pms.psc.gov

Updated: 2023-04-07 15:35:29 UTC (995 days ago) Go to most recent »

DNSSEC options (hide)

Notices

DNSSEC Authentication Chain

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 60955)
./DNSKEY (alg 8, id 951)
gov/DNSKEY (alg 8, id 24250)
gov/DNSKEY (alg 8, id 7698)
gov/DS (alg 8, id 7698)
ha.psc.gov/DNSKEY (alg 8, id 24922)
ha.psc.gov/DNSKEY (alg 8, id 25716)
ha.psc.gov/DNSKEY (alg 8, id 51034)
ha.psc.gov/DNSKEY (alg 8, id 51873)
ha.psc.gov/DS (alg 8, id 24922)
ha.psc.gov/DS (alg 8, id 51034)
psc.gov/DNSKEY (alg 8, id 19738)
psc.gov/DNSKEY (alg 8, id 51421)
psc.gov/DNSKEY (alg 8, id 5627)
psc.gov/DNSKEY (alg 8, id 8889)
psc.gov/DS (alg 8, id 51421)
psc.gov/DS (alg 8, id 5627)

psc.gov zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2607:f220:0:1::2a, 2607:f220:0:1::2b, 2607:f220:0:1::2c, 2607:f220:0:1::2d)

ha.psc.gov/DS (alg 8, id 51034): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
ha.psc.gov/DS (alg 8, id 51034): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
ha.psc.gov/DS (alg 8, id 51034): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
ha.psc.gov/DS (alg 8, id 51034): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
psc.gov to ha.psc.gov: The following NS name(s) were found in the delegation NS RRset (i.e., in the psc.gov zone), but not in the authoritative NS RRset: ns2.ha.nih.gov See RFC 1034, Sec. 4.2.2.