RRSIG cfo.gov/A alg 7, id 39635: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG cfo.gov/AAAA alg 7, id 39635: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG cfo.gov/DNSKEY alg 7, id 1009: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG cfo.gov/DNSKEY alg 7, id 1009: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG cfo.gov/DNSKEY alg 7, id 1009: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG cfo.gov/MX alg 7, id 39635: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG cfo.gov/NS alg 7, id 39635: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG cfo.gov/NSEC3PARAM alg 7, id 39635: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG cfo.gov/SOA alg 7, id 39635: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG cfo.gov/TXT alg 7, id 39635: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
gov to cfo.gov: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the gov zone): a12-64.akam.net, a5-64.akam.net, a3-67.akam.net, a20-65.akam.net, a1-61.akam.net, a22-66.akam.net
gov to cfo.gov: The following NS name(s) were found in the delegation NS RRset (i.e., in the gov zone), but not in the authoritative NS RRset: asia9.akam.net, ns1-145.akam.net, ns1-176.akam.net, use6.akam.net, usw1.akam.net, usw5.akam.net, usw6.akam.net, zc.akam.net