dtic.mil

Updated: 2021-12-02 15:22:10 UTC (1135 days ago) Go to most recent »

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Ignore RFC 8624:
|?| Ignore RFC 9276:
|?| Multi-signer:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Secure (8)

dtic.mil/A
dtic.mil/MX
dtic.mil/NS
dtic.mil/NSEC3PARAM
dtic.mil/NSEC3PARAM
dtic.mil/SOA
dtic.mil/SOA
dtic.mil/TXT

DNSKEY/DS/NSEC status

Secure (17)

./DNSKEY (alg 8, id 14748)
./DNSKEY (alg 8, id 20326)
dtic.mil/DNSKEY (alg 10, id 1536)
dtic.mil/DNSKEY (alg 10, id 24320)
dtic.mil/DNSKEY (alg 10, id 24962)
dtic.mil/DNSKEY (alg 10, id 51437)
dtic.mil/DNSKEY (alg 10, id 5631)
dtic.mil/DNSKEY (alg 10, id 63261)
dtic.mil/DNSKEY (alg 10, id 64835)
dtic.mil/DS (alg 10, id 1536)
dtic.mil/DS (alg 10, id 1536)
dtic.mil/DS (alg 10, id 63261)
dtic.mil/DS (alg 10, id 63261)
mil/DNSKEY (alg 8, id 56347)
mil/DNSKEY (alg 8, id 61224)
mil/DNSKEY (alg 8, id 6876)
mil/DS (alg 8, id 56347)

Delegation status

Secure (2)

. to mil
mil to dtic.mil

Notices

Errors (8)

dtic.mil zone: The following NS name(s) did not resolve to address(es): nsi1a.dtic.mil, nsi2a.dtic.mil
dtic.mil/DNSKEY (alg 10, id 1536): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (131.84.136.73, 140.18.188.250, 140.18.189.250, TCP_-_EDNS0_4096_D_KN)
dtic.mil/DNSKEY (alg 10, id 51437): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (131.84.136.73, 140.18.188.250, 140.18.189.250, TCP_-_EDNS0_4096_D_KN)
dtic.mil/DNSKEY (alg 10, id 63261): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (131.84.136.89, TCP_-_EDNS0_4096_D_KN)
dtic.mil/DNSKEY (alg 10, id 64835): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (131.84.136.89, TCP_-_EDNS0_4096_D_KN)
2sj6tbvxiu.dtic.mil/A has errors; select the "Denial of existence" DNSSEC option to see them.
dtic.mil/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
dtic.mil/AAAA has errors; select the "Denial of existence" DNSSEC option to see them.

Warnings (43)

RRSIG dtic.mil/A alg 10, id 64835: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 1536: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 1536: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 1536: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 1536: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 51437: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 51437: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 51437: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 51437: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 5631: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 5631: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 5631: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 5631: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 63261: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 63261: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 63261: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 64835: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 64835: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/DNSKEY alg 10, id 64835: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/MX alg 10, id 64835: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/NS alg 10, id 64835: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/NSEC3PARAM alg 10, id 51437: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/NSEC3PARAM alg 10, id 64835: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/SOA alg 10, id 51437: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/SOA alg 10, id 64835: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/TXT alg 10, id 51437: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
RRSIG dtic.mil/TXT alg 10, id 64835: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 10 (RSASHA512). See RFC 8624, Sec. 3.1.
dtic.mil/DNSKEY (alg 10, id 24320): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (131.84.136.89, TCP_-_EDNS0_4096_D_KN)
dtic.mil/DNSKEY (alg 10, id 24962): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (131.84.136.73, 140.18.188.250, 140.18.189.250, TCP_-_EDNS0_4096_D_KN)
dtic.mil/DNSKEY (alg 10, id 5631): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (131.84.136.73, 140.18.188.250, 140.18.189.250, TCP_-_EDNS0_4096_D_KN)
dtic.mil/DS (alg 10, id 1536): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
dtic.mil/DS (alg 10, id 1536): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
dtic.mil/DS (alg 10, id 1536): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
dtic.mil/DS (alg 10, id 1536): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
dtic.mil/DS (alg 10, id 63261): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
dtic.mil/DS (alg 10, id 63261): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
dtic.mil/DS (alg 10, id 63261): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
dtic.mil/DS (alg 10, id 63261): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
mil to dtic.mil: The following NS name(s) were found in the delegation NS RRset (i.e., in the mil zone), but not in the authoritative NS RRset: nsi1a.dtic.mil, nsi2a.dtic.mil See RFC 1034, Sec. 4.2.2.
2sj6tbvxiu.dtic.mil/A has warnings; select the "Denial of existence" DNSSEC option to see them.
dtic.mil/DNSKEY has warnings; select the "Denial of existence" DNSSEC option to see them.
dtic.mil/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.
dtic.mil/AAAA has warnings; select the "Denial of existence" DNSSEC option to see them.