_acme-challenge.catpictures.app.sky.test.nhn.no
Updated:
2023-04-23 09:32:10 UTC (524 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Insecure (5)
- _acme-challenge.catpictures.app.sky.test.nhn.no.acme.nhn.no/TXT
- _acme-challenge.catpictures.app.sky.test.nhn.no/CNAME
- nhn.no/SOA
- sky.test.nhn.no/SOA
- test.nhn.no/SOA
Secure (1)
- no/SOA
DNSKEY/DS/NSEC status
Secure (6)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 60955)
- NSEC3 proving non-existence of nhn.no/DS
- no/DNSKEY (alg 13, id 38032)
- no/DNSKEY (alg 13, id 41404)
- no/DS (alg 13, id 38032)
Delegation status
Insecure (5)
- nhn.no to acme.nhn.no
- nhn.no to test.nhn.no
- no to nhn.no
- sky.test.nhn.no to catpictures.app.sky.test.nhn.no
- test.nhn.no to sky.test.nhn.no
Secure (1)
- . to no
Notices
Errors (1)
- catpictures.app.sky.test.nhn.no/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (6)
- NSEC3 proving non-existence of nhn.no/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
- NSEC3 proving non-existence of nhn.no/DS: The salt value for an NSEC3 record should be empty. See RFC 9276, Sec. 3.1.
- _acme-challenge.catpictures.app.sky.test.nhn.no/CNAME: The server responded with no OPT record, rather than with RCODE FORMERR. See RFC 6891, Sec. 7. (83.118.169.36, UDP_-_EDNS0_4096_D_KN)
- sky.test.nhn.no to catpictures.app.sky.test.nhn.no: The following NS name(s) were found in the delegation NS RRset (i.e., in the sky.test.nhn.no zone), but not in the authoritative NS RRset: ns1.gslb.sky.nhn.no See RFC 1034, Sec. 4.2.2.
- _acme-challenge.catpictures.app.sky.test.nhn.no/A has warnings; select the "Denial of existence" DNSSEC option to see them.
- _acme-challenge.catpictures.app.sky.test.nhn.no/AAAA has warnings; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
