Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2019-06-16 22:31:04 UTC, NTP stratum 4

Analyzing DNSSEC problems for GREENGOV.GOV

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
GOV
Found 2 DS records for GOV in the . zone
DS=7698/SHA-1 has algorithm RSASHA256
DS=7698/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
Found 2 DNSKEY records for GOV
DS=7698/SHA-1 verifies DNSKEY=7698/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
GREENGOV.GOV
Found 1 DS records for GREENGOV.GOV in the GOV zone
DS=25426/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
Found 3 DNSKEY records for GREENGOV.GOV
None of the 3 DNSKEY records could be validated by any of the 1 DS records
Found 2 RRSIGs over DNSKEY RRset
RRSIG=24084 and DNSKEY=24084 verifies the DNSKEY RRset
The DNSKEY RRset was not signed by any keys in the chain-of-trust
pydns2.epa.GOV serial (437) differs from rtpns2.epa.GOV serial (442)
rtpns1.epa.GOV serial (478) differs from rtpns2.epa.GOV serial (442)
pydns1.epa.GOV serial (426) differs from rtpns2.epa.GOV serial (442)
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test GREENGOV.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options