Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2026-01-27 05:18:33 UTC

Analyzing DNSSEC problems for USCAPITOLGIFTSHOP.GOV

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
GOV
Found 1 DS records for GOV in the . zone
DS=2536/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
Found 2 DNSKEY records for GOV
DS=2536/SHA-256 verifies DNSKEY=2536/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
USCAPITOLGIFTSHOP.GOV
Found 2 DS records for USCAPITOLGIFTSHOP.GOV in the GOV zone
DS=25207/SHA-1 uses a deprecated digest algorithm
DS=25207/SHA-1 has algorithm RSASHA256
DS=25207/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
authns2.centurylink.net returns REFUSED for USCAPITOLGIFTSHOP.GOV/DNSKEY
Found 3 DNSKEY records for USCAPITOLGIFTSHOP.GOV
None of the 3 DNSKEY records could be validated by any of the 2 DS records
Found 2 RRSIGs over DNSKEY RRset
RRSIG=6310 and DNSKEY=6310/SEP verifies the DNSKEY RRset
The DNSKEY RRset was not signed by any trusted keys
ns1.aoc.GOV is authoritative for USCAPITOLGIFTSHOP.GOV
ns2.aoc.GOV serial (3640) differs from ns2.comcastbusiness.net serial (3639)
authns1.centurylink.net returns REFUSED for USCAPITOLGIFTSHOP.GOV/SOA
USCAPITOLGIFTSHOP.GOV A RR has value 65.52.25.125
Found 1 RRSIGs over A RRset
RRSIG=18864 and DNSKEY=18864 verifies the A RRset
USCAPITOLGIFTSHOP.GOV
ns2.aoc.GOV is authoritative for USCAPITOLGIFTSHOP.GOV
USCAPITOLGIFTSHOP.GOV A RR has value 65.52.25.125
Found 1 RRSIGs over A RRset
RRSIG=18864 and DNSKEY=18864 verifies the A RRset
USCAPITOLGIFTSHOP.GOV
ns2.comcastbusiness.net is authoritative for USCAPITOLGIFTSHOP.GOV
USCAPITOLGIFTSHOP.GOV A RR has value 65.52.25.125
Found 1 RRSIGs over A RRset
RRSIG=18864 and DNSKEY=18864 verifies the A RRset
USCAPITOLGIFTSHOP.GOV
ns3.comcastbusiness.net is authoritative for USCAPITOLGIFTSHOP.GOV
USCAPITOLGIFTSHOP.GOV A RR has value 65.52.25.125
Found 1 RRSIGs over A RRset
RRSIG=18864 and DNSKEY=18864 verifies the A RRset
USCAPITOLGIFTSHOP.GOV
No response from USCAPITOLGIFTSHOP.GOV nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test USCAPITOLGIFTSHOP.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options