29102012.preprod.e2e.certificate-manager.test.cloud.ibm.com
Updated:
2020-10-29 22:20:27 UTC (1514 days ago)
Update now
Notices
DNSSEC Authentication Chain
RRset status
Insecure (9)
- 29102012.preprod.e2e.certificate-manager.test.cloud.ibm.com/A
- 29102012.preprod.e2e.certificate-manager.test.cloud.ibm.com/NS
- 29102012.preprod.e2e.certificate-manager.test.cloud.ibm.com/SOA
- certificate-manager.test.cloud.ibm.com/SOA
- cloud.ibm.com/SOA
- e2e.certificate-manager.test.cloud.ibm.com/SOA
- ibm.com/SOA
- preprod.e2e.certificate-manager.test.cloud.ibm.com/SOA
- test.cloud.ibm.com/SOA
Secure (2)
- com/SOA
- com/SOA
DNSKEY/DS/NSEC status
Secure (6)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 26116)
- NSEC3 proving non-existence of ibm.com/DS
- com/DNSKEY (alg 8, id 30909)
- com/DNSKEY (alg 8, id 31510)
- com/DS (alg 8, id 30909)
Delegation status
Incomplete (2)
- e2e.certificate-manager.test.cloud.ibm.com to preprod.e2e.certificate-manager.test.cloud.ibm.com
- preprod.e2e.certificate-manager.test.cloud.ibm.com to 29102012.preprod.e2e.certificate-manager.test.cloud.ibm.com
Insecure (5)
- certificate-manager.test.cloud.ibm.com to e2e.certificate-manager.test.cloud.ibm.com
- cloud.ibm.com to test.cloud.ibm.com
- com to ibm.com
- ibm.com to cloud.ibm.com
- test.cloud.ibm.com to certificate-manager.test.cloud.ibm.com
Secure (1)
- . to com
Notices
Errors (4)
- com zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2001:500:856e::30, 2001:502:1ca1::30, 2001:503:83eb::30, 2001:503:a83e::2:30)
- e2e.certificate-manager.test.cloud.ibm.com to preprod.e2e.certificate-manager.test.cloud.ibm.com: No delegation NS records were detected in the parent zone (e2e.certificate-manager.test.cloud.ibm.com). This results in an NXDOMAIN response to a DS query (for DNSSEC), even if the parent servers are authoritative for the child. See RFC 1034, Sec. 4.2.2. (67.228.254.4, 67.228.255.5, 2607:f0d0:0:f:1::1, 2607:f0d0:0:f:2::1, UDP_-_EDNS0_4096_D_K)
- preprod.e2e.certificate-manager.test.cloud.ibm.com to 29102012.preprod.e2e.certificate-manager.test.cloud.ibm.com: No delegation NS records were detected in the parent zone (preprod.e2e.certificate-manager.test.cloud.ibm.com). This results in an NXDOMAIN response to a DS query (for DNSSEC), even if the parent servers are authoritative for the child. See RFC 1034, Sec. 4.2.2. (67.228.254.4, 67.228.255.5, 2607:f0d0:0:f:1::1, 2607:f0d0:0:f:2::1, UDP_-_EDNS0_4096_D_K)
- test.cloud.ibm.com to certificate-manager.test.cloud.ibm.com: An SOA RR with owner name (certificate-manager.test.cloud.ibm.com) not matching the zone name (test.cloud.ibm.com) was returned with the NODATA response. See RFC 1034, Sec. 4.3.4, RFC 2308, Sec. 2.2. (162.159.34.10, 2606:4700:53::a29f:220a, UDP_-_EDNS0_4096_D_K)
Warnings (2)
- ibm.com to cloud.ibm.com: Authoritative AAAA records exist for ns008.name.cloud.ibm.com, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.
- ibm.com to cloud.ibm.com: Authoritative AAAA records exist for ns009.name.cloud.ibm.com, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.
JavaScript is required to make the graph below interactive.
