aol.org zone: The server(s) were not responsive to queries over TCP. (2406:8600:f03f:1f8::1003)
aol.org/A: No RRSIG covering the RRset was returned in the response. (27.123.42.42, 68.142.255.16, 68.180.131.16, 98.138.11.157, 202.165.97.53, 2001:4998:130::1001, 2001:4998:140::1002, 2406:2000:ff60::53, 2406:8600:f03f:1f8::1003, UDP_-_EDNS0_4096_D_KN)
aol.org/NS: No RRSIG covering the RRset was returned in the response. (27.123.42.42, 68.142.255.16, 68.180.131.16, 98.138.11.157, 202.165.97.53, 2001:4998:130::1001, 2001:4998:140::1002, 2406:2000:ff60::53, 2406:8600:f03f:1f8::1003, UDP_-_EDNS0_4096_D_KN)
aol.org/SOA: No RRSIG covering the RRset was returned in the response. (27.123.42.42, 68.142.255.16, 68.180.131.16, 98.138.11.157, 202.165.97.53, 2001:4998:130::1001, 2001:4998:140::1002, 2406:2000:ff60::53, 2406:8600:f03f:1f8::1003, TCP_-_EDNS0_4096_D_N, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20)
aol.org/SOA: No response was received from the server over TCP (tried 3 times). (2406:8600:f03f:1f8::1003, TCP_-_EDNS0_4096_D_N)
aol.org/TXT: No RRSIG covering the RRset was returned in the response. (27.123.42.42, 68.142.255.16, 68.180.131.16, 98.138.11.157, 202.165.97.53, 2001:4998:130::1001, 2001:4998:140::1002, 2406:2000:ff60::53, 2406:8600:f03f:1f8::1003, UDP_-_EDNS0_4096_D_KN)
org to aol.org: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (27.123.42.42, 68.142.255.16, 68.180.131.16, 98.138.11.157, 202.165.97.53, 2001:4998:130::1001, 2001:4998:140::1002, 2406:2000:ff60::53, 2406:8600:f03f:1f8::1003, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
org to aol.org: The DS RRset for the zone included algorithm 5 (RSASHA1), but no DS RR matched a DNSKEY with algorithm 5 that signs the zone's DNSKEY RRset. (27.123.42.42, 68.142.255.16, 68.180.131.16, 98.138.11.157, 202.165.97.53, 2001:4998:130::1001, 2001:4998:140::1002, 2406:2000:ff60::53, 2406:8600:f03f:1f8::1003, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
Warnings (4)
aol.org/DS (alg 5, id 62536): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
aol.org/DS (alg 5, id 62536): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
aol.org/DS (alg 5, id 62536): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
aol.org/DS (alg 5, id 62536): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.