Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2019-12-09 07:21:04 UTC, NTP stratum 4

Analyzing DNSSEC problems for FDIC.GOV

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
GOV
Found 2 DS records for GOV in the . zone
DS=7698/SHA-1 has algorithm RSASHA256
DS=7698/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
Found 2 DNSKEY records for GOV
DS=7698/SHA-1 verifies DNSKEY=7698/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
FDIC.GOV
Found 4 DS records for FDIC.GOV in the GOV zone
DS=48826/SHA-1 has algorithm RSASHA256
DS=65206/SHA-1 has algorithm RSASHA256
DS=48826/SHA-256 has algorithm RSASHA256
DS=65206/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
Found 4 DNSKEY records for FDIC.GOV
DS=48826/SHA-1 verifies DNSKEY=48826/SEP
DS=65206/SHA-1 verifies DNSKEY=65206/SEP
Found 4 RRSIGs over DNSKEY RRset
RRSIG=65206 and DNSKEY=65206/SEP verifies the DNSKEY RRset
a13-67.akam.net serial (2008389134) differs from a28-65.akam.net serial (2008389136)
a10-66.akam.net serial (2008389135) differs from a28-65.akam.net serial (2008389136)
a9-66.akam.net serial (2008389134) differs from a28-65.akam.net serial (2008389136)
a18-64.akam.net serial (2008389134) differs from a28-65.akam.net serial (2008389136)
a1-55.akam.net serial (2008389134) differs from a28-65.akam.net serial (2008389136)
FDIC.GOV A RR has value 167.176.6.69
Found 2 RRSIGs over A RRset
RRSIG=59289 and DNSKEY=59289 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FDIC.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options