RRSIG purchasing.gov/DNSKEY alg 7, id 17382: The Signature Expiration field of the RRSIG RR (2022-05-09 12:07:21+00:00) is 1 day in the past.
RRSIG purchasing.gov/DNSKEY alg 7, id 17382: The Signature Expiration field of the RRSIG RR (2022-05-09 12:07:21+00:00) is 1 day in the past.
RRSIG purchasing.gov/DNSKEY alg 7, id 17382: The Signature Expiration field of the RRSIG RR (2022-05-09 12:07:21+00:00) is 1 day in the past.
RRSIG purchasing.gov/DNSKEY alg 7, id 5983: The Signature Expiration field of the RRSIG RR (2022-05-09 12:07:21+00:00) is 1 day in the past.
RRSIG purchasing.gov/DNSKEY alg 7, id 5983: The Signature Expiration field of the RRSIG RR (2022-05-09 12:07:21+00:00) is 1 day in the past.
RRSIG purchasing.gov/DNSKEY alg 7, id 5983: The Signature Expiration field of the RRSIG RR (2022-05-09 12:07:21+00:00) is 1 day in the past.
gov to purchasing.gov: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (56.0.82.25, UDP_-_EDNS0_4096_D_KN)
Warnings (21)
RRSIG purchasing.gov/A alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/DNSKEY alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/DNSKEY alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/DNSKEY alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/DNSKEY alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/DNSKEY alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/DNSKEY alg 7, id 5983: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/DNSKEY alg 7, id 5983: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/DNSKEY alg 7, id 5983: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/DNSKEY alg 7, id 5983: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/DNSKEY alg 7, id 5983: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/NS alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/NSEC3PARAM alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/SOA alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/SOA alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG purchasing.gov/TXT alg 7, id 17382: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
purchasing.gov/DNSKEY (alg 7, id 6719): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (56.0.141.25, UDP_-_EDNS0_4096_D_KN)
purchasing.gov/DS (alg 7, id 5983): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
purchasing.gov/DS (alg 7, id 5983): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
purchasing.gov/DS (alg 7, id 5983): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
purchasing.gov/DS (alg 7, id 5983): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.