Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2019-04-23 08:27:21 UTC, NTP stratum 4

Analyzing DNSSEC problems for kapl.gov

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
gov
Found 2 DS records for gov in the . zone
DS=7698/SHA-256 has algorithm RSASHA256
DS=7698/SHA-1 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
Found 2 DNSKEY records for gov
DS=7698/SHA-256 verifies DNSKEY=7698/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
kapl.gov
No DS records found for kapl.gov in the gov zone
Unknown host ns1.chrl.twtelecom.net
Unknown host ns1.nycl.twtelecom.net
Failed to get DNSKEY RR set for zone kapl.gov
Unknown host ns1.chrl.twtelecom.net
Unknown host ns1.nycl.twtelecom.net
No response from kapl.gov nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test kapl.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options