im trying to get dnssec to work, i got the directadmin part working but i keep bumping into this warning
http://dnssec-debugger.verisignlabs.com/nbvirtueel.nl#
DNSSEC
Begin testing DNSSEC for nbvirtueel.nl.
Found DS record for nbvirtueel.nl at parent.
Nameserver 217.21.197.102 does DNSSEC extra processing.
Nameserver 217.21.197.118 does DNSSEC extra processing.
Servers for nbvirtueel.nl have consistent extra processing status.
Found DNSKEY record for nbvirtueel.nl at child.
Consistent security for nbvirtueel.nl.
Checking DNSSEC at child (nbvirtueel.nl).
nbvirtueel.nl's key with tag 65130 uses algorithm number 5 (RSA/SHA-1).
Algorithm number 5 is OK.
nbvirtueel.nl's key with tag 12547 uses algorithm number 5 (RSA/SHA-1).
Algorithm number 5 is OK.
DNSKEY nbvirtueel.nl (tag 12547) is marked as a secure entry point (SEP).
DNSSEC signature expires at: Wed Nov 5 10:49:01 2014
DNSSEC signature RRSIG(nbvirtueel.nl/IN/DNSKEY/12547) matches records.
DNSSEC signature valid: RRSIG(nbvirtueel.nl/IN/DNSKEY/12547)
DNSSEC signature expires at: Wed Nov 5 10:49:01 2014
DNSSEC signature RRSIG(nbvirtueel.nl/IN/DNSKEY/65130) matches records.
DNSSEC signature valid: RRSIG(nbvirtueel.nl/IN/DNSKEY/65130)
Enough valid signatures found for nbvirtueel.nl.
DNSSEC signature expires at: Wed Nov 5 10:49:01 2014
DNSSEC signature RRSIG(nbvirtueel.nl/IN/SOA/65130) matches records.
DNSSEC signature valid: RRSIG(nbvirtueel.nl/IN/SOA/65130)
Enough valid signatures over SOA RRset found for nbvirtueel.nl.
DNSSEC child checks for nbvirtueel.nl complete.
Checking DNSSEC at parent of nbvirtueel.nl.
nbvirtueel.nl's key with tag 12550 uses algorithm number 8 (RSA/SHA-256).
Algorithm number 8 is OK.
Parent DS(DS(nbvirtueel.nl/8/2/12550)) refers to invalid key at child: No key
Parent DS(nbvirtueel.nl) does not refer to secure entry point (SEP) at child: DS(nbvirtueel.nl/8/2/12550)
nbvirtueel.nl's key with tag 65133 uses algorithm number 8 (RSA/SHA-256).
Algorithm number 8 is OK.
Parent DS(DS(nbvirtueel.nl/8/2/65133)) refers to invalid key at child: No key
Parent DS(nbvirtueel.nl) does not refer to secure entry point (SEP) at child: DS(nbvirtueel.nl/8/2/65133)
The zone nbvirtueel.nl has published DS records, but none of them work.
DNSSEC parent checks for nbvirtueel.nl complete.
Done testing DNSSEC for nbvirtueel.nl.
Test completed for zone nbvirtueel.nl.
http://dnssec-debugger.verisignlabs.com/nbvirtueel.nl#
DNSSEC
Begin testing DNSSEC for nbvirtueel.nl.
Found DS record for nbvirtueel.nl at parent.
Nameserver 217.21.197.102 does DNSSEC extra processing.
Nameserver 217.21.197.118 does DNSSEC extra processing.
Servers for nbvirtueel.nl have consistent extra processing status.
Found DNSKEY record for nbvirtueel.nl at child.
Consistent security for nbvirtueel.nl.
Checking DNSSEC at child (nbvirtueel.nl).
nbvirtueel.nl's key with tag 65130 uses algorithm number 5 (RSA/SHA-1).
Algorithm number 5 is OK.
nbvirtueel.nl's key with tag 12547 uses algorithm number 5 (RSA/SHA-1).
Algorithm number 5 is OK.
DNSKEY nbvirtueel.nl (tag 12547) is marked as a secure entry point (SEP).
DNSSEC signature expires at: Wed Nov 5 10:49:01 2014
DNSSEC signature RRSIG(nbvirtueel.nl/IN/DNSKEY/12547) matches records.
DNSSEC signature valid: RRSIG(nbvirtueel.nl/IN/DNSKEY/12547)
DNSSEC signature expires at: Wed Nov 5 10:49:01 2014
DNSSEC signature RRSIG(nbvirtueel.nl/IN/DNSKEY/65130) matches records.
DNSSEC signature valid: RRSIG(nbvirtueel.nl/IN/DNSKEY/65130)
Enough valid signatures found for nbvirtueel.nl.
DNSSEC signature expires at: Wed Nov 5 10:49:01 2014
DNSSEC signature RRSIG(nbvirtueel.nl/IN/SOA/65130) matches records.
DNSSEC signature valid: RRSIG(nbvirtueel.nl/IN/SOA/65130)
Enough valid signatures over SOA RRset found for nbvirtueel.nl.
DNSSEC child checks for nbvirtueel.nl complete.
Checking DNSSEC at parent of nbvirtueel.nl.
nbvirtueel.nl's key with tag 12550 uses algorithm number 8 (RSA/SHA-256).
Algorithm number 8 is OK.
Parent DS(DS(nbvirtueel.nl/8/2/12550)) refers to invalid key at child: No key
Parent DS(nbvirtueel.nl) does not refer to secure entry point (SEP) at child: DS(nbvirtueel.nl/8/2/12550)
nbvirtueel.nl's key with tag 65133 uses algorithm number 8 (RSA/SHA-256).
Algorithm number 8 is OK.
Parent DS(DS(nbvirtueel.nl/8/2/65133)) refers to invalid key at child: No key
Parent DS(nbvirtueel.nl) does not refer to secure entry point (SEP) at child: DS(nbvirtueel.nl/8/2/65133)
The zone nbvirtueel.nl has published DS records, but none of them work.
DNSSEC parent checks for nbvirtueel.nl complete.
Done testing DNSSEC for nbvirtueel.nl.
Test completed for zone nbvirtueel.nl.