purchasing.gov
Updated:
2022-05-10 14:41:22 UTC (718 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Secure (6)
- purchasing.gov/A
- purchasing.gov/NS
- purchasing.gov/NSEC3PARAM
- purchasing.gov/SOA
- purchasing.gov/SOA
- purchasing.gov/TXT
DNSKEY/DS/NSEC status
Bogus (1)
- purchasing.gov/DNSKEY (alg 7, id 6719)
Secure (9)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 47671)
- gov/DNSKEY (alg 8, id 2706)
- gov/DNSKEY (alg 8, id 7698)
- gov/DS (alg 8, id 7698)
- purchasing.gov/DNSKEY (alg 7, id 17382)
- purchasing.gov/DNSKEY (alg 7, id 5983)
- purchasing.gov/DS (alg 7, id 5983)
- purchasing.gov/DS (alg 7, id 5983)
Delegation status
Secure (2)
- . to gov
- gov to purchasing.gov
Notices
Errors (7)
- RRSIG purchasing.gov/DNSKEY alg 7, id 17382: The Signature Expiration field of the RRSIG RR (2022-05-09 12:07:21+00:00) is 1 day in the past.
- RRSIG purchasing.gov/DNSKEY alg 7, id 17382: The Signature Expiration field of the RRSIG RR (2022-05-09 12:07:21+00:00) is 1 day in the past.
- RRSIG purchasing.gov/DNSKEY alg 7, id 17382: The Signature Expiration field of the RRSIG RR (2022-05-09 12:07:21+00:00) is 1 day in the past.
- RRSIG purchasing.gov/DNSKEY alg 7, id 5983: The Signature Expiration field of the RRSIG RR (2022-05-09 12:07:21+00:00) is 1 day in the past.
- RRSIG purchasing.gov/DNSKEY alg 7, id 5983: The Signature Expiration field of the RRSIG RR (2022-05-09 12:07:21+00:00) is 1 day in the past.
- RRSIG purchasing.gov/DNSKEY alg 7, id 5983: The Signature Expiration field of the RRSIG RR (2022-05-09 12:07:21+00:00) is 1 day in the past.
- gov to purchasing.gov: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (56.0.82.25, UDP_-_EDNS0_4096_D_KN)
Warnings (21)
- RRSIG purchasing.gov/A alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/DNSKEY alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/DNSKEY alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/DNSKEY alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/DNSKEY alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/DNSKEY alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/DNSKEY alg 7, id 5983: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/DNSKEY alg 7, id 5983: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/DNSKEY alg 7, id 5983: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/DNSKEY alg 7, id 5983: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/DNSKEY alg 7, id 5983: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/NS alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/NSEC3PARAM alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/SOA alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/SOA alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- RRSIG purchasing.gov/TXT alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
- purchasing.gov/DNSKEY (alg 7, id 6719): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (56.0.141.25, UDP_-_EDNS0_4096_D_KN)
- purchasing.gov/DS (alg 7, id 5983): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- purchasing.gov/DS (alg 7, id 5983): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
- purchasing.gov/DS (alg 7, id 5983): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
- purchasing.gov/DS (alg 7, id 5983): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
JavaScript is required to make the graph below interactive.
