www.usembassy.gov

Updated: 2022-10-29 16:29:16 UTC (210 days ago) Go to most recent »

DNSSEC options (hide)

Notices

DNSSEC Authentication Chain

./DNSKEY (alg 8, id 18733)
./DNSKEY (alg 8, id 20326)
NSEC3 proving non-existence of akamaiedge.net/DS
NSEC3 proving non-existence of edgekey.net/DS
gov/DNSKEY (alg 8, id 56278)
gov/DNSKEY (alg 8, id 7698)
gov/DS (alg 8, id 7698)
net/DNSKEY (alg 8, id 35886)
net/DNSKEY (alg 8, id 57635)
net/DS (alg 8, id 35886)
usembassy.gov/DNSKEY (alg 8, id 27663)
usembassy.gov/DNSKEY (alg 8, id 49278)
usembassy.gov/DNSKEY (alg 8, id 50089)
usembassy.gov/DS (alg 8, id 50089)
usembassy.gov/DS (alg 8, id 50089)

net to akamaiedge.net: Authoritative AAAA records exist for a11-192.akamaiedge.net, but there are no corresponding AAAA glue records.
net to edgekey.net: Authoritative AAAA records exist for a13-65.akam.net, but there are no corresponding AAAA glue records.
net to edgekey.net: Authoritative AAAA records exist for a5-65.akam.net, but there are no corresponding AAAA glue records.
net to edgekey.net: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the net zone): a11-65.akam.net, ns1-2.akam.net, a9-65.akam.net, a3-65.akam.net
net to edgekey.net: The following NS name(s) were found in the delegation NS RRset (i.e., in the net zone), but not in the authoritative NS RRset: ns1-66.akam.net, ns4-66.akam.net, ns5-66.akam.net, ns7-65.akam.net
usembassy.gov/DS (alg 8, id 50089): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
usembassy.gov/DS (alg 8, id 50089): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
usembassy.gov/DS (alg 8, id 50089): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
usembassy.gov/DS (alg 8, id 50089): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.