Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2022-01-25 13:58:36 UTC, NTP stratum 16

Analyzing DNSSEC problems for cert.fnmt.es

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
es
Found 2 DS records for es in the . zone
DS=50252/SHA-1 has algorithm RSASHA256
DS=50252/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=9799 and DNSKEY=9799 verifies the DS RRset
Found 3 DNSKEY records for es
DS=50252/SHA-1 verifies DNSKEY=50252/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=50252 and DNSKEY=50252/SEP verifies the DNSKEY RRset
fnmt.es
No DS records found for fnmt.es in the es zone
No DNSKEY records found
dns1.fnmt.es is authoritative for cert.fnmt.es
cert.fnmt.es
No DS records found for cert.fnmt.es in the fnmt.es zone
No DNSKEY records found
dns1.fnmt.es is authoritative for cert.fnmt.es
No NSEC records in response
No RRSIGs found
cert.fnmt.es
dns2.fnmt.es is authoritative for cert.fnmt.es
No NSEC records in response
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cert.fnmt.es at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options