 consumersentinelnetwork.gov. Zt7dlXwGHqFYQT7MSy51Yw/ciUGCp6NtGTwOg7hhda26dLiuF3r2qxS49IHIr8/EKKYrpzVU0+SY pg2/HlDVwufBp6/7C6JVw7J3lpo7GkbkuRD7CY0WB/S9m3S9kpjtWVjclrpcUaDFqykS7eS29gM7 ZykLdf+khfNl31yLkJw= ) 4aupp1covj2ba61f4gop1btb3p57k34k.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210427114052 20210420114052 2379 consumersentinelnetwork.gov. gGwc0XGosgVgESyCC7QPaqZFC98GbOXsbNofESN8JaNBD53Ll1rNR8Q40BBlX2Nj7dZu+5oLpRu8 hq9qA9CTuPj0uFgSkU0GClBaJjXSNPt5fKkmr7s0lOJ6piec4FGk7hoK5AMzHugBtTt0Zir7kLQd XjOgYE/JBjaGeNNCRLw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426105355 20210419105355 29403 consumersentinelnetwork.gov. HMhqG/2mfO3im2e29zw9gjLmb4F3jCAMcM2gpYDfWUzpqwjlIa7tCMS1S32jDB6cuvwXmBGkMJ96 JLCcuXrZCKbN2NdbDeQWTsprdVmJRGHMIlPeyAlDGex7oy521VjWz7KU+xq0HOLL5+drPppGeUpZ R5XxpEmEUwhAo/Qk7DM= )`
	`CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210427072314 20210420072314 2379 consumersentinelnetwork.gov. wugDi1XHd/GCHEksrCZctXSRy0AX4VVdWrkdu/M/Ws6vzyrzkaVZDAKpTf5CYQXHrPBuVFHRO0XS Ziw0qGFXSEk32+HKrss0BXhq4L0ZVsyfOeg0Ykrw5Jonq68oOd8PoDjA11LrBnRpUV6+QX6J5nzG fmAVFkFbafr3mi4QaDU= )`
	RRSIG=29403 and DNSKEY=29403 verifies the SOA RRset
	RRSIG=2379 and DNSKEY=2379 verifies the SOA RRset

CONSUMERSENTINELNETWORK.GOV

	Query to dns1.l-secb.net for CONSUMERSENTINELNETWORK.GOV/A
	Received 954 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (954 bytes) ;; HEADER SECTION ;; id = 56634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2021020301 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426125719 20210419125719 29403 consumersentinelnetwork.gov. pOXog/WzTs2FDBCUshZ2Ctas5URtHZd+/8yjgNAVc/lojd4x+Og72bXjEiOcC6vfAMjpa6PyWS5x UhxGN0PbnGAyqf7GeIcrCGgo9U2ChBL1ZJpUvLAj/U3f55l3U1teBjQEJu6mrJE+hDE4ML4Pj+e2 ErMshKCQOZDriJIbQ+k= ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210427064610 20210420064610 2379 consumersentinelnetwork.gov. nHHeABXoRtX976dWPcWZf6yZOpU5YtzkglOLeWFRVnihRjcS9APa4q801Iyd0Xqx7apq934wCQQv bbZ1DVUd1+Hqb/EsyK9v+aY/v/aq8O4bsbUBsOs3SzDk71yWFGaZvnQePBEAGI9hE9nD9EBCiLDZ xUMg8VrWUkC0jjEQgV4= ) fod37pp8m32o02iufnonrfv9c6ffj28s.CONSUMERSENTINELNETWORK.GOV. 900 IN NSEC3 ( 1 0 1 440d5b60701b936f fod37pp8m32o02iufnonrfv9c6ffj28t NS SOA RRSIG DNSKEY NSEC3PARAM ) fod37pp8m32o02iufnonrfv9c6ffj28s.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426133508 20210419133508 29403 consumersentinelnetwork.gov. VPKVMmTLCNn1gONcGecW0DBo/VLt8nX2tQJp1huI626G9u8A3f4/UFkmWBUxoKVv7KBPU2GXekRO oK1TG1w+uAMu4dl0tnMGncP4UwNE/wGhqtZ3ffsGigFLKLP+8fPHrk4japucyz8e8vR5rzv/N5nj 9m9XyHqSRn5fGxGQilo= ) fod37pp8m32o02iufnonrfv9c6ffj28s.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210427064610 20210420064610 2379 consumersentinelnetwork.gov. PVj7JMMGgBpHFgIF7lBSFNUK32Hskdrm8Iv9FGI2Gdfe54x6FBtlUMqhcr+Xof/kC/hx4M0w3atU XP4NkzYsEDl6mB4japzXUQecL2P8vCJ1G19SmPLi+OOZoW7aA8A8/bFU7p1cXmwuexZXRP10DVyb JVeHzaAbcOnup6u4cio= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns1.l-secb.net is authoritative for CONSUMERSENTINELNETWORK.GOV
	Found RRSIG signed by consumersentinelnetwork.gov zone
	Query to dns1.l-secb.net for CONSUMERSENTINELNETWORK.GOV/A
	Received 954 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (954 bytes) ;; HEADER SECTION ;; id = 1458 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2021020301 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426125719 20210419125719 29403 consumersentinelnetwork.gov. pOXog/WzTs2FDBCUshZ2Ctas5URtHZd+/8yjgNAVc/lojd4x+Og72bXjEiOcC6vfAMjpa6PyWS5x UhxGN0PbnGAyqf7GeIcrCGgo9U2ChBL1ZJpUvLAj/U3f55l3U1teBjQEJu6mrJE+hDE4ML4Pj+e2 ErMshKCQOZDriJIbQ+k= ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210427064610 20210420064610 2379 consumersentinelnetwork.gov. nHHeABXoRtX976dWPcWZf6yZOpU5YtzkglOLeWFRVnihRjcS9APa4q801Iyd0Xqx7apq934wCQQv bbZ1DVUd1+Hqb/EsyK9v+aY/v/aq8O4bsbUBsOs3SzDk71yWFGaZvnQePBEAGI9hE9nD9EBCiLDZ xUMg8VrWUkC0jjEQgV4= ) fod37pp8m32o02iufnonrfv9c6ffj28s.CONSUMERSENTINELNETWORK.GOV. 900 IN NSEC3 ( 1 0 1 440d5b60701b936f fod37pp8m32o02iufnonrfv9c6ffj28t NS SOA RRSIG DNSKEY NSEC3PARAM ) fod37pp8m32o02iufnonrfv9c6ffj28s.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426133508 20210419133508 29403 consumersentinelnetwork.gov. VPKVMmTLCNn1gONcGecW0DBo/VLt8nX2tQJp1huI626G9u8A3f4/UFkmWBUxoKVv7KBPU2GXekRO oK1TG1w+uAMu4dl0tnMGncP4UwNE/wGhqtZ3ffsGigFLKLP+8fPHrk4japucyz8e8vR5rzv/N5nj 9m9XyHqSRn5fGxGQilo= ) fod37pp8m32o02iufnonrfv9c6ffj28s.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210427064610 20210420064610 2379 consumersentinelnetwork.gov. PVj7JMMGgBpHFgIF7lBSFNUK32Hskdrm8Iv9FGI2Gdfe54x6FBtlUMqhcr+Xof/kC/hx4M0w3atU XP4NkzYsEDl6mB4japzXUQecL2P8vCJ1G19SmPLi+OOZoW7aA8A8/bFU7p1cXmwuexZXRP10DVyb JVeHzaAbcOnup6u4cio= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426125719 20210419125719 29403 consumersentinelnetwork.gov. pOXog/WzTs2FDBCUshZ2Ctas5URtHZd+/8yjgNAVc/lojd4x+Og72bXjEiOcC6vfAMjpa6PyWS5x UhxGN0PbnGAyqf7GeIcrCGgo9U2ChBL1ZJpUvLAj/U3f55l3U1teBjQEJu6mrJE+hDE4ML4Pj+e2 ErMshKCQOZDriJIbQ+k= )`
	`CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210427064610 20210420064610 2379 consumersentinelnetwork.gov. nHHeABXoRtX976dWPcWZf6yZOpU5YtzkglOLeWFRVnihRjcS9APa4q801Iyd0Xqx7apq934wCQQv bbZ1DVUd1+Hqb/EsyK9v+aY/v/aq8O4bsbUBsOs3SzDk71yWFGaZvnQePBEAGI9hE9nD9EBCiLDZ xUMg8VrWUkC0jjEQgV4= )`
	RRSIG=29403 and DNSKEY=29403 verifies the SOA RRset
	RRSIG=2379 and DNSKEY=2379 verifies the SOA RRset

CONSUMERSENTINELNETWORK.GOV

	Query to dns2.l-secb.net for CONSUMERSENTINELNETWORK.GOV/A
	Received 954 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (954 bytes) ;; HEADER SECTION ;; id = 62269 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2021020301 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426110809 20210419110809 29403 consumersentinelnetwork.gov. oZO13ZGFGiqDtlxHhIaqMjNZx5wCQwWv1lhcOyhfD/hoCsbSj3NPne1PC4wZ3NUONge0RVUyUNiG VA2IJfCsRyjy+CoLuOrl+5FMNJ+G0u483mgWfw/vdU9q3b+eEv6e9/yub9qCX+5pWMawwX4voLma ObIJuXksQAYZ2dhITIo= ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210427063012 20210420063012 2379 consumersentinelnetwork.gov. aHV9OVHJ/83yzM5tYJoT2CJQLDKHYtfxRlVgpeF5Nc+JLAKRXoMBVV9Z0xhZHtww1i1EuXFev3dJ SgT51ZXQsrvzbJgmnNKbNCFz9eW4dw4V1vMZaoRtstOGAJubnrvp5B8J9lGWH5ORB6jVTb9z4JQJ VAv5cw2KvMtDo7igyfw= ) upn6mqjtdlk4e436dfm6cva2o0f9n8er.CONSUMERSENTINELNETWORK.GOV. 900 IN NSEC3 ( 1 0 1 59eca2bc3da2709a upn6mqjtdlk4e436dfm6cva2o0f9n8es NS SOA RRSIG DNSKEY NSEC3PARAM ) upn6mqjtdlk4e436dfm6cva2o0f9n8er.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426182656 20210419182656 29403 consumersentinelnetwork.gov. nCrWsEhBsh15wlSxl11Y5reZITduXXWfufYn3cOBmmQc4PXY9r1sGXZOYbOIgwnJtG/LX/MLfqaS aldBea8IsCM3j6hqAOSwXAyi4zvKhjRJaXyltwncw3rK7pHQMluBZmTtQUsRX/cqDQCf1w8pr61d d7az2+nOOItx+09i4gg= ) upn6mqjtdlk4e436dfm6cva2o0f9n8er.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210427063012 20210420063012 2379 consumersentinelnetwork.gov. ns+tOBLLkHFRoOmJH7PcgeEJvQHogwMsEawukuvvrefO4iwCFt1yEgVsG91bvuLSbTs1UruFBHWn 3dlhFvyreQGYrjuLaD0GVUXs0xuWf6l5XZZcd1jjFDCYvWqTAKgYMALe6F424HqoSvzUNK9HGu1a C5nVVDuWDnMqK+ad1o4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.l-secb.net is authoritative for CONSUMERSENTINELNETWORK.GOV
	Found RRSIG signed by consumersentinelnetwork.gov zone
	Query to dns2.l-secb.net for CONSUMERSENTINELNETWORK.GOV/A
	Received 954 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (954 bytes) ;; HEADER SECTION ;; id = 9650 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2021020301 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426115429 20210419115429 29403 consumersentinelnetwork.gov. yTDp8KmBdGaU43zAlHtvHiqhAfYWAAEl25IUbi2Yh0UkTK4kzhjvFFdQNN6XF4DY3CL1VJ4IYkA4 81pArYWmqzAs/qxFA77p0VY2QS1N7+0TVd18LicvRDfAcGFYhyOIlFfdy4FpVjyhqyv4oHbFjoOt YYyZrvlJqIpzfrrszbw= ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210427092522 20210420092522 2379 consumersentinelnetwork.gov. ZZYaDcbMk3vKg7PBoYR8FCJ9Ys09LUMS8riFO3fgyGKntgJ19fTH/nYH4iXGhsbTmzfJzrMMN1G4 Gh2AFwebtcy+q/ugJIYCrZ/qlYIVp/zpTRoyA2A5IG0Ie6ftv3wa1f0pHePq2+Qdz/F1dOiZFS6U sXL7RZj1O1+UYY+/L98= ) 2epic8qrin8oej9bpi9vigk2buutcqqj.CONSUMERSENTINELNETWORK.GOV. 900 IN NSEC3 ( 1 0 1 43129c9c0c2f9200 2epic8qrin8oej9bpi9vigk2buutcqqk NS SOA RRSIG DNSKEY NSEC3PARAM ) 2epic8qrin8oej9bpi9vigk2buutcqqj.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426115429 20210419115429 29403 consumersentinelnetwork.gov. eSUNvk156SHmlHII/6rZm31FqfqRY4YlqtnMejwKR1CjAjpZxmEQAoCIyXZ0Sv43uGLf4bGF65rm JI+GXxub16pFWXznMecj1xc/awAHmURct7j/gtNK7If0GeT0GvbnOGl4ZRoedBvW6MGw0W9CYsw7 C/nNE4aAld+K089+Tko= ) 2epic8qrin8oej9bpi9vigk2buutcqqj.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210427092522 20210420092522 2379 consumersentinelnetwork.gov. OCfhDsIsWcV5iXs94oRqMFAidgBvc7IN5QAn1IOBUhNWJ3CZERGDx6tj3rPTee/Bx81YURLAhA8c XraJyFlyd0GZXooqDo1BlZM8MsUK58pjeRrc/0Hb63QNC/cX8br8zsH1Rx0tRYT7MPW3nUhT+bLS KvixHynqOtt8a6yhCvI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426110809 20210419110809 29403 consumersentinelnetwork.gov. oZO13ZGFGiqDtlxHhIaqMjNZx5wCQwWv1lhcOyhfD/hoCsbSj3NPne1PC4wZ3NUONge0RVUyUNiG VA2IJfCsRyjy+CoLuOrl+5FMNJ+G0u483mgWfw/vdU9q3b+eEv6e9/yub9qCX+5pWMawwX4voLma ObIJuXksQAYZ2dhITIo= )`
	`CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20210427063012 20210420063012 2379 consumersentinelnetwork.gov. aHV9OVHJ/83yzM5tYJoT2CJQLDKHYtfxRlVgpeF5Nc+JLAKRXoMBVV9Z0xhZHtww1i1EuXFev3dJ SgT51ZXQsrvzbJgmnNKbNCFz9eW4dw4V1vMZaoRtstOGAJubnrvp5B8J9lGWH5ORB6jVTb9z4JQJ VAv5cw2KvMtDo7igyfw= )`
	RRSIG=29403 and DNSKEY=29403 verifies the SOA RRset
	RRSIG=2379 and DNSKEY=2379 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test CONSUMERSENTINELNETWORK.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: