sales.hpcl.co.in

Updated: 2020-05-20 20:25:14 UTC (1459 days ago) Update now

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Secure (1)

sales.hpcl.co.in/A

DNSKEY/DS/NSEC status

Secure (18)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 48903)
co.in/DNSKEY (alg 7, id 20220)
co.in/DNSKEY (alg 7, id 32566)
co.in/DNSKEY (alg 7, id 61037)
co.in/DNSKEY (alg 7, id 8093)
co.in/DNSKEY (alg 8, id 56808)
co.in/DNSKEY (alg 8, id 6004)
co.in/DS (alg 8, id 6004)
co.in/DS (alg 8, id 6004)
hpcl.co.in/DNSKEY (alg 7, id 16764)
hpcl.co.in/DNSKEY (alg 7, id 35984)
hpcl.co.in/DS (alg 7, id 16764)
hpcl.co.in/DS (alg 7, id 16764)
in/DNSKEY (alg 8, id 54739)
in/DNSKEY (alg 8, id 65169)
in/DS (alg 8, id 54739)
in/DS (alg 8, id 54739)

Delegation status

Secure (3)

. to in
co.in to hpcl.co.in
in to co.in

Notices

Errors (8)

./DNSKEY: No response was received from the server over UDP (tried 4 times). (2001:500:12::d0d, UDP_-_EDNS0_512_D_K)
co.in/DNSKEY (alg 7, id 20220): The DNSKEY RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (37.209.192.12, 37.209.194.12, 37.209.196.12, 37.209.198.12, 156.154.100.20, 156.154.101.20, 2001:502:2eda::20, 2001:502:ad09::20, 2001:dcd:1::12, 2001:dcd:2::12, 2001:dcd:3::12, 2001:dcd:4::12, UDP_-_EDNS0_4096_D_K)
co.in/DNSKEY (alg 7, id 32566): The DNSKEY RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (37.209.192.12, 37.209.194.12, 37.209.196.12, 37.209.198.12, 156.154.100.20, 156.154.101.20, 2001:502:2eda::20, 2001:502:ad09::20, 2001:dcd:1::12, 2001:dcd:2::12, 2001:dcd:3::12, 2001:dcd:4::12, UDP_-_EDNS0_4096_D_K)
co.in/DNSKEY (alg 7, id 61037): The DNSKEY RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (37.209.192.12, 37.209.194.12, 37.209.196.12, 37.209.198.12, 156.154.100.20, 156.154.101.20, 2001:502:2eda::20, 2001:502:ad09::20, 2001:dcd:1::12, 2001:dcd:2::12, 2001:dcd:3::12, 2001:dcd:4::12, UDP_-_EDNS0_4096_D_K)
co.in/DNSKEY (alg 7, id 8093): The DNSKEY RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (37.209.192.12, 37.209.194.12, 37.209.196.12, 37.209.198.12, 156.154.100.20, 156.154.101.20, 2001:502:2eda::20, 2001:502:ad09::20, 2001:dcd:1::12, 2001:dcd:2::12, 2001:dcd:3::12, 2001:dcd:4::12, UDP_-_EDNS0_4096_D_K)
co.in/DNSKEY (alg 8, id 56808): The DNSKEY RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (37.209.192.12, 37.209.194.12, 37.209.196.12, 37.209.198.12, 156.154.100.20, 156.154.101.20, 2001:502:2eda::20, 2001:502:ad09::20, 2001:dcd:1::12, 2001:dcd:2::12, 2001:dcd:3::12, 2001:dcd:4::12, UDP_-_EDNS0_4096_D_K)
co.in/DNSKEY (alg 8, id 6004): The DNSKEY RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no RRSIG with algorithm 7 covering the RRset was returned in the response. (37.209.192.12, 37.209.194.12, 37.209.196.12, 37.209.198.12, 156.154.100.20, 156.154.101.20, 2001:502:2eda::20, 2001:502:ad09::20, 2001:dcd:1::12, 2001:dcd:2::12, 2001:dcd:3::12, 2001:dcd:4::12, UDP_-_EDNS0_4096_D_K)
hpcl.co.in zone: The server(s) were not responsive to queries over UDP. (2001:df0:270:10::11, 2001:df0:270:10::12)

Warnings (21)

RRSIG hpcl.co.in/DNSKEY alg 7, id 16764: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG hpcl.co.in/DNSKEY alg 7, id 16764: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG hpcl.co.in/DNSKEY alg 7, id 35984: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG hpcl.co.in/DNSKEY alg 7, id 35984: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG hpcl.co.in/DS alg 7, id 8093: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG hpcl.co.in/DS alg 7, id 8093: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG sales.hpcl.co.in/A alg 7, id 35984: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
co.in to hpcl.co.in: AAAA glue records exist for ns3.hpcl.co.in, but there are no corresponding authoritative AAAA records.
co.in to hpcl.co.in: AAAA glue records exist for ns4.hpcl.co.in, but there are no corresponding authoritative AAAA records.
co.in/DS (alg 8, id 6004): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
co.in/DS (alg 8, id 6004): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
co.in/DS (alg 8, id 6004): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
co.in/DS (alg 8, id 6004): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
hpcl.co.in/DS (alg 7, id 16764): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
hpcl.co.in/DS (alg 7, id 16764): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
hpcl.co.in/DS (alg 7, id 16764): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
hpcl.co.in/DS (alg 7, id 16764): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
in/DS (alg 8, id 54739): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
in/DS (alg 8, id 54739): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
in/DS (alg 8, id 54739): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
in/DS (alg 8, id 54739): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.