Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2019-08-25 09:05:10 UTC, NTP stratum 4

Analyzing DNSSEC problems for TAX.GOV

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
GOV
Found 2 DS records for GOV in the . zone
DS=7698/SHA-256 has algorithm RSASHA256
DS=7698/SHA-1 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
Found 2 DNSKEY records for GOV
DS=7698/SHA-256 verifies DNSKEY=7698/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
TAX.GOV
Found 1 DS records for TAX.GOV in the GOV zone
DS=26104/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
Found 4 DNSKEY records for TAX.GOV
DS=26104/SHA-256 verifies DNSKEY=26104/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=26104 and DNSKEY=26104/SEP verifies the DNSKEY RRset
ns6.irs.GOV serial (3127) differs from ns5.irs.GOV serial (3126)
ns4.irs.GOV serial (3127) differs from ns5.irs.GOV serial (3126)
ns3.irs.GOV serial (3127) differs from ns5.irs.GOV serial (3126)
ns1.irs.GOV serial (3127) differs from ns5.irs.GOV serial (3126)
ns2.irs.GOV serial (3127) differs from ns5.irs.GOV serial (3126)
TAX.GOV A RR has value 155.130.130.113
Found 1 RRSIGs over A RRset
RRSIG=59241 and DNSKEY=59241 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TAX.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options