www.shaftnet.org

Updated: 2020-12-18 21:29:46 UTC (1222 days ago) Update now

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Secure (3)

stuffed.shaftnet.org/A
stuffed.shaftnet.org/AAAA
www.shaftnet.org/CNAME

DNSKEY/DS/NSEC status

Secure (12)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 26116)
org/DNSKEY (alg 8, id 26974)
org/DNSKEY (alg 8, id 34266)
org/DNSKEY (alg 8, id 63858)
org/DS (alg 8, id 26974)
shaftnet.org/DNSKEY (alg 7, id 24828)
shaftnet.org/DNSKEY (alg 7, id 43364)
shaftnet.org/DNSKEY (alg 7, id 54375)
shaftnet.org/DNSKEY (alg 7, id 56537)
shaftnet.org/DS (alg 7, id 54375)
shaftnet.org/DS (alg 7, id 56537)

Delegation status

Secure (2)

. to org
org to shaftnet.org

Notices

Errors (18)

RRSIG shaftnet.org/DNSKEY alg 7, id 24828: The Signature Expiration field of the RRSIG RR (2020-12-17 20:23:26+00:00) is 1 day in the past.
RRSIG shaftnet.org/DNSKEY alg 7, id 24828: The Signature Expiration field of the RRSIG RR (2020-12-17 20:23:26+00:00) is 1 day in the past.
RRSIG shaftnet.org/DNSKEY alg 7, id 24828: The Signature Expiration field of the RRSIG RR (2020-12-17 20:23:26+00:00) is 1 day in the past.
RRSIG shaftnet.org/DNSKEY alg 7, id 24828: The Signature Expiration field of the RRSIG RR (2020-12-17 20:23:26+00:00) is 1 day in the past.
RRSIG shaftnet.org/DNSKEY alg 7, id 54375: The Signature Expiration field of the RRSIG RR (2020-12-17 20:23:26+00:00) is 1 day in the past.
RRSIG shaftnet.org/DNSKEY alg 7, id 54375: The Signature Expiration field of the RRSIG RR (2020-12-17 20:23:26+00:00) is 1 day in the past.
RRSIG shaftnet.org/DNSKEY alg 7, id 54375: The Signature Expiration field of the RRSIG RR (2020-12-17 20:23:26+00:00) is 1 day in the past.
RRSIG shaftnet.org/DNSKEY alg 7, id 54375: The Signature Expiration field of the RRSIG RR (2020-12-17 20:23:26+00:00) is 1 day in the past.
RRSIG stuffed.shaftnet.org/A alg 7, id 43364: The Signature Expiration field of the RRSIG RR (2020-12-18 05:40:27+00:00) is 15 hours, 49 minutes in the past.
RRSIG stuffed.shaftnet.org/A alg 7, id 56537: The Signature Expiration field of the RRSIG RR (2020-12-18 05:40:27+00:00) is 15 hours, 49 minutes in the past.
RRSIG stuffed.shaftnet.org/AAAA alg 7, id 43364: The Signature Expiration field of the RRSIG RR (2020-12-18 05:40:27+00:00) is 15 hours, 49 minutes in the past.
RRSIG stuffed.shaftnet.org/AAAA alg 7, id 56537: The Signature Expiration field of the RRSIG RR (2020-12-18 05:40:27+00:00) is 15 hours, 49 minutes in the past.
RRSIG www.shaftnet.org/CNAME alg 7, id 43364: The Signature Expiration field of the RRSIG RR (2020-12-15 08:55:29+00:00) is 3 days in the past.
RRSIG www.shaftnet.org/CNAME alg 7, id 43364: The Signature Expiration field of the RRSIG RR (2020-12-15 08:55:29+00:00) is 3 days in the past.
RRSIG www.shaftnet.org/CNAME alg 7, id 56537: The Signature Expiration field of the RRSIG RR (2020-12-15 08:55:29+00:00) is 3 days in the past.
RRSIG www.shaftnet.org/CNAME alg 7, id 56537: The Signature Expiration field of the RRSIG RR (2020-12-15 08:55:29+00:00) is 3 days in the past.
org to shaftnet.org: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (217.70.177.40, 2001:4b98:d:1::40, TCP_-_EDNS0_4096_D_KN)
org zone: The server(s) were not responsive to queries over UDP. (199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1)

Warnings (32)

RRSIG shaftnet.org/DNSKEY alg 7, id 24828: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 24828: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 24828: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 24828: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 24828: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 24828: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 24828: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 24828: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 54375: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 54375: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 54375: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 54375: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 54375: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 54375: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 54375: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG shaftnet.org/DNSKEY alg 7, id 54375: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG stuffed.shaftnet.org/A alg 7, id 43364: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG stuffed.shaftnet.org/A alg 7, id 43364: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG stuffed.shaftnet.org/A alg 7, id 56537: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG stuffed.shaftnet.org/A alg 7, id 56537: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG stuffed.shaftnet.org/AAAA alg 7, id 43364: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG stuffed.shaftnet.org/AAAA alg 7, id 43364: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG stuffed.shaftnet.org/AAAA alg 7, id 56537: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG stuffed.shaftnet.org/AAAA alg 7, id 56537: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG www.shaftnet.org/CNAME alg 7, id 43364: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG www.shaftnet.org/CNAME alg 7, id 43364: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG www.shaftnet.org/CNAME alg 7, id 43364: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG www.shaftnet.org/CNAME alg 7, id 43364: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG www.shaftnet.org/CNAME alg 7, id 56537: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG www.shaftnet.org/CNAME alg 7, id 56537: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG www.shaftnet.org/CNAME alg 7, id 56537: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG www.shaftnet.org/CNAME alg 7, id 56537: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).

DNSKEY legend

Full legend

	SEP bit set
	Revoke bit set
	Trust anchor

www.shaftnet.org

RRset status

Secure (3)

DNSKEY/DS/NSEC status

Secure (12)

Delegation status

Secure (2)

Notices

Errors (18)

Warnings (32)

DNSKEY legend

See also