gov to omb.gov: The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no DS RR matched a DNSKEY with algorithm 7 that signs the zone's DNSKEY RRset. (23.211.61.66, 95.100.168.64, 95.100.175.65, 96.7.49.67, 184.26.160.64, 193.108.91.61, 2600:1401:2::3d, 2600:1408:1c::43, 2600:1480:b000::40, 2600:1480:f000::40, 2a02:26f0:67::41, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
omb.gov/A: The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (23.211.61.66, 95.100.168.64, 95.100.175.65, 96.7.49.67, 184.26.160.64, 193.108.91.61, 2600:1401:2::3d, 2600:1408:1c::43, 2600:1480:b000::40, 2600:1480:f000::40, 2a02:26f0:67::41, UDP_-_EDNS0_4096_D_KN)
omb.gov/AAAA: The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (23.211.61.66, 95.100.168.64, 95.100.175.65, 96.7.49.67, 184.26.160.64, 193.108.91.61, 2600:1401:2::3d, 2600:1408:1c::43, 2600:1480:b000::40, 2600:1480:f000::40, 2a02:26f0:67::41, UDP_-_EDNS0_4096_D_KN)
omb.gov/DNSKEY (alg 13, id 24933): The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (23.211.61.66, 95.100.168.64, 95.100.175.65, 96.7.49.67, 184.26.160.64, 193.108.91.61, 2600:1401:2::3d, 2600:1408:1c::43, 2600:1480:b000::40, 2600:1480:f000::40, 2a02:26f0:67::41, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
omb.gov/DNSKEY (alg 13, id 37443): The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (23.211.61.66, 95.100.168.64, 95.100.175.65, 96.7.49.67, 184.26.160.64, 193.108.91.61, 2600:1401:2::3d, 2600:1408:1c::43, 2600:1480:b000::40, 2600:1480:f000::40, 2a02:26f0:67::41, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
omb.gov/DNSKEY (alg 13, id 59859): The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (23.211.61.66, 95.100.168.64, 95.100.175.65, 96.7.49.67, 184.26.160.64, 193.108.91.61, 2600:1401:2::3d, 2600:1408:1c::43, 2600:1480:b000::40, 2600:1480:f000::40, 2a02:26f0:67::41, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
omb.gov/MX: The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (23.211.61.66, 95.100.168.64, 95.100.175.65, 96.7.49.67, 184.26.160.64, 193.108.91.61, 2600:1401:2::3d, 2600:1408:1c::43, 2600:1480:b000::40, 2600:1480:f000::40, 2a02:26f0:67::41, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
omb.gov/NS: The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (23.211.61.66, 95.100.168.64, 95.100.175.65, 96.7.49.67, 184.26.160.64, 193.108.91.61, 2600:1401:2::3d, 2600:1408:1c::43, 2600:1480:b000::40, 2600:1480:f000::40, 2a02:26f0:67::41, UDP_-_EDNS0_4096_D_KN)
omb.gov/NSEC3PARAM: The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (23.211.61.66, 95.100.168.64, 95.100.175.65, 96.7.49.67, 184.26.160.64, 193.108.91.61, 2600:1401:2::3d, 2600:1408:1c::43, 2600:1480:b000::40, 2600:1480:f000::40, 2a02:26f0:67::41, UDP_-_EDNS0_4096_D_KN)
omb.gov/SOA: The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (23.211.61.66, 95.100.168.64, 95.100.175.65, 96.7.49.67, 184.26.160.64, 193.108.91.61, 2600:1401:2::3d, 2600:1408:1c::43, 2600:1480:b000::40, 2600:1480:f000::40, 2a02:26f0:67::41, TCP_-_EDNS0_4096_D_N, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20)
omb.gov/TXT: The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (23.211.61.66, 95.100.168.64, 95.100.175.65, 96.7.49.67, 184.26.160.64, 193.108.91.61, 2600:1401:2::3d, 2600:1408:1c::43, 2600:1480:b000::40, 2600:1480:f000::40, 2a02:26f0:67::41, UDP_-_EDNS0_4096_D_KN)
Warnings (8)
omb.gov/DS (alg 13, id 59859): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
omb.gov/DS (alg 13, id 59859): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
omb.gov/DS (alg 13, id 59859): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
omb.gov/DS (alg 13, id 59859): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
omb.gov/DS (alg 7, id 44560): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
omb.gov/DS (alg 7, id 44560): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
omb.gov/DS (alg 7, id 44560): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
omb.gov/DS (alg 7, id 44560): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.