Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2026-02-14 15:45:18 UTC

Analyzing DNSSEC problems for intsec.info

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
info
Found 1 DS records for info in the . zone
DS=5104/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
Found 3 DNSKEY records for info
DS=5104/SHA-256 verifies DNSKEY=5104/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=5104 and DNSKEY=5104/SEP verifies the DNSKEY RRset
intsec.info
Found 2 DS records for intsec.info in the info zone
DS=39060/SHA-256 has algorithm RSASHA1
DS=29704/SHA-256 has algorithm RSASHA1
Found 1 RRSIGs over DS RRset
RRSIG=41175 and DNSKEY=41175 verifies the DS RRset
All Queries to ns3.intsec.info for intsec.info/DNSKEY timed out or failed
Found 2 DNSKEY records for intsec.info
DS=39060/SHA-256 verifies DNSKEY=39060
DS=29704/SHA-256 verifies DNSKEY=29704/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=29704 and DNSKEY=29704/SEP does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
RRSIG=39060 and DNSKEY=39060 does not verify the DNSKEY RRset (libcrypto error (SEC.xs line 223)signature verification failed)
None of the 2 RRSIG and 2 DNSKEY records validate the DNSKEY RRset
The DNSKEY RRset was not signed by any trusted keys
ns2.intsec.info is authoritative for intsec.info
intsec.info A RR has value 213.212.132.78
Found 1 RRSIGs over A RRset
RRSIG=39060 and DNSKEY=39060 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
None of the 1 RRSIG and 2 DNSKEY records validate the A RRset
intsec.info
ns1.intsec.info is authoritative for intsec.info
intsec.info A RR has value 213.212.132.78
Found 1 RRSIGs over A RRset
RRSIG=39060 and DNSKEY=39060 does not verify the A RRset (libcrypto error (SEC.xs line 223)signature verification failed)
None of the 1 RRSIG and 2 DNSKEY records validate the A RRset
intsec.info
No response from intsec.info nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test intsec.info at dnsviz.net.

DNSSEC Debugger

↓ Advanced options