www.zoomgov.com
Updated:
2022-04-21 18:28:10 UTC (948 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Bogus (1)
- www.zoomgov.com/A
DNSKEY/DS/NSEC status
Bogus (2)
- zoomgov.com/DNSKEY (alg 5, id 27451)
- zoomgov.com/DNSKEY (alg 5, id 63303)
Secure (6)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 47671)
- com/DNSKEY (alg 8, id 30909)
- com/DNSKEY (alg 8, id 37269)
- com/DS (alg 8, id 30909)
- zoomgov.com/DS (alg 5, id 9709)
Non_existent (1)
- zoomgov.com/DNSKEY (alg 5, id 9709)
Delegation status
Bogus (1)
- com to zoomgov.com
Secure (1)
- . to com
Notices
Errors (2)
- com to zoomgov.com: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (108.59.161.4, 108.59.162.4, 108.59.163.4, 108.59.164.4, 2600:2000:2210::4, 2600:2000:2220::4, 2600:2000:2230::4, 2600:2000:2240::4, UDP_-_EDNS0_4096_D_KN)
- com to zoomgov.com: The DS RRset for the zone included algorithm 5 (RSASHA1), but no DS RR matched a DNSKEY with algorithm 5 that signs the zone's DNSKEY RRset. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (108.59.161.4, 108.59.162.4, 108.59.163.4, 108.59.164.4, 2600:2000:2210::4, 2600:2000:2220::4, 2600:2000:2230::4, 2600:2000:2240::4, UDP_-_EDNS0_4096_D_KN)
Warnings (7)
- RRSIG www.zoomgov.com/A alg 5, id 63303: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 5 (RSASHA1). See RFC 8624, Sec. 3.1.
- RRSIG zoomgov.com/DNSKEY alg 5, id 27451: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 5 (RSASHA1). See RFC 8624, Sec. 3.1.
- RRSIG zoomgov.com/DNSKEY alg 5, id 27451: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 5 (RSASHA1). See RFC 8624, Sec. 3.1.
- RRSIG zoomgov.com/DNSKEY alg 5, id 63303: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 5 (RSASHA1). See RFC 8624, Sec. 3.1.
- RRSIG zoomgov.com/DNSKEY alg 5, id 63303: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 5 (RSASHA1). See RFC 8624, Sec. 3.1.
- www.zoomgov.com/AAAA has warnings; select the "Denial of existence" DNSSEC option to see them.
- zoomgov.com/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
