Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2019-02-21 03:56:01 UTC, NTP stratum 4

Analyzing DNSSEC problems for ENERGYSAVER.GOV

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
GOV
Found 2 DS records for GOV in the . zone
DS=7698/SHA-1 has algorithm RSASHA256
DS=7698/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
Found 2 DNSKEY records for GOV
DS=7698/SHA-1 verifies DNSKEY=7698/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
ENERGYSAVER.GOV
Found 4 DS records for ENERGYSAVER.GOV in the GOV zone
DS=12123/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
DS=12123/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
DS=16125/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
DS=16125/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
Found 1 RRSIGs over DS RRset
RRSIG=28157 and DNSKEY=28157 verifies the DS RRset
Found 4 DNSKEY records for ENERGYSAVER.GOV
DS=16125/SHA-1 verifies DNSKEY=16125/SEP
DS=12123/SHA-1 verifies DNSKEY=12123/SEP
Found 4 RRSIGs over DNSKEY RRset
RRSIG=12123 and DNSKEY=12123/SEP verifies the DNSKEY RRset
helios.nrel.gov serial (7719) differs from adns1.es.net serial (7718)
adns2.es.net serial (7719) differs from adns1.es.net serial (7718)
phaeton.nrel.gov serial (7719) differs from adns1.es.net serial (7718)
ns1.es.net serial (7719) differs from adns1.es.net serial (7718)
ENERGYSAVER.GOV A RR has value 192.174.63.49
Found 2 RRSIGs over A RRset
RRSIG=39929 and DNSKEY=39929 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ENERGYSAVER.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options