Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2023-09-24 16:14:14 UTC, NTP stratum 4

Analyzing DNSSEC problems for

Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
Found 2 DS records for gov in the . zone
DS=7698/SHA-256 has algorithm RSASHA256
DS=64280/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
Found 4 DNSKEY records for gov
DS=7698/SHA-256 verifies DNSKEY=7698/SEP
DS=64280/SHA-256 verifies DNSKEY=64280/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
Found 4 DS records for in the gov zone
DS=65094/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
DS=58488/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
DS=58488/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
DS=65094/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
Found 1 RRSIGs over DS RRset
RRSIG=40921 and DNSKEY=40921 verifies the DS RRset returns REFUSED for returns REFUSED for returns REFUSED for
Failed to get DNSKEY RR set for zone
No response from nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test at

DNSSEC Analyzer

↓ Advanced options