Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2020-09-26 18:58:09 UTC, NTP stratum 4

Analyzing DNSSEC problems for fed.us

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
us
Found 2 DS records for us in the . zone
DS=21364/SHA-1 has algorithm RSASHA256
DS=21364/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
Found 2 DNSKEY records for us
DS=21364/SHA-1 verifies DNSKEY=21364/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=21364 and DNSKEY=21364/SEP verifies the DNSKEY RRset
fed.us
No DS records found for fed.us in the us zone
No DNSKEY records found
No NSEC records in response
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fed.us at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options