Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2025-03-15 04:41:52 UTC

Analyzing DNSSEC problems for bssn.go.id

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
id
Found 1 DS records for id in the . zone
DS=26887/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
Found 2 DNSKEY records for id
DS=26887/SHA-256 verifies DNSKEY=26887/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
go.id
Found 1 DS records for go.id in the id zone
DS=48051/SHA-256 has algorithm RSASHA512
Found 1 RRSIGs over DS RRset
RRSIG=22449 and DNSKEY=22449 verifies the DS RRset
All Queries to d.dns.id for go.id/DNSKEY timed out or failed
Found 2 DNSKEY records for go.id
DS=48051/SHA-256 verifies DNSKEY=48051/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=48051 and DNSKEY=48051/SEP verifies the DNSKEY RRset
All Queries to d.dns.id for bssn.go.id/A timed out or failed
bssn.go.id
Found 5 DS records for bssn.go.id in the go.id zone
DS=12639/SHA-1 uses a deprecated digest algorithm
DS=20931/SHA-1 uses a deprecated digest algorithm
DS=22779/SHA-1 uses a deprecated digest algorithm
DS=48675/SHA-1 uses a deprecated digest algorithm
DS=50775/SHA-1 uses a deprecated digest algorithm
DS=12639/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
DS=20931/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
DS=22779/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
DS=48675/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
DS=50775/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
Found 1 RRSIGs over DS RRset
RRSIG=25427 and DNSKEY=25427 verifies the DS RRset
Found 2 DNSKEY records for bssn.go.id
DS=22779/SHA-1 verifies DNSKEY=22779/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=22779 and DNSKEY=22779/SEP verifies the DNSKEY RRset
ns2.bssn.go.id is authoritative for bssn.go.id
Found 1 RRSIGs over SOA RRset
RRSIG=31592 and DNSKEY=31592 verifies the SOA RRset
bssn.go.id
ns1.bssn.go.id is authoritative for bssn.go.id
Found 1 RRSIGs over SOA RRset
RRSIG=31592 and DNSKEY=31592 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bssn.go.id at dnsviz.net.

DNSSEC Debugger

↓ Advanced options