DNSSEC Debugger - USCC.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-21 13:30:54 UTC

Analyzing DNSSEC problems for USCC.GOV

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 806 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260512000000 20260421000000 20326 . QvSkyDkWG8iEuZYOE0DYqVepxjeSy+/OYdhrVakvBjxk4j3bjMQV1sXumjCBQdvxk7ISiGzCythX xG7extNG3exqPszcbu5F2yGP3HpdcZlPb5AJLRs66pfUFz8/nHDCymq2X9a/vNmm50EiG5fKSf/p ZzWEyPVcnb0pWFkGXHHjqWeZVJEXM+Xf04M4zQtfzcwOoSZ7csseLr7ukYmcAMqkW0YdqHlA/9RK BGKhRRtwM+Zisdmz6a4nveAIqcPoi9sSY2CTZauROG5GpiYKqjDvZhlPi1jBBX6LmE6UFgQgJxof Gph1+dXE9iEohtXmBxt580NFS/T9/UcgZan6Yg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to l.root-servers.net for USCC.GOV/A
	Received 615 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 615 octets ;; HEADER SECTION ;; id = 60359 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for GOV/DNSKEY
	Received 613 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 613 octets ;; HEADER SECTION ;; id = 17167 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 56743 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20260504050000 20260421040000 54393 . t9vRXsqoHdq+yBhjSreT8vVH8Mks2R4MxIvD0kRKyRkYYwDTd06KvVDmz4N1nbxBaqTxIxEHUiTP 33T1IFdxHcecrvB/wSAARcp9nhESJTk2hs4KHnafqKZbXzAXSW6T9TAaOfOHluvqIpelrZtFhLw1 OSEeAOGq3P9EsXMLVMOFTQ13laLaZySv2hqNlmE7a/sZrZJenEFypFil9Oq52zEq7AYHFXY8yIF8 K/W6e78Q5GkVSFZoUKDJf+zQR3wbjtgU2SLRU4PX3faOQfspokCUi2twXjWdFCGy/pZxmJ4AVfPW eRPy7jEG73C38WuIXpBUpzO+rhAERVkRTGPyNw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for GOV/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 42706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260605110630 20260405110630 2536 gov. 2iHkI6KNpypgXNkkvAKmXKicvyZoEJm+L3HYyM8970H7lTBFwiVYd2cum3MuioVU5WzMEQw1k1c6 /r/8XT47qw== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for USCC.GOV/A
	Received 240 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 240 octets ;; HEADER SECTION ;; id = 48766 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) USCC.GOV. 10800 IN NS ctc-dns.usa-ctc.com. USCC.GOV. 10800 IN NS ctc-dns2.usa-ctc.com. USCC.GOV. 3600 IN DS ( 17626 8 2 4f6abdb8cdeba89dc4a07cc4c56bde36f6f18a7ddd5f29c212b6139bb9f8c532 ) USCC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422143054 20260420123054 35496 gov. z3KxJCXmg7zzZ35ap4JVlTZ5D8HzhhlJHawNkmpFu9qxLOgaFNAFoOjIDtsB0bnqG00q8hqS+cvG 3qC8BRImvw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for USCC.GOV/DNSKEY
	Received 240 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 240 octets ;; HEADER SECTION ;; id = 28284 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCC.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) USCC.GOV. 10800 IN NS ctc-dns.usa-ctc.com. USCC.GOV. 10800 IN NS ctc-dns2.usa-ctc.com. USCC.GOV. 3600 IN DS ( 17626 8 2 4f6abdb8cdeba89dc4a07cc4c56bde36f6f18a7ddd5f29c212b6139bb9f8c532 ) USCC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422143054 20260420123054 35496 gov. wIqSBvh4NIlERBcnYAMThumi3hleVQpXGvOsvmlj/R/AbHSpCWxXCUdVNl+ZG429JdssapcVSmaF 7u/hz3KPUw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone USCC.GOV

USCC.GOV

	Checking DS between GOV and USCC.GOV
	Query to d.ns.gov for USCC.GOV/DS
	Received 184 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 184 octets ;; HEADER SECTION ;; id = 23356 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCC.GOV. IN DS ;; ANSWER SECTION (2 records) USCC.GOV. 3600 IN DS ( 17626 8 2 4f6abdb8cdeba89dc4a07cc4c56bde36f6f18a7ddd5f29c212b6139bb9f8c532 ) USCC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422143054 20260420123054 35496 gov. MacLZTucXJ9l81dqW1kEgotdybdaX6xJq0E1OpEVt32JtSMhSA4tzJhVAke3RmCcrdt2NY8cuiif sb0UPd9DOA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for USCC.GOV in the GOV zone
	DS=17626/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`USCC.GOV. 3600 IN RRSIG ( DS 13 2 3600 20260422143054 20260420123054 35496 gov. MacLZTucXJ9l81dqW1kEgotdybdaX6xJq0E1OpEVt32JtSMhSA4tzJhVAke3RmCcrdt2NY8cuiif sb0UPd9DOA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=17626/SHA-256 is now in the chain-of-trust
	`USCC.GOV. 3600 IN DS ( 17626 8 2 4f6abdb8cdeba89dc4a07cc4c56bde36f6f18a7ddd5f29c212b6139bb9f8c532 )`
	Query to ctc-dns.usa-ctc.com for USCC.GOV/DNSKEY
	Received 1181 bytes from 96.127.44.178
	;; Response received from [96.127.44.178] 1181 octets ;; HEADER SECTION ;; id = 41902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCC.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) USCC.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAfQ/c/Tqmm6SzAvkYsZQK7RBXu5IwX1ZWN0XFxYfOk93jMcD51qLOiNkFKd0vQobHvjLoc5T cg+izQYzo1fm+zpjvHZpb8q7t1/O27OEOSQGks5nG3kgarnlwhPP2CXdSkzX4R3mWWo+H9iiG6ij foUeFYe07hxpfS9rysSXk/r3Zd1eorTW+jb+7BvxmW28p8n7P1EEJtlxQ3zmRubTTwiicqZn1RBs eELNpw7LLE8gU55PftC3p57JV2AqAppa+IfN5CdnrvO1glcjtOtO6u9Ph2Y/dqtaxqE1KDi3/5V3 GWhTTnyDgjYrSskciSdzjFunYkUx0gm1oCmVefT5q6E= ) ; keytag 17626 USCC.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcO0N5AjkObQ++tXIw2owB/KTfNRzuKW2fmmt8LUqTCYPKke5uc1Ffi1dq6gJ4roIxRFqJ+l aGJr9ATLhJiNIe2cnfAwd7lS+5RsSjnK9r4q9A8dbZCwWnOBRyX+YsmfkOxBpvhvDHqVETOYxDss YqAcFw2LxuLLo3efHVylGRjIizx3jfxJI4mdwvgkACFOUEn7fNoZ4fV1IzWnnX54AWx4/S5Ba5T0 5RmGA5Fbe50Sr9uloOHR+KT7c3yQBnm6clLtP/mB5fn3YmLOALhzLP3c8SM32U/+aeomfJl5QHdn gX7xO15jcU0nGwb7k57BnLt1TkaroUpZMaqUpWil4Mc= ) ; keytag 9009 USCC.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260514230001 20260414230001 9009 uscc.gov. CU6wvnc3HnfpGUbSrrRkSO8Gy8d0nfwWuuiS0wiesbhBp6Ae+feso3+8tYFihedZInAUOL5hVTVl q5O2YQf4c+aNJBmlo8gJCHTiZmh6ZIt+hB/cPTXWu3EqScYbwbGyZZM7+v7uv2gdkb/z8zJ5fBLK 5i76iEzKYtOGTC3UzIFysZNHLr7cRXpxKTo4P26MVCCcnCbKcioyYQyZkjopAG0e7uTpQDxQ5Q1k xbgAErP2hsqXK7DOCiyTmYYJr/ls5uvPOp35K5uNeqIWNPM69ZEe3eXQZOgD8xgEnMkdrb3X4FW7 9ethNEpKwVfL6g8YcFFh58SDq1y+GJRpjmUQ2w== ) uscc.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260514230001 20260414230001 17626 uscc.gov. ilF2fR+/67dpyF7n8D7x7Z70bS2wAZXtt/u8yStMXZfLj9cnX9XN/Re9nO5Q81OkANal9JL7N8eR 1B/AExzGGOlwEEe2JOfKSdLtgvrZfLn5kGW3M4a+AIQWvfgSTJNYsHyvzqOcgyWnlhotCOwMMGvd Odv+A7l6kvFzxKTCv1AMsY+IOIjHKjLXVf5DwzGGRRR2X6QVKqT2INvoPTqbSh6LJUa+8mBGPbx1 qdZIELEjk1UHkf6B4XOYSfyuWUSDV0whC0aGnOXbGCVoOUmsMToP/2HhsOSgY2X67/kAx3P2xCpA fOsxKhXIJUKPFUP2THnlpasps7qmKsNlsTsDTQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for USCC.GOV
	`USCC.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAfQ/c/Tqmm6SzAvkYsZQK7RBXu5IwX1ZWN0XFxYfOk93jMcD51qLOiNkFKd0vQobHvjLoc5T cg+izQYzo1fm+zpjvHZpb8q7t1/O27OEOSQGks5nG3kgarnlwhPP2CXdSkzX4R3mWWo+H9iiG6ij foUeFYe07hxpfS9rysSXk/r3Zd1eorTW+jb+7BvxmW28p8n7P1EEJtlxQ3zmRubTTwiicqZn1RBs eELNpw7LLE8gU55PftC3p57JV2AqAppa+IfN5CdnrvO1glcjtOtO6u9Ph2Y/dqtaxqE1KDi3/5V3 GWhTTnyDgjYrSskciSdzjFunYkUx0gm1oCmVefT5q6E= ) ; keytag 17626`
	`USCC.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcO0N5AjkObQ++tXIw2owB/KTfNRzuKW2fmmt8LUqTCYPKke5uc1Ffi1dq6gJ4roIxRFqJ+l aGJr9ATLhJiNIe2cnfAwd7lS+5RsSjnK9r4q9A8dbZCwWnOBRyX+YsmfkOxBpvhvDHqVETOYxDss YqAcFw2LxuLLo3efHVylGRjIizx3jfxJI4mdwvgkACFOUEn7fNoZ4fV1IzWnnX54AWx4/S5Ba5T0 5RmGA5Fbe50Sr9uloOHR+KT7c3yQBnm6clLtP/mB5fn3YmLOALhzLP3c8SM32U/+aeomfJl5QHdn gX7xO15jcU0nGwb7k57BnLt1TkaroUpZMaqUpWil4Mc= ) ; keytag 9009`
	DNSKEY=17626/SEP is now in the chain-of-trust
	DS=17626/SHA-256 verifies DNSKEY=17626/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`USCC.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260514230001 20260414230001 9009 uscc.gov. CU6wvnc3HnfpGUbSrrRkSO8Gy8d0nfwWuuiS0wiesbhBp6Ae+feso3+8tYFihedZInAUOL5hVTVl q5O2YQf4c+aNJBmlo8gJCHTiZmh6ZIt+hB/cPTXWu3EqScYbwbGyZZM7+v7uv2gdkb/z8zJ5fBLK 5i76iEzKYtOGTC3UzIFysZNHLr7cRXpxKTo4P26MVCCcnCbKcioyYQyZkjopAG0e7uTpQDxQ5Q1k xbgAErP2hsqXK7DOCiyTmYYJr/ls5uvPOp35K5uNeqIWNPM69ZEe3eXQZOgD8xgEnMkdrb3X4FW7 9ethNEpKwVfL6g8YcFFh58SDq1y+GJRpjmUQ2w== )`
	`uscc.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20260514230001 20260414230001 17626 uscc.gov. ilF2fR+/67dpyF7n8D7x7Z70bS2wAZXtt/u8yStMXZfLj9cnX9XN/Re9nO5Q81OkANal9JL7N8eR 1B/AExzGGOlwEEe2JOfKSdLtgvrZfLn5kGW3M4a+AIQWvfgSTJNYsHyvzqOcgyWnlhotCOwMMGvd Odv+A7l6kvFzxKTCv1AMsY+IOIjHKjLXVf5DwzGGRRR2X6QVKqT2INvoPTqbSh6LJUa+8mBGPbx1 qdZIELEjk1UHkf6B4XOYSfyuWUSDV0whC0aGnOXbGCVoOUmsMToP/2HhsOSgY2X67/kAx3P2xCpA fOsxKhXIJUKPFUP2THnlpasps7qmKsNlsTsDTQ== )`
	RRSIG=9009 and DNSKEY=9009 verifies the DNSKEY RRset
	RRSIG=17626 and DNSKEY=17626/SEP verifies the DNSKEY RRset
	DNSKEY=9009 is now in the chain-of-trust
	Query to ctc-dns.usa-ctc.com for USCC.GOV/A
	Received 701 bytes from 96.127.44.178
	;; Response received from [96.127.44.178] 701 octets ;; HEADER SECTION ;; id = 26366 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCC.GOV. IN A ;; ANSWER SECTION (2 records) USCC.GOV. 86400 IN A 52.61.49.116 USCC.GOV. 86400 IN RRSIG ( A 8 2 86400 20260514230001 20260414230001 9009 uscc.gov. egcTpXY1UEmeb/9ieHqRgJTbE8GU8/03NWfVBxc0gU5BLCA5PU5VdkPzvCUU39PQHJeRHcjHeWhL /MTJQhISUy0/dnz1zB/ZwNBNAbNsm67CVYJCkyMH+jMk3AVw50wMG60LwZfkBjXama9uEz/8lScM rezIjCWns30MPoiZBpMMtfGkzzhpUFzcEbAT2dX0Jx4+HxsASHqkITQi/YvkYR7eKqOIzgLYgi2P aAb/1zv/Hz4Vpzyb6/LfGJ0gVV1aRs38IaHP6uSXyDCKOFbyzV7YsiszirINtAEXyKsB7/P4Igzc +XCsBMF9uxzA8y6UpyKiXPe2XlYUpeq4CW+oAg== ) ;; AUTHORITY SECTION (3 records) uscc.gov. 86400 IN NS ctc-dns2.usa-ctc.com. uscc.gov. 86400 IN NS ctc-dns.usa-ctc.com. uscc.gov. 86400 IN RRSIG ( NS 8 2 86400 20260514230001 20260414230001 9009 uscc.gov. Zk9ZhkisIPUB9TKzSCafTx1BDi0PLMUBRnj3KEkbo+OEMS8UR7GEwkERQFWO19SlZiSqct7KTFo5 NOK0EmN7CI+Gn5K5sMKmMQvYedVYXgHNU4H3eheTXDJD/ZfZHNA7FN4Uxtq5yu/tJfpOIr0ZKVqt eTbld07llmxwAUYVhfdHZJcRxc81qNB9VpF2Bw8bRvz9gk3kZul1QpdRmZxkTaikxAav5S12Hwx5 4BixPSz2W4wutLD/X2c6EOgqW0Ilt+d6Ze6nZtAmw+DaMiXSQq7BObwccYG0GgP4I14i/Rri8S79 1gi+peCkd96uW+h+Gyx2kH0GkPXr1XDjEN7ENA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ctc-dns.usa-ctc.com is authoritative for USCC.GOV
	Found RRSIG signed by uscc.gov zone
	Query to ctc-dns2.usa-ctc.com for USCC.GOV/SOA
	Received 733 bytes from 96.127.69.238
	;; Response received from [96.127.69.238] 733 octets ;; HEADER SECTION ;; id = 36738 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCC.GOV. IN SOA ;; ANSWER SECTION (2 records) USCC.GOV. 86400 IN SOA ( ctc-dns.usa-ctc.com. ctc-support.usa-ctc.com. 2025111244 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 900 ;minimum ) USCC.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20260514230001 20260414230001 9009 uscc.gov. AVme7Lxf7du+Oq5OL+zuVRiaMYag4cxK6bqC08W7xHa0HCVV4tXStzoTDjA2vX3Kxi3dpsc7+fXo Sp4RST6FYU1O/TPl8nWSHtz3KMnjxYQDqAXrVBwBX/w3HKHwv+dJ3UQM8CvfqUHT8QhQbaW+6h+7 lJNklQviB7OmDIh5J9HjAnObxJsT/Np2/MH6hqlfrMTniLe2GBmKI+Om2Sni5cde53Doi71gM101 DFSfdENuvLDxUXh3G3ttDM9Re5rzdWCi6nKhsnHs/R0czWrd+xrEAVbCpbijsWXkJikRiRJAICSn wbkW7e4qWsjQQyhDFdhoTnk12y26CylGlxALpQ== ) ;; AUTHORITY SECTION (3 records) uscc.gov. 86400 IN NS ctc-dns2.usa-ctc.com. uscc.gov. 86400 IN NS ctc-dns.usa-ctc.com. uscc.gov. 86400 IN RRSIG ( NS 8 2 86400 20260514230001 20260414230001 9009 uscc.gov. Zk9ZhkisIPUB9TKzSCafTx1BDi0PLMUBRnj3KEkbo+OEMS8UR7GEwkERQFWO19SlZiSqct7KTFo5 NOK0EmN7CI+Gn5K5sMKmMQvYedVYXgHNU4H3eheTXDJD/ZfZHNA7FN4Uxtq5yu/tJfpOIr0ZKVqt eTbld07llmxwAUYVhfdHZJcRxc81qNB9VpF2Bw8bRvz9gk3kZul1QpdRmZxkTaikxAav5S12Hwx5 4BixPSz2W4wutLD/X2c6EOgqW0Ilt+d6Ze6nZtAmw+DaMiXSQq7BObwccYG0GgP4I14i/Rri8S79 1gi+peCkd96uW+h+Gyx2kH0GkPXr1XDjEN7ENA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ctc-dns.usa-ctc.com for USCC.GOV/A
	USCC.GOV A RR has value 52.61.49.116
	Found 1 RRSIGs over A RRset
	`USCC.GOV. 86400 IN RRSIG ( A 8 2 86400 20260514230001 20260414230001 9009 uscc.gov. egcTpXY1UEmeb/9ieHqRgJTbE8GU8/03NWfVBxc0gU5BLCA5PU5VdkPzvCUU39PQHJeRHcjHeWhL /MTJQhISUy0/dnz1zB/ZwNBNAbNsm67CVYJCkyMH+jMk3AVw50wMG60LwZfkBjXama9uEz/8lScM rezIjCWns30MPoiZBpMMtfGkzzhpUFzcEbAT2dX0Jx4+HxsASHqkITQi/YvkYR7eKqOIzgLYgi2P aAb/1zv/Hz4Vpzyb6/LfGJ0gVV1aRs38IaHP6uSXyDCKOFbyzV7YsiszirINtAEXyKsB7/P4Igzc +XCsBMF9uxzA8y6UpyKiXPe2XlYUpeq4CW+oAg== )`
	RRSIG=9009 and DNSKEY=9009 verifies the A RRset

USCC.GOV

	Query to ctc-dns2.usa-ctc.com for USCC.GOV/A
	Received 701 bytes from 96.127.69.238
	;; Response received from [96.127.69.238] 701 octets ;; HEADER SECTION ;; id = 19353 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; USCC.GOV. IN A ;; ANSWER SECTION (2 records) USCC.GOV. 86400 IN A 52.61.49.116 USCC.GOV. 86400 IN RRSIG ( A 8 2 86400 20260514230001 20260414230001 9009 uscc.gov. egcTpXY1UEmeb/9ieHqRgJTbE8GU8/03NWfVBxc0gU5BLCA5PU5VdkPzvCUU39PQHJeRHcjHeWhL /MTJQhISUy0/dnz1zB/ZwNBNAbNsm67CVYJCkyMH+jMk3AVw50wMG60LwZfkBjXama9uEz/8lScM rezIjCWns30MPoiZBpMMtfGkzzhpUFzcEbAT2dX0Jx4+HxsASHqkITQi/YvkYR7eKqOIzgLYgi2P aAb/1zv/Hz4Vpzyb6/LfGJ0gVV1aRs38IaHP6uSXyDCKOFbyzV7YsiszirINtAEXyKsB7/P4Igzc +XCsBMF9uxzA8y6UpyKiXPe2XlYUpeq4CW+oAg== ) ;; AUTHORITY SECTION (3 records) uscc.gov. 86400 IN NS ctc-dns2.usa-ctc.com. uscc.gov. 86400 IN NS ctc-dns.usa-ctc.com. uscc.gov. 86400 IN RRSIG ( NS 8 2 86400 20260514230001 20260414230001 9009 uscc.gov. Zk9ZhkisIPUB9TKzSCafTx1BDi0PLMUBRnj3KEkbo+OEMS8UR7GEwkERQFWO19SlZiSqct7KTFo5 NOK0EmN7CI+Gn5K5sMKmMQvYedVYXgHNU4H3eheTXDJD/ZfZHNA7FN4Uxtq5yu/tJfpOIr0ZKVqt eTbld07llmxwAUYVhfdHZJcRxc81qNB9VpF2Bw8bRvz9gk3kZul1QpdRmZxkTaikxAav5S12Hwx5 4BixPSz2W4wutLD/X2c6EOgqW0Ilt+d6Ze6nZtAmw+DaMiXSQq7BObwccYG0GgP4I14i/Rri8S79 1gi+peCkd96uW+h+Gyx2kH0GkPXr1XDjEN7ENA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ctc-dns2.usa-ctc.com is authoritative for USCC.GOV
	Found RRSIG signed by uscc.gov zone
	Query to ctc-dns2.usa-ctc.com for USCC.GOV/A
	USCC.GOV A RR has value 52.61.49.116
	Found 1 RRSIGs over A RRset
	`USCC.GOV. 86400 IN RRSIG ( A 8 2 86400 20260514230001 20260414230001 9009 uscc.gov. egcTpXY1UEmeb/9ieHqRgJTbE8GU8/03NWfVBxc0gU5BLCA5PU5VdkPzvCUU39PQHJeRHcjHeWhL /MTJQhISUy0/dnz1zB/ZwNBNAbNsm67CVYJCkyMH+jMk3AVw50wMG60LwZfkBjXama9uEz/8lScM rezIjCWns30MPoiZBpMMtfGkzzhpUFzcEbAT2dX0Jx4+HxsASHqkITQi/YvkYR7eKqOIzgLYgi2P aAb/1zv/Hz4Vpzyb6/LfGJ0gVV1aRs38IaHP6uSXyDCKOFbyzV7YsiszirINtAEXyKsB7/P4Igzc +XCsBMF9uxzA8y6UpyKiXPe2XlYUpeq4CW+oAg== )`
	RRSIG=9009 and DNSKEY=9009 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test USCC.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: