tamu.edu

Updated: 2023-01-05 20:12:33 UTC (469 days ago) Go to most recent »

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Bogus (5)

tamu.edu/A
tamu.edu/MX
tamu.edu/NS
tamu.edu/SOA
tamu.edu/TXT

DNSKEY/DS/NSEC status

Bogus (9)

tamu.edu/DNSKEY (alg 5, id 18378)
tamu.edu/DNSKEY (alg 5, id 30274)
tamu.edu/DNSKEY (alg 5, id 32956)
tamu.edu/DNSKEY (alg 5, id 55857)
tamu.edu/DNSKEY (alg 5, id 57843)
tamu.edu/DNSKEY (alg 8, id 14109)
tamu.edu/DNSKEY (alg 8, id 43116)
tamu.edu/DNSKEY (alg 8, id 54682)
tamu.edu/DNSKEY (alg 8, id 8370)

Secure (10)

./DNSKEY (alg 8, id 18733)
./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 951)
edu/DNSKEY (alg 8, id 28065)
edu/DNSKEY (alg 8, id 28775)
edu/DS (alg 8, id 28065)
tamu.edu/DS (alg 5, id 30274)
tamu.edu/DS (alg 5, id 30274)
tamu.edu/DS (alg 8, id 54682)
tamu.edu/DS (alg 8, id 54682)

Delegation status

Bogus (1)

edu to tamu.edu

Secure (1)

. to edu

Notices

Errors (19)

RRSIG tamu.edu/DNSKEY alg 5, id 30274: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 5, id 30274: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 5, id 30274: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 5, id 30274: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 5, id 30274: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 5, id 30274: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 5, id 30274: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 5, id 30274: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 5, id 30274: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 8, id 54682: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 8, id 54682: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 8, id 54682: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 8, id 54682: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 8, id 54682: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 8, id 54682: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 8, id 54682: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 8, id 54682: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
RRSIG tamu.edu/DNSKEY alg 8, id 54682: The Signature Expiration field of the RRSIG RR (2022-12-30 14:05:03+00:00) is 6 days in the past.
edu to tamu.edu: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (128.194.211.238, 165.91.16.133, 192.195.87.5, 192.195.94.166, UDP_-_EDNS0_4096_D_KN)

Warnings (40)

RRSIG tamu.edu/A alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 30274: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 30274: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 30274: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 30274: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 30274: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 30274: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 30274: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 30274: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 30274: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 32956: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 32956: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 32956: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 32956: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 32956: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 32956: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 32956: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 32956: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/DNSKEY alg 5, id 32956: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/MX alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/NS alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/SOA alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG tamu.edu/TXT alg 5, id 18378: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
tamu.edu/DS (alg 5, id 30274): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
tamu.edu/DS (alg 5, id 30274): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
tamu.edu/DS (alg 5, id 30274): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
tamu.edu/DS (alg 5, id 30274): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
tamu.edu/DS (alg 8, id 54682): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
tamu.edu/DS (alg 8, id 54682): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
tamu.edu/DS (alg 8, id 54682): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
tamu.edu/DS (alg 8, id 54682): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.