Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-07-19 15:44:22 UTC

Analyzing DNSSEC problems for dtra.mil

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
mil
Found 1 DS records for mil in the . zone
DS=16801/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
Found 3 DNSKEY records for mil
DS=16801/SHA-256 verifies DNSKEY=16801/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=16801 and DNSKEY=16801/SEP verifies the DNSKEY RRset
dtra.mil
Found 2 DS records for dtra.mil in the mil zone
DS=35584/SHA-1 uses a deprecated digest algorithm
DS=35584/SHA-1 has algorithm RSASHA256
DS=35584/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=54036 and DNSKEY=54036 verifies the DS RRset
Found 2 DNSKEY records for dtra.mil
DS=35584/SHA-1 verifies DNSKEY=35584/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=35584 and DNSKEY=35584/SEP verifies the DNSKEY RRset
NS2.DTRA.MIL is authoritative for dtra.mil
No RRSIGs found
dtra.mil
NS1.DTRA.MIL is authoritative for dtra.mil
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dtra.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options