NSEC3 proving non-existence of cv.dilichen.fr/NS: The following queries resulted in an answer response, even though the bitmap in the NSEC3 RR indicates that the queried records don't exist: cv.dilichen.fr/NS, cv.dilichen.fr/DNSKEY, cv.dilichen.fr/SOA
NSEC3 proving non-existence of cv.dilichen.fr/NS: The following queries resulted in an answer response, even though the bitmap in the NSEC3 RR indicates that the queried records don't exist: cv.dilichen.fr/NS, cv.dilichen.fr/DNSKEY, cv.dilichen.fr/SOA
NSEC3 proving non-existence of cv.dilichen.fr/SOA: The following queries resulted in an answer response, even though the bitmap in the NSEC3 RR indicates that the queried records don't exist: cv.dilichen.fr/NS, cv.dilichen.fr/DNSKEY, cv.dilichen.fr/SOA
NSEC3 proving non-existence of cv.dilichen.fr/SOA: The following queries resulted in an answer response, even though the bitmap in the NSEC3 RR indicates that the queried records don't exist: cv.dilichen.fr/NS, cv.dilichen.fr/DNSKEY, cv.dilichen.fr/SOA
RRSIG NSEC3 proving non-existence of cv.dilichen.fr/NS alg 14, id 56141: The Signer's Name field of the RRSIG RR (dilichen.fr) does not match the name of the zone containing the RRset (cv.dilichen.fr).
RRSIG NSEC3 proving non-existence of cv.dilichen.fr/SOA alg 14, id 56141: The Signer's Name field of the RRSIG RR (dilichen.fr) does not match the name of the zone containing the RRset (cv.dilichen.fr).
RRSIG cv.dilichen.fr/A alg 14, id 56141: The Signer's Name field of the RRSIG RR (dilichen.fr) does not match the name of the zone containing the RRset (cv.dilichen.fr).
RRSIG cv.dilichen.fr/AAAA alg 14, id 56141: The Signer's Name field of the RRSIG RR (dilichen.fr) does not match the name of the zone containing the RRset (cv.dilichen.fr).
cv.dilichen.fr/DNSKEY (alg 14, id 41620): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (217.70.177.40, 2001:4b98:d:1::40, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_512_D_K)
cv.dilichen.fr/DNSKEY (alg 14, id 52129): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (217.70.177.40, 2001:4b98:d:1::40, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_512_D_K)
cv.dilichen.fr/NS (NODATA): An SOA RR with owner name (dilichen.fr) not matching the zone name (cv.dilichen.fr) was returned with the NODATA response. (217.70.177.40, 2001:4b98:d:1::40, UDP_-_EDNS0_4096_D_K)
cv.dilichen.fr/SOA (NODATA): An SOA RR with owner name (dilichen.fr) not matching the zone name (cv.dilichen.fr) was returned with the NODATA response. (217.70.177.40, 2001:4b98:d:1::40, TCP_-_EDNS0_4096_D, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_4096_D_K_0x20)
dilichen.fr to cv.dilichen.fr: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (217.70.177.40, 2001:4b98:d:1::40, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_512_D_K)
dilichen.fr to cv.dilichen.fr: The DS RRset for the zone included algorithm 14 (ECDSAP384SHA384), but no DS RR matched a DNSKEY with algorithm 14 that signs the zone's DNSKEY RRset. (217.70.177.40, 2001:4b98:d:1::40, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_512_D_K)
Warnings (2)
fr to dilichen.fr: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the fr zone): ns6.gandi.net
fr to dilichen.fr: The following NS name(s) were found in the delegation NS RRset (i.e., in the fr zone), but not in the authoritative NS RRset: ns.fol.tf