{"Status":2,"TC":false,"RD":true,"RA":true,"AD":false,"CD":false,"Question":[{"name":"dau.mil.","type":2}],"Comment":"DNSSEC validation failure. Check http://dnsviz.net/d/dau.mil/dnssec/ and http://dnssec-debugger.verisignlabs.com/dau.mil for errors","extended_dns_errors":[{"info_code":7,"extra_text":"Expired RRSIG found for dau.mil/dnskey (keytag=15899)"},{"info_code":9,"extra_text":"No DNSKEY matches DS RRs of dau.mil"}]}