_25._tcp.mx1.trt1.jus.br
Updated:
2020-09-16 05:23:15 UTC (1529 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Bogus (3)
- _25._tcp.mx1.trt1.jus.br/TLSA (NXDOMAIN)
- _tcp.mx1.trt1.jus.br/NS (NXDOMAIN)
- trt1.jus.br/SOA
Secure (1)
- mx1.trt1.jus.br/A
DNSKEY/DS/NSEC status
Secure (12)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 46594)
- br/DNSKEY (alg 13, id 2471)
- br/DNSKEY (alg 13, id 40410)
- br/DS (alg 13, id 2471)
- jus.br/DNSKEY (alg 13, id 4875)
- jus.br/DNSKEY (alg 13, id 50692)
- jus.br/DS (alg 13, id 4875)
- jus.br/DS (alg 13, id 50692)
- trt1.jus.br/DNSKEY (alg 7, id 16125)
- trt1.jus.br/DNSKEY (alg 7, id 3248)
- trt1.jus.br/DS (alg 7, id 16125)
Delegation status
Secure (3)
- . to br
- br to jus.br
- jus.br to trt1.jus.br
Notices
Errors (6)
- _25._tcp.mx1.trt1.jus.br/TLSA (NXDOMAIN): No NSEC RR(s) were returned to validate the NXDOMAIN response. See RFC 4035, Sec. 3.1.3.2, RFC 5155, Sec. 7.2.2. (201.33.31.68, UDP_-_EDNS0_4096_D_K)
- _tcp.mx1.trt1.jus.br/NS (NXDOMAIN): No NSEC RR(s) were returned to validate the NXDOMAIN response. See RFC 4035, Sec. 3.1.3.2, RFC 5155, Sec. 7.2.2. (201.33.31.68, UDP_-_EDNS0_4096_D_K)
- trt1.jus.br zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (177.38.99.133)
- trt1.jus.br/DNSKEY: The response (485 bytes) was malformed. (201.33.31.68, UDP_-_EDNS0_512_D_K)
- trt1.jus.br/SOA: No RRSIG covering the RRset was returned in the response. See RFC 4035, Sec. 3.1.1. (201.33.31.68, UDP_-_EDNS0_4096_D_K)
- trt1.jus.br/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (5)
- RRSIG mx1.trt1.jus.br/A alg 7, id 3248: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG trt1.jus.br/DNSKEY alg 7, id 16125: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG trt1.jus.br/DNSKEY alg 7, id 16125: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG trt1.jus.br/DNSKEY alg 7, id 3248: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- RRSIG trt1.jus.br/DNSKEY alg 7, id 3248: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
JavaScript is required to make the graph below interactive.
