Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2023-09-24 16:09:01 UTC, NTP stratum 4

Analyzing DNSSEC problems for pacom.mil

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
mil
Found 2 DS records for mil in the . zone
DS=16801/SHA-256 has algorithm RSASHA256
DS=62470/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
Found 4 DNSKEY records for mil
DS=16801/SHA-256 verifies DNSKEY=16801/SEP
DS=62470/SHA-256 verifies DNSKEY=62470/SEP
Found 3 RRSIGs over DNSKEY RRset
RRSIG=14098 and DNSKEY=14098 verifies the DNSKEY RRset
pacom.mil
Found 2 DS records for pacom.mil in the mil zone
DS=17174/SHA-256 has algorithm RSASHA256
DS=17174/SHA-1 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=14098 and DNSKEY=14098 verifies the DS RRset
Found 4 DNSKEY records for pacom.mil
DS=17174/SHA-256 verifies DNSKEY=17174/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=17174 and DNSKEY=17174/SEP verifies the DNSKEY RRset
DNS2.PACOM.MIL is authoritative for pacom.mil
All Queries to DNS2.PACOM.MIL for pacom.mil/A timed out or failed
No RRSIGs found
pacom.mil
PNOCXNS2.PR.NAVY.MIL is authoritative for pacom.mil
No RRSIGs found
pacom.mil
PNOCXNS1.PR.NAVY.MIL is authoritative for pacom.mil
No RRSIGs found
pacom.mil
DNS1.PACOM.MIL is authoritative for pacom.mil
Found 1 RRSIGs over SOA RRset
RRSIG=44541 and DNSKEY=44541 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test pacom.mil at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options