_acme-challenge.lan.ooo
« Previous analysis
|
Next analysis »
RRset status
Insecure (2)
-
_acme-challenge.lan.ooo/A (NXDOMAIN)
-
lan.ooo/SOA
DNSKEY/DS/NSEC status
Insecure (3)
-
NSEC3 proving non-existence of _acme-challenge.lan.ooo/A
-
lan.ooo/DNSKEY (alg 8, id 3091)
-
lan.ooo/DNSKEY (alg 8, id 3100)
Secure (8)
-
./DNSKEY (alg 8, id 20326)
-
./DNSKEY (alg 8, id 9799)
-
NSEC3 proving non-existence of lan.ooo/DS
-
ooo/DNSKEY (alg 8, id 41890)
-
ooo/DNSKEY (alg 8, id 64188)
-
ooo/DS (alg 8, id 32919)
-
ooo/DS (alg 8, id 41890)
-
ooo/DS (alg 8, id 41890)
Non_existent (1)
-
ooo/DNSKEY (alg 8, id 32919)
Notices
Warnings (4)
-
ooo/DS (alg 8, id 41890): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
-
ooo/DS (alg 8, id 41890): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
-
ooo/DS (alg 8, id 41890): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
-
ooo/DS (alg 8, id 41890): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
DNSKEY legend
Full legend
| SEP bit set |
| Revoke bit set |
| Trust anchor |
JavaScript is required to make the graph below interactive.