ethicsburg.gov

Updated: 2023-10-16 14:51:19 UTC (406 days ago) Go to most recent »

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Ignore RFC 8624:
|?| Ignore RFC 9276:
|?| Multi-signer:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Secure (2)

ethicsburg.gov/NS
ethicsburg.gov/SOA

DNSKEY/DS/NSEC status

Secure (15)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 46780)
ethicsburg.gov/DNSKEY (alg 13, id 2371)
ethicsburg.gov/DNSKEY (alg 13, id 34505)
ethicsburg.gov/DNSKEY (alg 8, id 17818)
ethicsburg.gov/DNSKEY (alg 8, id 36622)
ethicsburg.gov/DS (alg 13, id 2371)
ethicsburg.gov/DS (alg 8, id 36622)
gov/DNSKEY (alg 8, id 10104)
gov/DNSKEY (alg 8, id 40921)
gov/DNSKEY (alg 8, id 49735)
gov/DNSKEY (alg 8, id 64280)
gov/DNSKEY (alg 8, id 7698)
gov/DS (alg 8, id 64280)
gov/DS (alg 8, id 7698)

Delegation status

Secure (2)

. to gov
gov to ethicsburg.gov

Notices

Errors (26)

RRSIG gov/DNSKEY alg 8, id 64280: The TTL of the RRset (86400) exceeds the value of the Original TTL field of the RRSIG RR covering it (3600). See RFC 4035, Sec. 2.2.
RRSIG gov/DNSKEY alg 8, id 64280: The TTL of the RRset (86400) exceeds the value of the Original TTL field of the RRSIG RR covering it (3600). See RFC 4035, Sec. 2.2.
RRSIG gov/DNSKEY alg 8, id 64280: The TTL of the RRset (86400) exceeds the value of the Original TTL field of the RRSIG RR covering it (3600). See RFC 4035, Sec. 2.2.
RRSIG gov/DNSKEY alg 8, id 64280: The TTL of the RRset (86400) exceeds the value of the Original TTL field of the RRSIG RR covering it (3600). See RFC 4035, Sec. 2.2.
RRSIG gov/DNSKEY alg 8, id 64280: The TTL of the RRset (86400) exceeds the value of the Original TTL field of the RRSIG RR covering it (3600). See RFC 4035, Sec. 2.2.
ethicsburg.gov/DNSKEY (alg 13, id 2371): The DNSKEY RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, UDP_-_EDNS0_4096_D_KN)
ethicsburg.gov/DNSKEY (alg 13, id 2371): The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, UDP_-_EDNS0_4096_D_KN)
ethicsburg.gov/DNSKEY (alg 13, id 34505): The DNSKEY RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, UDP_-_EDNS0_4096_D_KN)
ethicsburg.gov/DNSKEY (alg 13, id 34505): The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, UDP_-_EDNS0_4096_D_KN)
ethicsburg.gov/DNSKEY (alg 8, id 17818): The DNSKEY RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, UDP_-_EDNS0_4096_D_KN)
ethicsburg.gov/DNSKEY (alg 8, id 17818): The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, UDP_-_EDNS0_4096_D_KN)
ethicsburg.gov/DNSKEY (alg 8, id 36622): The DNSKEY RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, UDP_-_EDNS0_4096_D_KN)
ethicsburg.gov/DNSKEY (alg 8, id 36622): The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, UDP_-_EDNS0_4096_D_KN)
ethicsburg.gov/NS: The DNSKEY RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, UDP_-_EDNS0_4096_D_KN)
ethicsburg.gov/NS: The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, UDP_-_EDNS0_4096_D_KN)
ethicsburg.gov/SOA: The DNSKEY RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, TCP_-_EDNS0_4096_D_N, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20)
ethicsburg.gov/SOA: The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, TCP_-_EDNS0_4096_D_N, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20)
gov to ethicsburg.gov: The DS RRset for the zone included algorithm 8 (RSASHA256), but no DS RR matched a DNSKEY with algorithm 8 that signs the zone's DNSKEY RRset. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (162.159.0.233, 162.159.1.245, 2400:cb00:2049:1::a29f:e9, 2400:cb00:2049:1::a29f:1f5, UDP_-_EDNS0_4096_D_KN)
ethicsburg.gov/AAAA has errors; select the "Denial of existence" DNSSEC option to see them.
ethicsburg.gov/NSEC3PARAM has errors; select the "Denial of existence" DNSSEC option to see them.
ethicsburg.gov/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
ethicsburg.gov/MX has errors; select the "Denial of existence" DNSSEC option to see them.
ethicsburg.gov/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
43uge0krlc.ethicsburg.gov/A has errors; select the "Denial of existence" DNSSEC option to see them.
ethicsburg.gov/TXT has errors; select the "Denial of existence" DNSSEC option to see them.
ethicsburg.gov/A has errors; select the "Denial of existence" DNSSEC option to see them.

Warnings (1)

. to gov: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the . zone): d.ns.gov, a.ns.gov, b.ns.gov, c.ns.gov See RFC 1034, Sec. 4.2.2.