Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-10-22 15:42:27 UTC

Analyzing DNSSEC problems for dpaa.mil

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
mil
Found 1 DS records for mil in the . zone
DS=63500/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
Found 3 DNSKEY records for mil
DS=63500/SHA-256 verifies DNSKEY=63500/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=20335 and DNSKEY=20335 verifies the DNSKEY RRset
dpaa.mil
Found 2 DS records for dpaa.mil in the mil zone
DS=39451/SHA-1 uses a deprecated digest algorithm
DS=39451/SHA-1 has algorithm RSASHA256
DS=39451/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=20335 and DNSKEY=20335 verifies the DS RRset
Found 4 DNSKEY records for dpaa.mil
DS=39451/SHA-1 verifies DNSKEY=39451/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=39451 and DNSKEY=39451/SEP verifies the DNSKEY RRset
DNS2.DISA.MIL is authoritative for dpaa.mil
Found 1 RRSIGs over SOA RRset
RRSIG=52788 and DNSKEY=52788 verifies the SOA RRset
dpaa.mil
DNS5.DISA.MIL is authoritative for dpaa.mil
Found 1 RRSIGs over SOA RRset
RRSIG=52788 and DNSKEY=52788 verifies the SOA RRset
dpaa.mil
DNS3.DISA.MIL is authoritative for dpaa.mil
Found 1 RRSIGs over SOA RRset
RRSIG=52788 and DNSKEY=52788 verifies the SOA RRset
dpaa.mil
DNS1.DISA.MIL is authoritative for dpaa.mil
No RRSIGs found
dpaa.mil
DNS4.DISA.MIL is authoritative for dpaa.mil
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dpaa.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options