Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2026-04-17 09:00:57 UTC

Analyzing DNSSEC problems for git.rnl.tecnico.ulisboa.pt

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
DS=38696/SHA-256 verifies DNSKEY=38696/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
pt
Found 1 DS records for pt in the . zone
DS=40155/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
Found 2 DNSKEY records for pt
DS=40155/SHA-256 verifies DNSKEY=40155/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=40155 and DNSKEY=40155/SEP verifies the DNSKEY RRset
ulisboa.pt
Found 1 DS records for ulisboa.pt in the pt zone
DS=502/SHA-256 has algorithm RSASHA1
Found 1 RRSIGs over DS RRset
RRSIG=30640 and DNSKEY=30640 verifies the DS RRset
Found 2 DNSKEY records for ulisboa.pt
DS=502/SHA-256 verifies DNSKEY=502/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=502 and DNSKEY=502/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
RRSIG=4368 and DNSKEY=4368 does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
None of the 2 RRSIG and 2 DNSKEY records validate the DNSKEY RRset
The DNSKEY RRset was not signed by any trusted keys
tecnico.ulisboa.pt
Found 1 DS records for tecnico.ulisboa.pt in the ulisboa.pt zone
DS=29909/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=4368 and DNSKEY=4368 does not verify the DS RRset (libcrypto error (SEC.xs line 223)signature verification failed)
Found 3 DNSKEY records for tecnico.ulisboa.pt
DS=29909/SHA-256 verifies DNSKEY=29909/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=29909 and DNSKEY=29909/SEP verifies the DNSKEY RRset
ns1.tecnico.ulisboa.pt is authoritative for git.rnl.tecnico.ulisboa.pt
rnl.tecnico.ulisboa.pt
No DS records found for rnl.tecnico.ulisboa.pt in the tecnico.ulisboa.pt zone
No DNSKEY records found
ns2.rnl.tecnico.ulisboa.pt is authoritative for git.rnl.tecnico.ulisboa.pt
git.rnl.tecnico.ulisboa.pt is a CNAME to gitlab.rnl.tecnico.ulisboa.pt
No RRSIGs found
ns2.tecnico.ulisboa.pt is authoritative for gitlab.rnl.tecnico.ulisboa.pt
gitlab.rnl.tecnico.ulisboa.pt A RR has value 193.136.164.27
rnl.tecnico.ulisboa.pt
ns1.tecnico.ulisboa.pt is authoritative for gitlab.rnl.tecnico.ulisboa.pt
gitlab.rnl.tecnico.ulisboa.pt A RR has value 193.136.164.27
No RRSIGs found
rnl.tecnico.ulisboa.pt
ns.rnl.tecnico.ulisboa.pt is authoritative for gitlab.rnl.tecnico.ulisboa.pt
gitlab.rnl.tecnico.ulisboa.pt A RR has value 193.136.164.27
No RRSIGs found
rnl.tecnico.ulisboa.pt
ns2.rnl.tecnico.ulisboa.pt is authoritative for gitlab.rnl.tecnico.ulisboa.pt
gitlab.rnl.tecnico.ulisboa.pt A RR has value 193.136.164.27
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test git.rnl.tecnico.ulisboa.pt at dnsviz.net.

DNSSEC Debugger

↓ Advanced options