regulations.gov
Updated:
2021-10-27 15:55:59 UTC (1123 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Secure (12)
- regulations.gov/A
- regulations.gov/AAAA
- regulations.gov/NS
- regulations.gov/NSEC3PARAM
- regulations.gov/NSEC3PARAM
- regulations.gov/NSEC3PARAM
- regulations.gov/NSEC3PARAM (NODATA)
- regulations.gov/SOA
- regulations.gov/SOA
- regulations.gov/SOA
- regulations.gov/SOA
- regulations.gov/TXT
DNSKEY/DS/NSEC status
Secure (12)
- ./DNSKEY (alg 8, id 14748)
- ./DNSKEY (alg 8, id 20326)
- NSEC proving non-existence of regulations.gov/NSEC3PARAM
- gov/DNSKEY (alg 8, id 6229)
- gov/DNSKEY (alg 8, id 7698)
- gov/DS (alg 8, id 7698)
- regulations.gov/DNSKEY (alg 8, id 18474)
- regulations.gov/DNSKEY (alg 8, id 22896)
- regulations.gov/DNSKEY (alg 8, id 25980)
- regulations.gov/DNSKEY (alg 8, id 35314)
- regulations.gov/DS (alg 8, id 35314)
- regulations.gov/DS (alg 8, id 35314)
Delegation status
Secure (2)
- . to gov
- gov to regulations.gov
Notices
Errors (13)
- NSEC proving non-existence of regulations.gov/NSEC3PARAM: The following queries resulted in an answer response, even though the bitmap in the NSEC RR indicates that the queried records don't exist: regulations.gov/NSEC3PARAM See RFC 4035, Sec. 3.1.3.1.
- NSEC proving non-existence of regulations.gov/NSEC3PARAM: The following queries resulted in an answer response, even though the bitmap in the NSEC RR indicates that the queried records don't exist: regulations.gov/NSEC3PARAM See RFC 4035, Sec. 3.1.3.1.
- RRSIG regulations.gov/DNSKEY alg 8, id 22896: With a TTL of 1296000 the RRSIG RR can be in the cache of a non-validating resolver until 3 days after it expires at 2021-11-07 23:45:55+00:00. See RFC 4035, Sec. 5.3.3.
- RRSIG regulations.gov/DNSKEY alg 8, id 22896: With a TTL of 1296000 the RRSIG RR can be in the cache of a non-validating resolver until 3 days after it expires at 2021-11-07 23:45:55+00:00. See RFC 4035, Sec. 5.3.3.
- RRSIG regulations.gov/DNSKEY alg 8, id 22896: With a TTL of 1296000 the RRSIG RR can be in the cache of a non-validating resolver until 3 days after it expires at 2021-11-07 23:45:55+00:00. See RFC 4035, Sec. 5.3.3.
- RRSIG regulations.gov/DNSKEY alg 8, id 35314: With a TTL of 1296000 the RRSIG RR can be in the cache of a non-validating resolver until 3 days after it expires at 2021-11-07 23:45:55+00:00. See RFC 4035, Sec. 5.3.3.
- RRSIG regulations.gov/DNSKEY alg 8, id 35314: With a TTL of 1296000 the RRSIG RR can be in the cache of a non-validating resolver until 3 days after it expires at 2021-11-07 23:45:55+00:00. See RFC 4035, Sec. 5.3.3.
- RRSIG regulations.gov/DNSKEY alg 8, id 35314: With a TTL of 1296000 the RRSIG RR can be in the cache of a non-validating resolver until 3 days after it expires at 2021-11-07 23:45:55+00:00. See RFC 4035, Sec. 5.3.3.
- regulations.gov/DNSKEY (alg 8, id 25980): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (134.67.12.12, 2620:117:506f:c::f00c, UDP_-_EDNS0_4096_D_KN)
- w5qxk9bzyv.regulations.gov/A has errors; select the "Denial of existence" DNSSEC option to see them.
- regulations.gov/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
- regulations.gov/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
- regulations.gov/MX has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (8)
- regulations.gov/DNSKEY (alg 8, id 18474): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (134.67.12.10, 161.80.212.10, 161.80.212.12, 2620:117:506f:c::f00a, 2620:117:5071:d4::f00a, 2620:117:5071:d4::f00c, UDP_-_EDNS0_4096_D_KN)
- regulations.gov/DS (alg 8, id 35314): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
- regulations.gov/DS (alg 8, id 35314): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
- regulations.gov/DS (alg 8, id 35314): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
- regulations.gov/DS (alg 8, id 35314): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
- w5qxk9bzyv.regulations.gov/A has warnings; select the "Denial of existence" DNSSEC option to see them.
- regulations.gov/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.
- regulations.gov/MX has warnings; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
