scra.dmdc.osd.mil

Updated: 2025-10-03 12:52:43 UTC (72 days ago) Update now

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Ignore RFC 8624:
|?| Ignore RFC 9276:
|?| Multi-signer:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Secure (3)

scra-cp.dmdc.osd.mil/A
scra-e.dmdc.osd.mil/CNAME
scra.dmdc.osd.mil/CNAME

DNSKEY/DS/NSEC status

Secure (31)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 38696)
./DNSKEY (alg 8, id 46441)
./DNSKEY (alg 8, id 61809)
dmdc.osd.mil/DNSKEY (alg 8, id 15873)
dmdc.osd.mil/DNSKEY (alg 8, id 18108)
dmdc.osd.mil/DNSKEY (alg 8, id 20838)
dmdc.osd.mil/DNSKEY (alg 8, id 22129)
dmdc.osd.mil/DNSKEY (alg 8, id 40566)
dmdc.osd.mil/DNSKEY (alg 8, id 45519)
dmdc.osd.mil/DNSKEY (alg 8, id 51876)
dmdc.osd.mil/DNSKEY (alg 8, id 52659)
dmdc.osd.mil/DNSKEY (alg 8, id 53221)
dmdc.osd.mil/DNSKEY (alg 8, id 64597)
dmdc.osd.mil/DNSKEY (alg 8, id 6744)
dmdc.osd.mil/DNSKEY (alg 8, id 8298)
dmdc.osd.mil/DNSKEY (alg 8, id 8449)
dmdc.osd.mil/DNSKEY (alg 8, id 8841)
dmdc.osd.mil/DS (alg 8, id 22129)
dmdc.osd.mil/DS (alg 8, id 22129)
dmdc.osd.mil/DS (alg 8, id 8449)
dmdc.osd.mil/DS (alg 8, id 8449)
mil/DNSKEY (alg 8, id 45019)
mil/DNSKEY (alg 8, id 57558)
mil/DNSKEY (alg 8, id 65239)
mil/DS (alg 8, id 45019)
osd.mil/DNSKEY (alg 8, id 18169)
osd.mil/DNSKEY (alg 8, id 45138)
osd.mil/DNSKEY (alg 8, id 53254)
osd.mil/DS (alg 8, id 53254)
osd.mil/DS (alg 8, id 53254)

Delegation status

Secure (3)

. to mil
mil to osd.mil
osd.mil to dmdc.osd.mil

Notices

Errors (6)

dmdc.osd.mil/DNSKEY (alg 8, id 15873): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.252.47.11, 199.252.47.75, 214.3.117.1, 214.14.133.11, UDP_-_EDNS0_4096_D_KN)
dmdc.osd.mil/DNSKEY (alg 8, id 20838): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.252.47.11, 199.252.47.75, 214.3.117.1, 214.14.133.11, UDP_-_EDNS0_4096_D_KN)
dmdc.osd.mil/DNSKEY (alg 8, id 45519): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.252.47.11, 199.252.47.75, 214.3.116.1, 214.3.118.1, UDP_-_EDNS0_4096_D_KN)
dmdc.osd.mil/DNSKEY (alg 8, id 51876): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (214.3.116.1, 214.3.117.1, 214.3.118.1, 214.14.133.11, UDP_-_EDNS0_4096_D_KN)
dmdc.osd.mil/DNSKEY (alg 8, id 6744): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.252.47.11, 199.252.47.75, 214.3.116.1, 214.3.118.1, UDP_-_EDNS0_4096_D_KN)
dmdc.osd.mil/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.

Warnings (23)

dmdc.osd.mil/DNSKEY (alg 8, id 18108): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.252.47.11, 199.252.47.75, 214.3.117.1, 214.14.133.11, UDP_-_EDNS0_4096_D_KN)
dmdc.osd.mil/DNSKEY (alg 8, id 40566): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.252.47.11, 199.252.47.75, 214.3.116.1, 214.3.118.1, UDP_-_EDNS0_4096_D_KN)
dmdc.osd.mil/DNSKEY (alg 8, id 52659): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (214.3.116.1, 214.3.117.1, 214.3.118.1, 214.14.133.11, UDP_-_EDNS0_4096_D_KN)
dmdc.osd.mil/DNSKEY (alg 8, id 53221): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.252.47.11, 199.252.47.75, 214.3.117.1, 214.14.133.11, UDP_-_EDNS0_4096_D_KN)
dmdc.osd.mil/DNSKEY (alg 8, id 64597): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.252.47.11, 199.252.47.75, 214.3.117.1, 214.14.133.11, UDP_-_EDNS0_4096_D_KN)
dmdc.osd.mil/DNSKEY (alg 8, id 8298): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.252.47.11, 199.252.47.75, 214.3.116.1, 214.3.118.1, UDP_-_EDNS0_4096_D_KN)
dmdc.osd.mil/DNSKEY (alg 8, id 8841): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.252.47.11, 199.252.47.75, 214.3.117.1, 214.14.133.11, UDP_-_EDNS0_4096_D_KN)
dmdc.osd.mil/DS (alg 8, id 22129): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
dmdc.osd.mil/DS (alg 8, id 22129): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
dmdc.osd.mil/DS (alg 8, id 22129): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
dmdc.osd.mil/DS (alg 8, id 22129): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
dmdc.osd.mil/DS (alg 8, id 8449): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
dmdc.osd.mil/DS (alg 8, id 8449): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
dmdc.osd.mil/DS (alg 8, id 8449): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
dmdc.osd.mil/DS (alg 8, id 8449): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
mil/DNSKEY (alg 8, id 45019): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (199.252.180.234, UDP_-_EDNS0_4096_D_KN)
mil/DNSKEY (alg 8, id 57558): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (199.252.180.234, UDP_-_EDNS0_4096_D_KN)
mil/DNSKEY (alg 8, id 65239): No response was received until the UDP payload size was decreased, indicating that the server might be attempting to send a payload that exceeds the path maximum transmission unit (PMTU) size. See RFC 6891, Sec. 6.2.6. (199.252.180.234, UDP_-_EDNS0_4096_D_KN)
osd.mil/DS (alg 8, id 53254): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
osd.mil/DS (alg 8, id 53254): DNSSEC implementers are prohibited from implementing signing with DS algorithm 1 (SHA-1). See RFC 8624, Sec. 3.2.
osd.mil/DS (alg 8, id 53254): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
osd.mil/DS (alg 8, id 53254): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset. See RFC 4509, Sec. 3.
dmdc.osd.mil/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.