RRSIG hhsops.gov/A alg 8, id 2373: With a TTL of 86400 the RRSIG RR can be in the cache of a non-validating resolver until 23 hours after it expires at 2021-11-05 18:12:43+00:00. See RFC 4035, Sec. 5.3.3.
RRSIG hhsops.gov/A alg 8, id 2373: With a TTL of 86400 the RRSIG RR can be in the cache of a non-validating resolver until 23 hours after it expires at 2021-11-05 18:12:45+00:00. See RFC 4035, Sec. 5.3.3.
RRSIG hhsops.gov/AAAA alg 8, id 2373: With a TTL of 86400 the RRSIG RR can be in the cache of a non-validating resolver until 23 hours after it expires at 2021-11-05 18:12:45+00:00. See RFC 4035, Sec. 5.3.3.
RRSIG hhsops.gov/MX alg 8, id 2373: With a TTL of 86400 the RRSIG RR can be in the cache of a non-validating resolver until 23 hours after it expires at 2021-11-05 18:12:45+00:00. See RFC 4035, Sec. 5.3.3.
RRSIG hhsops.gov/NS alg 8, id 2373: With a TTL of 86400 the RRSIG RR can be in the cache of a non-validating resolver until 23 hours after it expires at 2021-11-05 18:12:45+00:00. See RFC 4035, Sec. 5.3.3.
RRSIG hhsops.gov/SOA alg 8, id 2373: With a TTL of 86400 the RRSIG RR can be in the cache of a non-validating resolver until 23 hours after it expires at 2021-11-05 18:12:45+00:00. See RFC 4035, Sec. 5.3.3.
RRSIG hhsops.gov/TXT alg 8, id 2373: With a TTL of 86400 the RRSIG RR can be in the cache of a non-validating resolver until 23 hours after it expires at 2021-11-05 18:12:45+00:00. See RFC 4035, Sec. 5.3.3.
hhsops.gov/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
ugm5tbaefs.hhsops.gov/A has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (10)
hhsops.gov/DS (alg 8, id 40912): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
hhsops.gov/DS (alg 8, id 40912): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
hhsops.gov/DS (alg 8, id 40912): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
hhsops.gov/DS (alg 8, id 40912): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
hhsops.gov/DS (alg 8, id 50665): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
hhsops.gov/DS (alg 8, id 50665): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
hhsops.gov/DS (alg 8, id 50665): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
hhsops.gov/DS (alg 8, id 50665): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
hhsops.gov/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.
ugm5tbaefs.hhsops.gov/A has warnings; select the "Denial of existence" DNSSEC option to see them.