Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2021-12-01 10:35:53 UTC, NTP stratum 16

Analyzing DNSSEC problems for test.00001.y.dotnxdomain.net

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
net
Found 1 DS records for net in the . zone
DS=35886/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=14748 and DNSKEY=14748 verifies the DS RRset
Found 2 DNSKEY records for net
DS=35886/SHA-256 verifies DNSKEY=35886/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
dotnxdomain.net
Found 2 DS records for dotnxdomain.net in the net zone
DS=18553/SHA-256 has algorithm RSASHA1
DS=18553/SHA-1 has algorithm RSASHA1
Found 1 RRSIGs over DS RRset
RRSIG=40649 and DNSKEY=40649 verifies the DS RRset
Found 2 DNSKEY records for dotnxdomain.net
DS=18553/SHA-256 verifies DNSKEY=18553/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=15135 and DNSKEY=15135 verifies the DNSKEY RRset
y.dotnxdomain.net
Found 2 DS records for y.dotnxdomain.net in the dotnxdomain.net zone
DS=29911/SHA-1 has algorithm RSASHA1
DS=29911/SHA-256 has algorithm RSASHA1
Found 1 RRSIGs over DS RRset
RRSIG=15135 and DNSKEY=15135 verifies the DS RRset
All Queries to nsy.dotnxdomain.net for y.dotnxdomain.net/DNSKEY timed out or failed
Failed to get DNSKEY RR set for zone y.dotnxdomain.net
All Queries to nsy.dotnxdomain.net for test.00001.y.dotnxdomain.net/A timed out or failed
No response from y.dotnxdomain.net nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test test.00001.y.dotnxdomain.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options