www.bncr.fi.cr

Updated: 2020-03-18 15:04:40 UTC (1760 days ago) Go to most recent »

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Ignore RFC 8624:
|?| Ignore RFC 9276:
|?| Multi-signer:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Secure (1)

www.bncr.fi.cr/A

DNSKEY/DS/NSEC status

Secure (17)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 33853)
bncr.fi.cr/DNSKEY (alg 8, id 13921)
bncr.fi.cr/DNSKEY (alg 8, id 30790)
bncr.fi.cr/DNSKEY (alg 8, id 36280)
bncr.fi.cr/DNSKEY (alg 8, id 9847)
bncr.fi.cr/DS (alg 5, id 30754)
bncr.fi.cr/DS (alg 5, id 35561)
bncr.fi.cr/DS (alg 5, id 61802)
bncr.fi.cr/DS (alg 8, id 30790)
cr/DNSKEY (alg 13, id 51625)
cr/DNSKEY (alg 13, id 65442)
cr/DS (alg 13, id 19676)
cr/DS (alg 13, id 51625)
fi.cr/DNSKEY (alg 13, id 15493)
fi.cr/DNSKEY (alg 13, id 58002)
fi.cr/DS (alg 13, id 15493)

Non_existent (4)

bncr.fi.cr/DNSKEY (alg 5, id 30754)
bncr.fi.cr/DNSKEY (alg 5, id 35561)
bncr.fi.cr/DNSKEY (alg 5, id 61802)
cr/DNSKEY (alg 13, id 19676)

Delegation status

Secure (3)

. to cr
cr to fi.cr
fi.cr to bncr.fi.cr

Notices

Errors (8)

bncr.fi.cr/DNSKEY (alg 8, id 13921): The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (201.220.29.22, 201.220.29.151, UDP_-_EDNS0_4096_D_K)
bncr.fi.cr/DNSKEY (alg 8, id 30790): The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (201.220.29.22, 201.220.29.151, UDP_-_EDNS0_4096_D_K)
bncr.fi.cr/DNSKEY (alg 8, id 36280): The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (201.220.29.22, 201.220.29.151, UDP_-_EDNS0_4096_D_K)
bncr.fi.cr/DNSKEY (alg 8, id 9847): The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (201.220.29.22, 201.220.29.151, UDP_-_EDNS0_4096_D_K)
fi.cr to bncr.fi.cr: The DS RRset for the zone included algorithm 5 (RSASHA1), but no DS RR matched a DNSKEY with algorithm 5 that signs the zone's DNSKEY RRset. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (201.220.29.22, 201.220.29.151, UDP_-_EDNS0_4096_D_K)
www.bncr.fi.cr/A: The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (201.220.29.22, 201.220.29.151, UDP_-_EDNS0_4096_D_K)
www.bncr.fi.cr/AAAA has errors; select the "Denial of existence" DNSSEC option to see them.
bncr.fi.cr/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.

Warnings (2)

www.bncr.fi.cr/AAAA has warnings; select the "Denial of existence" DNSSEC option to see them.
bncr.fi.cr/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.