preventionresourcefinder.gov

Updated: 2024-02-22 19:25:07 UTC (272 days ago) Go to most recent »

DNSSEC options (hide)

Notices

DNSSEC Authentication Chain

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 30903)
gov/DNSKEY (alg 8, id 10104)
gov/DNSKEY (alg 8, id 49735)
gov/DNSKEY (alg 8, id 64280)
gov/DS (alg 8, id 64280)
preventionresourcefinder.gov/DS (alg 13, id 3600)

RRSIG preventionresourcefinder.gov/A alg 13, id 34505: The TTL of the RRset (30) exceeds the value of the Original TTL field of the RRSIG RR covering it (28). See RFC 4035, Sec. 2.2.
gov to preventionresourcefinder.gov: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (108.162.193.203, 108.162.194.148, 162.159.38.148, 172.64.33.203, 172.64.34.148, 173.245.59.203, 2606:4700:50::a29f:2694, 2606:4700:58::adf5:3bcb, 2803:f800:50::6ca2:c1cb, 2803:f800:50::6ca2:c294, 2a06:98c1:50::ac40:21cb, 2a06:98c1:50::ac40:2294, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
gov to preventionresourcefinder.gov: The DS RRset for the zone included algorithm 13 (ECDSAP256SHA256), but no DS RR matched a DNSKEY with algorithm 13 that signs the zone's DNSKEY RRset. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (108.162.193.203, 108.162.194.148, 162.159.38.148, 172.64.33.203, 172.64.34.148, 173.245.59.203, 2606:4700:50::a29f:2694, 2606:4700:58::adf5:3bcb, 2803:f800:50::6ca2:c1cb, 2803:f800:50::6ca2:c294, 2a06:98c1:50::ac40:21cb, 2a06:98c1:50::ac40:2294, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)