Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2020-08-13 06:43:36 UTC, NTP stratum 4

Analyzing DNSSEC problems for MSHA.GOV

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
GOV
Found 2 DS records for GOV in the . zone
DS=7698/SHA-1 has algorithm RSASHA256
DS=7698/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
Found 2 DNSKEY records for GOV
DS=7698/SHA-1 verifies DNSKEY=7698/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
MSHA.GOV
Found 2 DS records for MSHA.GOV in the GOV zone
DS=3961/SHA-1 has algorithm RSASHA256
DS=3961/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=26665 and DNSKEY=26665 verifies the DS RRset
Found 2 DNSKEY records for MSHA.GOV
DS=3961/SHA-1 verifies DNSKEY=3961/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=3961 and DNSKEY=3961/SEP verifies the DNSKEY RRset
ns06.dol.gov serial (2020080310) differs from ns1.dol.gov serial (2020080309)
stlns08.dol.gov serial (2020080310) differs from ns1.dol.gov serial (2020080309)
ns05.dol.gov serial (2020080310) differs from ns1.dol.gov serial (2020080309)
ns2.dol.gov serial (2020080310) differs from ns1.dol.gov serial (2020080309)
MSHA.GOV A RR has value 152.180.11.172
Found 1 RRSIGs over A RRset
RRSIG=32736 and DNSKEY=32736 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test MSHA.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options