Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

A+

Top configuration, no warnings +Preload

Checked:
07.08.2024 03:31:21

Older results

No older results found

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
mta-sts.ctman.cl	A	104.26.10.114 San Francisco/California/United States (US) - Cloudflare, Inc. No Hostname found	yes	1	0
	A	104.26.11.114 Toronto/Ontario/Canada (CA) - Cloudflare, Inc. No Hostname found	yes	1	0
	A	172.67.75.165 Toronto/Ontario/Canada (CA) - Cloudflare, Inc. No Hostname found	yes	1	0
	AAAA	2606:4700:20::681a:a72 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	yes
	AAAA	2606:4700:20::681a:b72 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	yes
	AAAA	2606:4700:20::ac43:4ba5 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	yes
www.mta-sts.ctman.cl		Name Error	yes	1	0
*.ctman.cl	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes
*.mta-sts.ctman.cl	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20038, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.08.2024, 00:00:00 +, Signature-Inception: 31.07.2024, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: cl
cl	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 21199, DigestType 2 and Digest fXVt/6ttPNnHhv9cZZlUwilE+u+UM+7ibx2E61Nws5Q=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner cl., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 19.08.2024, 21:00:00 +, Signature-Inception: 06.08.2024, 20:00:00 +, KeyTag 20038, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20038 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 21199, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 45234, Flags 256


	2 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner cl., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 14.09.2024, 14:01:26 +, Signature-Inception: 02.05.2024, 14:01:26 +, KeyTag 21199, Signer-Name: cl


	RRSIG-Owner cl., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 16.09.2024, 16:28:55 +, Signature-Inception: 07.08.2024, 00:01:29 +, KeyTag 45234, Signer-Name: cl


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 21199 used to validate the DNSKEY RRSet


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 45234 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 21199, DigestType 2 and Digest "fXVt/6ttPNnHhv9cZZlUwilE+u+UM+7ibx2E61Nws5Q=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: ctman.cl
ctman.cl	1 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 2371, DigestType 2 and Digest lrBzYC00r65w8vALSJo5Ml+GFKTGKmZH3jBsWkldGwQ=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner ctman.cl., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 17.09.2024, 23:27:40 +, Signature-Inception: 07.08.2024, 00:01:29 +, KeyTag 45234, Signer-Name: cl


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 45234 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 2371, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 13, KeyTag 34505, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner ctman.cl., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 23.09.2024, 11:04:20 +, Signature-Inception: 24.07.2024, 11:04:20 +, KeyTag 2371, Signer-Name: ctman.cl


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 2371 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 2371, DigestType 2 and Digest "lrBzYC00r65w8vALSJo5Ml+GFKTGKmZH3jBsWkldGwQ=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: mta-sts.ctman.cl
mta-sts.ctman.cl	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "mta-sts.ctman.cl" and the NextOwner "\000.mta-sts.ctman.cl". So the parent zone confirmes the non-existence of a DS RR. Bitmap: A, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI, CAA


	0 DNSKEY RR found





	RRSIG Type 1 validates the A - Result: 104.26.10.114 104.26.11.114 172.67.75.165 Validated: RRSIG-Owner mta-sts.ctman.cl., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 08.08.2024, 02:32:31 +, Signature-Inception: 06.08.2024, 00:32:31 +, KeyTag 34505, Signer-Name: ctman.cl


	RRSIG Type 28 validates the AAAA - Result: 2606:4700:0020:0000:0000:0000:681A:0A72 2606:4700:0020:0000:0000:0000:681A:0B72 2606:4700:0020:0000:0000:0000:AC43:4BA5 Validated: RRSIG-Owner mta-sts.ctman.cl., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 08.08.2024, 02:32:31 +, Signature-Inception: 06.08.2024, 00:32:31 +, KeyTag 34505, Signer-Name: ctman.cl


	CNAME-Query sends a valid NSEC RR as result with the query name "mta-sts.ctman.cl" equal the NSEC-owner "mta-sts.ctman.cl" and the NextOwner "\000.mta-sts.ctman.cl". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI, CAA Validated: RRSIG-Owner mta-sts.ctman.cl., Algorithm: 13, 3 Labels, original TTL: 1800 sec, Signature-expiration: 08.08.2024, 02:32:31 +, Signature-Inception: 06.08.2024, 00:32:31 +, KeyTag 34505, Signer-Name: ctman.cl


	Status: Good. NoData-Proof required and found.


	TXT-Query sends a valid NSEC RR as result with the query name "mta-sts.ctman.cl" equal the NSEC-owner "mta-sts.ctman.cl" and the NextOwner "\000.mta-sts.ctman.cl". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, 13, MX, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI, CAA Validated: RRSIG-Owner mta-sts.ctman.cl., Algorithm: 13, 3 Labels, original TTL: 1800 sec, Signature-expiration: 08.08.2024, 02:32:32 +, Signature-Inception: 06.08.2024, 00:32:32 +, KeyTag 34505, Signer-Name: ctman.cl


	Status: Good. NoData-Proof required and found.


	TLSA-Query (_443._tcp.mta-sts.ctman.cl) sends a valid NSEC RR as result with the query name "_443._tcp.mta-sts.ctman.cl" equal the NSEC-owner "_443._tcp.mta-sts.ctman.cl" and the NextOwner "\000._443._tcp.mta-sts.ctman.cl". So the zone confirmes the not-existence of that TLSA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: RRSIG, NSEC Validated: RRSIG-Owner _443._tcp.mta-sts.ctman.cl., Algorithm: 13, 5 Labels, original TTL: 1800 sec, Signature-expiration: 08.08.2024, 02:32:32 +, Signature-Inception: 06.08.2024, 00:32:32 +, KeyTag 34505, Signer-Name: ctman.cl


	Status: Good. NoData-Proof required and found.


	CAA-Query sends a valid NSEC RR as result with the query name "mta-sts.ctman.cl" equal the NSEC-owner "mta-sts.ctman.cl" and the NextOwner "\000.mta-sts.ctman.cl". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI Validated: RRSIG-Owner mta-sts.ctman.cl., Algorithm: 13, 3 Labels, original TTL: 1800 sec, Signature-expiration: 08.08.2024, 02:32:32 +, Signature-Inception: 06.08.2024, 00:32:32 +, KeyTag 34505, Signer-Name: ctman.cl


	Status: Good. NoData-Proof required and found.

Zone: www.mta-sts.ctman.cl
www.mta-sts.ctman.cl	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "www.mta-sts.ctman.cl" and the NextOwner "\000.www.mta-sts.ctman.cl". So the parent zone confirmes the non-existence of a DS RR. Bitmap: RRSIG, NSEC

3. Name Servers

Domain	Nameserver	NS-IP
www.mta-sts.ctman.cl	• dana.ns.cloudflare.com
mta-sts.ctman.cl	• dana.ns.cloudflare.com / 67m75	108.162.192.105 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	172.64.32.105 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	173.245.58.105 San Francisco/California/United States (US) - Cloudflare, Inc.	•
	•	2606:4700:50::adf5:3a69 Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	•
	•	2803:f800:50::6ca2:c069 San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.	•
	•	2a06:98c1:50::ac40:2069 London/England/United Kingdom (GB) - Cloudflare, Inc.	•
ctman.cl	• dana.ns.cloudflare.com / 67m45	108.162.192.105 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	172.64.32.105 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	173.245.58.105 San Francisco/California/United States (US) - Cloudflare, Inc.	•
	•	2606:4700:50::adf5:3a69 Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	•
	•	2803:f800:50::6ca2:c069 San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.	•
	•	2a06:98c1:50::ac40:2069 London/England/United Kingdom (GB) - Cloudflare, Inc.	•
	• grant.ns.cloudflare.com / 67m66	108.162.195.130 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	162.159.44.130 Los Angeles/California/United States (US) - Cloudflare, Inc.	•
	•	172.64.35.130 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	2606:4700:58::a29f:2c82 Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	•
	•	2803:f800:50::6ca2:c382 San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.	•
	•	2a06:98c1:50::ac40:2382 London/England/United Kingdom (GB) - Cloudflare, Inc.	•
cl	• a.nic.cl / amsterdam.nic.cl
	• b.nic.cl / cph.nic.cl		•
	• c.nic.cl / beaucheff.nic.cl		•
	• cl1.dnsnode.net / s2.amx		•
	• cl1-tld.d-zone.ca / CDG1		•
	• cl2-tld.d-zone.ca / FRA2		•
	• cl-ns.anycast.pch.net / 2.ams.pch		•

4. SOA-Entries

Domain:	cl
Zone-Name:	cl
Primary:	a.nic.cl
Mail:	dnsadmin.nic.cl
Serial:	2024080642
Refresh:	1200
Retry:	300
Expire:	2592000
TTL:	900
num Entries:	7

Domain:	ctman.cl
Zone-Name:	ctman.cl
Primary:	dana.ns.cloudflare.com
Mail:	dns.cloudflare.com
Serial:	2348476749
Refresh:	10000
Retry:	2400
Expire:	604800
TTL:	1800
num Entries:	12

Domain:	mta-sts.ctman.cl
Zone-Name:	ctman.cl
Primary:	dana.ns.cloudflare.com
Mail:	dns.cloudflare.com
Serial:	2348476749
Refresh:	10000
Retry:	2400
Expire:	604800
TTL:	1800
num Entries:	6

Domain:	www.mta-sts.ctman.cl
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1

5. Screenshots

No Screenshot listed, because no screenshot found. Perhaps the check is too old, the feature startet 2019-12-23.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://mta-sts.ctman.cl/ 104.26.10.114	301	https://mta-sts.ctman.cl/ Html is minified: 109.15 %	0.053	A
Date: Wed, 07 Aug 2024 01:33:12 GMT
Connection: close
Cache-Control: max-age=3600
Location: https://mta-sts.ctman.cl/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B0fu56ThvUAyhL8iJyEfDjNU%2B1FOV4E%2BV%2BIOs6yFaJTkw2QlTe7TnK7aAQYDUNiu%2BvQ5HUf2FD4NRv4mnGU94py5%2FmqmAs%2BGzgSpfKPXzMIi1GBw%2Bd3nVZPX%2BG7%2BSqPQI4c%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384676aeec1c3-BUD
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 167
Expires: Wed, 07 Aug 2024 02:33:12 GMT

• http://mta-sts.ctman.cl/ 104.26.11.114	301	https://mta-sts.ctman.cl/ Html is minified: 109.15 %	0.043	A
Date: Wed, 07 Aug 2024 01:33:12 GMT
Connection: close
Cache-Control: max-age=3600
Location: https://mta-sts.ctman.cl/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ktcI2zyz9g4k35Mx27uAdkjO6I6V0u8ocdGZ9M%2FzE73yr7qiDOiTVjLkEpdDNwTMQaMYkt01WjOJLfVGz5Cx1OVUJwnJUi%2FBnIxXFSed7GSfECZsnWg2vCGlFvvAjIidVqI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af38467c9683266-VIE
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 167
Expires: Wed, 07 Aug 2024 02:33:12 GMT

• http://mta-sts.ctman.cl/ 172.67.75.165	301	https://mta-sts.ctman.cl/ Html is minified: 109.15 %	0.040	A
Date: Wed, 07 Aug 2024 01:33:12 GMT
Connection: close
Cache-Control: max-age=3600
Location: https://mta-sts.ctman.cl/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mEdztADiQuH8gTK5phVOTj3XZSJq37qXB7Azq3lIr75TBjbnq%2FVdJ2iGY9%2FVDAXsVmHhE%2BTEjB8mpysd9MTshKU4KAqLi7J9%2FBFmbkxOqT9mAmk6d8kILG7g41yZrA6hQ1A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384681a2cbfb9-WAW
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 167
Expires: Wed, 07 Aug 2024 02:33:12 GMT

• http://mta-sts.ctman.cl/ 2606:4700:20::681a:a72	301	https://mta-sts.ctman.cl/ Html is minified: 109.15 %	0.040	A
Date: Wed, 07 Aug 2024 01:33:12 GMT
Connection: close
Cache-Control: max-age=3600
Location: https://mta-sts.ctman.cl/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pJ7mymSz66oc8txExek9qVs9F9mcrIHjjy%2F1j%2FBgg2KwijQc%2FC%2FW%2FjzlNWNEZBZCsw1lTL1cWWy4rChn0ACrvr8Od7EDptHvlQTDuYYitlVxUudxs2nuz7wOEE%2FEN%2BmGshP1baaeRCapo4Stz%2Bc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384687b47365c-FRA
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 167
Expires: Wed, 07 Aug 2024 02:33:12 GMT

• http://mta-sts.ctman.cl/ 2606:4700:20::681a:b72	301	https://mta-sts.ctman.cl/ Html is minified: 109.15 %	0.040	A
Date: Wed, 07 Aug 2024 01:33:12 GMT
Connection: close
Cache-Control: max-age=3600
Location: https://mta-sts.ctman.cl/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YrY5GZgavFM4G4Z6DxGbBdx5clk2ToPYZDKaTbk6%2FkighgFz3EkUONxlhKH3dIMOoSLQ4yJIaDRuZF9pGjrdPN3uyv7r2uo0NsX1BdweORIhZQUvNM7JYBhMwn1PxDBcObVVgBbyiG7qK8mmQ5c%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af38468cc8665cf-FRA
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 167
Expires: Wed, 07 Aug 2024 02:33:12 GMT

• http://mta-sts.ctman.cl/ 2606:4700:20::ac43:4ba5	301	https://mta-sts.ctman.cl/ Html is minified: 109.15 %	0.036	A
Date: Wed, 07 Aug 2024 01:33:12 GMT
Connection: close
Cache-Control: max-age=3600
Location: https://mta-sts.ctman.cl/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lWHr1yN7Fm7FSS%2Fu9Ezwify4sloW95SB3%2BhAOJspidVcrfFFFGCzI8QjP%2BDUsJ74ndMSlAOL8IiDBiarbLvoe1Py7cWszNCrvEarNlNFcLIeREfbGw%2BN6mCfI1wjbz5N6WDRVAa%2FFmkuZhTqLDY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384691b6a9ba4-FRA
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 167
Expires: Wed, 07 Aug 2024 02:33:12 GMT

• https://mta-sts.ctman.cl/ 104.26.10.114	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	2.467	A
Date: Wed, 07 Aug 2024 01:33:12 GMT
Connection: close
Location: https://mta-sts.ctman.cl/.well-known/mta-sts.txt
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w1YwC1HxQKpuAu2afGWm6RW42ACxFWVx0oMCYsOc2UIeSn%2FQyAjFi651BfRCbG6kpzhN6DKEf1%2FeJ9Rp4zfruLYW9%2BXx46eKfF1AC5%2BOwcEudAEhA%2BqoN97aYTx%2BOuxoXvA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af38469ca51c1c6-BUD
Alt-Svc: h3=":443"
Content-Length: 0

• https://mta-sts.ctman.cl/ 104.26.11.114	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	2.087	A
Date: Wed, 07 Aug 2024 01:33:15 GMT
Connection: close
Location: https://mta-sts.ctman.cl/.well-known/mta-sts.txt
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F08c7Eh0oIXl%2Bbj07HfHWwYMdVAQjEa3vj9AOMWjGDcijahBmgQffcZI2uRWKHacfKYCt2MB4%2BbBMBdzfxLBij3eIdLBaM3U5SiGD1hIapfia48vCIYOLatjTIevl4oetUU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af3847e188f5ad1-VIE
Alt-Svc: h3=":443"
Content-Length: 0

• https://mta-sts.ctman.cl/ 172.67.75.165	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	2.050	A
Date: Wed, 07 Aug 2024 01:33:18 GMT
Connection: close
Location: https://mta-sts.ctman.cl/.well-known/mta-sts.txt
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FT6L6kX6HET0JwAAFhJ5KTpajdIcRGFMYRyISBwE%2F5z1KC3nydlkSKNZiovbnfXRXYv%2FQ4oMjYmAd0Mb%2Faen%2BAvRa50lQPh5YRVqZBAtk5meZFRO%2BgCGCQ1IqKZrHIzMPSs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384901ccabbc6-WAW
Alt-Svc: h3=":443"
Content-Length: 0

• https://mta-sts.ctman.cl/ 2606:4700:20::681a:a72	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	2.034	A
Date: Wed, 07 Aug 2024 01:33:21 GMT
Connection: close
Location: https://mta-sts.ctman.cl/.well-known/mta-sts.txt
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UaVT4uLQ4lShcFhFXzcyhTwxHX4%2FSEIjJHLf80wV4v5wh6Gi5PHDpo1k5fuERPypA8VWOD3KG1tm2i8kwaI%2BRP51EeNb1SwMUeENbaYbU%2FHxPnwORkkFwHVsQ9wavdWNORnK5nnh4Lgsfy9dqPY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384a1a8799ba7-FRA
Alt-Svc: h3=":443"
Content-Length: 0

• https://mta-sts.ctman.cl/ 2606:4700:20::681a:b72	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	2.073	A
Date: Wed, 07 Aug 2024 01:33:24 GMT
Connection: close
Location: https://mta-sts.ctman.cl/.well-known/mta-sts.txt
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wQx7GwPfa4ertfJ6nT5xrQo10uWkSGOAnZChbKXE4qX5hUF%2FSPbuBiY%2FZB6uRf1Bzqi7u%2FBYiuAE%2BwO5JHe0lhtawvTqQ8M8sYlixtCBJfFfAbemdy%2Fq8Xcb6WAUxBKlEVLx%2FLbuT1mPMKzYznY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384b2ff453631-FRA
Alt-Svc: h3=":443"
Content-Length: 0

• https://mta-sts.ctman.cl/ 2606:4700:20::ac43:4ba5	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	2.047	A
Date: Wed, 07 Aug 2024 01:33:27 GMT
Connection: close
Location: https://mta-sts.ctman.cl/.well-known/mta-sts.txt
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vK7vpPk680I%2BNe3tOu3W4pBjqnJu9uGZbjjI9rTY6JHEC2wrjTyV4gb0PZdRvLvw7fAMIIGoVpJi4EsbTtYcqTPkTIfVf12lGOxFLMNM%2BfkQeVxaADsRX0tnmoTc5CMOm8OmPG56sOqwu6AO6EM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384c4ae2330f9-FRA
Alt-Svc: h3=":443"
Content-Length: 0

• https://mta-sts.ctman.cl/.well-known/mta-sts.txt Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 100.00 % Other inline scripts (∑/total): 0/0	2.053	A
Date: Wed, 07 Aug 2024 01:33:30 GMT
Transfer-Encoding: chunked
Connection: close
X-Clacks-Overhead: GAIA, GNU Terry Pratchett
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fD9lVWrY6jbvPFssLfM6uFms5Vs6qvnf%2FoRZqmH64azn8aY%2FGj0ceZfQnl9j2plmTO9y7jXeMoEbwe%2BgfPCxLGprnLU20tot5izVQwIMKBF9TcWrrLAL%2Faa%2BRTzD6VQMADSYOhqzMGa%2Bs2nALns%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384dc09bb3624-FRA
Alt-Svc: h3=":443"
Content-Type: text/plain; charset=UTF-8
Content-Encoding: gzip

• http://mta-sts.ctman.cl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 104.26.10.114	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	0.050	A
Visible Content:
Date: Wed, 07 Aug 2024 01:33:29 GMT
Connection: close
Location: https://mta-sts.ctman.cl/.well-known/mta-sts.txt
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EkD00TNxoSMJv2TIeEss9qtsJHzvkKi1lEwnPb6xJVQTq%2BJ61Lsl2lK0H1Ylm1KaZepbMViKRNkgLeY9DEMefPDQ7osko%2BHYXiEtQwBUaTmPEZ8wDGI1ZbM7RA%2FuTbCywfs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384d62e375aad-VIE
Alt-Svc: h3=":443"
Content-Length: 0

• http://mta-sts.ctman.cl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 104.26.11.114	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	0.054	A
Visible Content:
Date: Wed, 07 Aug 2024 01:33:30 GMT
Connection: close
Location: https://mta-sts.ctman.cl/.well-known/mta-sts.txt
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fZgFht%2BcZMZJ29SVmH05nIuk%2BKH%2BF2Hvjcwd%2FmM14NcMylzDTAKMCP6OvHrkWm%2FsscsXnL1t28cwij3G%2FdspuACmiX7FcGNETs66YFn5imsjjf25vnjExGhktNmd%2BplvOrQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384d6ec995b4f-VIE
Alt-Svc: h3=":443"
Content-Length: 0

• http://mta-sts.ctman.cl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 172.67.75.165	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	0.040	A
Visible Content:
Date: Wed, 07 Aug 2024 01:33:30 GMT
Connection: close
Location: https://mta-sts.ctman.cl/.well-known/mta-sts.txt
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wfl7DGYMvQEjs16TXHjtUELi%2FSe4fr7vcz%2F338HlOHdv4wpJTqCZ%2B57VSWC7jfgEt25YXeIrfGi7mRXhLYjL231SuPo6l05RdhNwMA62wKMkCGU1MKAlnuhqz%2FNQfqK%2Bw5w%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384d79bf4c01c-WAW
Alt-Svc: h3=":443"
Content-Length: 0

• http://mta-sts.ctman.cl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2606:4700:20::681a:a72	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	0.047	A
Visible Content:
Date: Wed, 07 Aug 2024 01:33:30 GMT
Connection: close
Location: https://mta-sts.ctman.cl/.well-known/mta-sts.txt
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2BANYJmK8X13W%2FZiZ8rcMj5eN8wYCdcWUW2h%2FlrJFuijV0%2BKAyVBR7R8xk1T8ev3DAbBBWPGoWDiDWOmicaZ%2BjCxBldQvxQeUKXVOBCoIgSDwfFu4Mt3LGNnd4N%2FbE6k8Cmcx%2FrqhL3%2FJPl1co4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384d848d2a03d-FRA
Alt-Svc: h3=":443"
Content-Length: 0

• http://mta-sts.ctman.cl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2606:4700:20::681a:b72	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	0.053	A
Visible Content:
Date: Wed, 07 Aug 2024 01:33:30 GMT
Connection: close
Location: https://mta-sts.ctman.cl/.well-known/mta-sts.txt
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B3y2TH%2BbJwmL4QTwXHIIQIQvfk3XvH6%2Fwb6UwE1vAoD2%2FSXuAOIXZRxhBiaF%2Bu7elFMy2coZXj7T0IgFtixohBiehY9dP1trb8X6578fuBH%2FWmrEElVzK0XiYT6wJpAuSHJTVsYxSBT2H375%2B%2F4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384d8fa2e377b-FRA
Alt-Svc: h3=":443"
Content-Length: 0

• http://mta-sts.ctman.cl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2606:4700:20::ac43:4ba5	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	0.047	A
Visible Content:
Date: Wed, 07 Aug 2024 01:33:30 GMT
Connection: close
Location: https://mta-sts.ctman.cl/.well-known/mta-sts.txt
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TWqlKi4mGkiaoj%2BUYzhsFiVGd%2F%2BRbTaW9L%2F%2BeC67gQOYNyL2xSY7f6iZ%2FPFpoA0SWRHCvExwLjwmWYja4HVJKtdwoLKOR43Hi9aud%2B3ZwmvDpC1qR9SNGGDp52bExSfStIa59%2FtzNbLtpUePXQs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8af384d97d669b9a-FRA
Alt-Svc: h3=":443"
Content-Length: 0

• https://104.26.10.114/ 104.26.10.114	-16		0.044	P
UnknownError - The SSL connection could not be established, see inner exception. - Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure' (FF: SSL_ERROR_NO_CYPHER_OVERLAP).

• https://104.26.11.114/ 104.26.11.114	-16		0.037	P
UnknownError - The SSL connection could not be established, see inner exception. - Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure' (FF: SSL_ERROR_NO_CYPHER_OVERLAP).

• https://172.67.75.165/ 172.67.75.165	-16		0.026	P
UnknownError - The SSL connection could not be established, see inner exception. - Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure' (FF: SSL_ERROR_NO_CYPHER_OVERLAP).

• https://[2606:4700:0020:0000:0000:0000:681a:0a72]/ 2606:4700:20::681a:a72	-16		0.026	P
UnknownError - The SSL connection could not be established, see inner exception. - Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure' (FF: SSL_ERROR_NO_CYPHER_OVERLAP).

• https://[2606:4700:0020:0000:0000:0000:681a:0b72]/ 2606:4700:20::681a:b72	-16		0.030	P
UnknownError - The SSL connection could not be established, see inner exception. - Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure' (FF: SSL_ERROR_NO_CYPHER_OVERLAP).

• https://[2606:4700:0020:0000:0000:0000:ac43:4ba5]/ 2606:4700:20::ac43:4ba5	-16		0.030	P
UnknownError - The SSL connection could not be established, see inner exception. - Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure' (FF: SSL_ERROR_NO_CYPHER_OVERLAP).

7. Comments

	1. General Results, most used to calculate the result
A	name "mta-sts.ctman.cl" is subdomain, public suffix is ".cl", top-level-domain is ".cl", top-level-domain-type is "country-code", Country is Chile, tld-manager is "NIC Chile (University of Chile)", num .cl-domains preloaded: 365 (complete: 245733)
A	Good: All ip addresses are public addresses
A	Good: Minimal 2 ip addresses per domain name found: mta-sts.ctman.cl has 6 different ip addresses (authoritative).
A	Good: Ipv4 and Ipv6 addresses per domain name found: mta-sts.ctman.cl has 3 ipv4, 3 ipv6 addresses
A	Good: No asked Authoritative Name Server had a timeout
A	DNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
A	https://mta-sts.ctman.cl/ 104.26.10.114	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	Correct redirect https to https
A	https://mta-sts.ctman.cl/ 104.26.11.114	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	Correct redirect https to https
A	https://mta-sts.ctman.cl/ 172.67.75.165	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	Correct redirect https to https
A	https://mta-sts.ctman.cl/ 2606:4700:20::681a:a72	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	Correct redirect https to https
A	https://mta-sts.ctman.cl/ 2606:4700:20::681a:b72	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	Correct redirect https to https
A	https://mta-sts.ctman.cl/ 2606:4700:20::ac43:4ba5	301	https://mta-sts.ctman.cl/.well-known/mta-sts.txt	Correct redirect https to https
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: non-www is preferred
A	Good: No cookie sent via http.
A	Good: HSTS has preload directive
A	Excellent: Main Domain is in the Google-Preload-List
A	Excellent: Main Domain is in the Mozilla/Firefox-Preload-List
A	HSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
A	http://mta-sts.ctman.cl/ 104.26.10.114	301	https://mta-sts.ctman.cl/	Correct redirect http - https with the same domain name
A	http://mta-sts.ctman.cl/ 104.26.11.114	301	https://mta-sts.ctman.cl/	Correct redirect http - https with the same domain name
A	http://mta-sts.ctman.cl/ 172.67.75.165	301	https://mta-sts.ctman.cl/	Correct redirect http - https with the same domain name
A	http://mta-sts.ctman.cl/ 2606:4700:20::681a:a72	301	https://mta-sts.ctman.cl/	Correct redirect http - https with the same domain name
A	http://mta-sts.ctman.cl/ 2606:4700:20::681a:b72	301	https://mta-sts.ctman.cl/	Correct redirect http - https with the same domain name
A	http://mta-sts.ctman.cl/ 2606:4700:20::ac43:4ba5	301	https://mta-sts.ctman.cl/	Correct redirect http - https with the same domain name
X	Fatal error: Nameserver doesn't support TCP connection: a.nic.cl: Timeout
A	Good: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain mta-sts.ctman.cl, 6 ip addresses.
	Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain mta-sts.ctman.cl, 6 ip addresses.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.mta-sts.ctman.cl
	2. Header-Checks
A	mta-sts.ctman.cl	report-to		Ok: Header without syntax errors found: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fD9lVWrY6jbvPFssLfM6uFms5Vs6qvnf%2FoRZqmH64azn8aY%2FGj0ceZfQnl9j2plmTO9y7jXeMoEbwe%2BgfPCxLGprnLU20tot5izVQwIMKBF9TcWrrLAL%2Faa%2BRTzD6VQMADSYOhqzMGa%2Bs2nALns%3D"}],"group":"cf-nel","max_age":604800}
A				Ok: Header without syntax errors found: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fD9lVWrY6jbvPFssLfM6uFms5Vs6qvnf%2FoRZqmH64azn8aY%2FGj0ceZfQnl9j2plmTO9y7jXeMoEbwe%2BgfPCxLGprnLU20tot5izVQwIMKBF9TcWrrLAL%2Faa%2BRTzD6VQMADSYOhqzMGa%2Bs2nALns%3D"}],"group":"cf-nel","max_age":604800}
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
F	mta-sts.ctman.cl	Content-Security-Policy		Critical: Missing Header:
F	mta-sts.ctman.cl	Referrer-Policy		Critical: Missing Header:
F	mta-sts.ctman.cl	Permissions-Policy		Critical: Missing Header:
B	mta-sts.ctman.cl	Cross-Origin-Embedder-Policy		Info: Missing Header
B	mta-sts.ctman.cl	Cross-Origin-Opener-Policy		Info: Missing Header
B	mta-sts.ctman.cl	Cross-Origin-Resource-Policy		Info: Missing Header
	3. DNS- and NameServer - Checks
A	Info:: 7 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
A	Info:: 7 Queries complete, 7 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
	Ok (4 - 8):: An average of 3.5 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 2 different Name Servers found: dana.ns.cloudflare.com, grant.ns.cloudflare.com, 2 Name Servers included in Delegation: dana.ns.cloudflare.com, grant.ns.cloudflare.com, 2 Name Servers included in 1 Zone definitions: dana.ns.cloudflare.com, grant.ns.cloudflare.com, 1 Name Servers listed in SOA.Primary: dana.ns.cloudflare.com.
A	Good: Only one SOA.Primary Name Server found.: dana.ns.cloudflare.com.
A	Good: SOA.Primary Name Server included in the delegation set.: dana.ns.cloudflare.com.
A	Good: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: dana.ns.cloudflare.com, grant.ns.cloudflare.com
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Good: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
	Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: com
	Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: cloudflare.com
A	Good: Name servers with different Country locations found: 2 Name Servers, 4 Countries: CA, CR, GB, US
A	Info: Ipv4-Subnet-list: 6 Name Servers, 4 different subnets (first Byte): 108., 162., 172., 173., 4 different subnets (first two Bytes): 108.162., 162.159., 172.64., 173.245., 6 different subnets (first three Bytes): 108.162.192., 108.162.195., 162.159.44., 172.64.32., 172.64.35., 173.245.58.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Info: IPv6-Subnet-list: 6 Name Servers with IPv6, 3 different subnets (first block): 2606:, 2803:, 2a06:, 3 different subnets (first two blocks): 2606:4700:, 2803:f800:, 2a06:98c1:, 4 different subnets (first three blocks): 2606:4700:0050:, 2606:4700:0058:, 2803:f800:0050:, 2a06:98c1:0050:, 4 different subnets (first four blocks): 2606:4700:0050:0000:, 2606:4700:0058:0000:, 2803:f800:0050:0000:, 2a06:98c1:0050:0000:
A	Good: Name Server IPv6 addresses from different subnets found.
A	Good: Nameserver supports TCP connections: 6 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 6 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 6 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 6 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: dana.ns.cloudflare.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
A	Good: All SOA have the same Serial Number
A	Good: CAA entries found, creating certificate is limited: comodoca.com is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: digicert.com is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: pki.goog is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: ssl.com is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: comodoca.com is allowed to create wildcard-certificates
A	Good: CAA entries found, creating certificate is limited: digicert.com is allowed to create wildcard-certificates
A	Good: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create wildcard-certificates
A	Good: CAA entries found, creating certificate is limited: pki.goog is allowed to create wildcard-certificates
A	Good: CAA entries found, creating certificate is limited: ssl.com is allowed to create wildcard-certificates
	4. Content- and Performance-critical Checks
	Fatal: All checks of /.well-known/acme-challenge/random-filename have a redirect, destination doesn't have the random filename. Creating a Letsencrypt certificate via http-01 challenge may not work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: No https + http status 200 with inline CSS / JavaScript found
A	Good: Every https result with status 200 has a minified Html-Content with a quota lower then 110 %.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
A	Info: No img element found, no alt attribute checked
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Duration: 196780 milliseconds, 196.780 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

mta-sts.ctman.cl

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

mta-sts.ctman.cl

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=ctman.cl
	2	CN=WE1, O=Google Trust Services, C=US
	3	CN=GTS Root R4, O=Google Trust Services LLC, C=US

mta-sts.ctman.cl

104.26.10.114

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

mta-sts.ctman.cl

104.26.10.114

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=ctman.cl
	2	CN=WE1, O=Google Trust Services, C=US
	3	CN=GTS Root R4, O=Google Trust Services LLC, C=US

mta-sts.ctman.cl

104.26.11.114

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

mta-sts.ctman.cl

104.26.11.114

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=ctman.cl
	2	CN=WE1, O=Google Trust Services, C=US
	3	CN=GTS Root R4, O=Google Trust Services LLC, C=US

mta-sts.ctman.cl

172.67.75.165

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

mta-sts.ctman.cl

172.67.75.165

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=ctman.cl
	2	CN=WE1, O=Google Trust Services, C=US
	3	CN=GTS Root R4, O=Google Trust Services LLC, C=US

mta-sts.ctman.cl

2606:4700:20::681a:a72

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

mta-sts.ctman.cl

2606:4700:20::681a:a72

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=ctman.cl
	2	CN=WE1, O=Google Trust Services, C=US
	3	CN=GTS Root R4, O=Google Trust Services LLC, C=US

mta-sts.ctman.cl

2606:4700:20::681a:b72

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

mta-sts.ctman.cl

2606:4700:20::681a:b72

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=ctman.cl
	2	CN=WE1, O=Google Trust Services, C=US
	3	CN=GTS Root R4, O=Google Trust Services LLC, C=US

mta-sts.ctman.cl

2606:4700:20::ac43:4ba5

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

mta-sts.ctman.cl

2606:4700:20::ac43:4ba5

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=ctman.cl
	2	CN=WE1, O=Google Trust Services, C=US
	3	CN=GTS Root R4, O=Google Trust Services LLC, C=US

9. Certificates

CN=ctman.cl

19.06.2024

17.09.2024
445 days expired

ctman.cl, *.ctman.cl - 2 entries

CN=ctman.cl

19.06.2024

17.09.2024
445 days expired

ctman.cl, *.ctman.cl - 2 entries

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA256
Serial Number:	1AAA08B40AC5884C0D6F6F5053A76792
Thumbprint:	D162A354F49E5B919097EB26EB98CE18A690D7C7
SHA256 / Certificate:	u66tabEeQ0kyGCHKyZof7XgXOvyueoZcQBU0qju6apQ=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	889f5b04a9c8b411019df3a4d0457cea3551efb28e1d2b5bb4058da39053c5e5
SHA256 hex / Subject Public Key Information (SPKI):	889f5b04a9c8b411019df3a4d0457cea3551efb28e1d2b5bb4058da39053c5e5 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://o.pki.goog/s/we1/Gqo
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=WE1, O=Google Trust Services, C=US

13.12.2023

20.02.2029
expires in 1172 days

CN=WE1, O=Google Trust Services, C=US

13.12.2023

20.02.2029
expires in 1172 days

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	7FF31977972C224A76155D13B6D685E3
Thumbprint:	108FBF794E18EC5347A414E4370CC4506C297AB2
SHA256 / Certificate:	HfwWBfutNY2LyET3bRUgP6ycpcGnn9SFf/ryhk++v5Y=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	908769e8d34477cc2cba0632c88605b22d7294c0840f78596d247c645b1afc0e
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=GTS Root R4, O=Google Trust Services LLC, C=US

15.11.2023

28.01.2028
expires in 783 days

CN=GTS Root R4, O=Google Trust Services LLC, C=US

15.11.2023

28.01.2028
expires in 783 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	7FE530BF331343BEDD821610493D8A1B
Thumbprint:	932BED339AA69212C89375B79304B475490B89A0
SHA256 / Certificate:	drJ7gKWAJ9w88dpo2sFwEO2TmX0LYD4vrb6FASSTtac=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	9847e5653e5e9e847516e5cb818606aa7544a19be67fd7366d506988e8d84347
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE

01.09.1998

28.01.2028
expires in 783 days

CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE

01.09.1998

28.01.2028
expires in 783 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA-1 with RSA Encryption
Serial Number:	040000000001154B5AC394
Thumbprint:	B1BC968BD4F49D622AA89A81F2150152A41D829C
SHA256 / Certificate:	69QQQOS7PsdCyeOB0x7ypBpItmhclufO88HfbNQzHJk=
SHA256 hex / Cert (DANE * 0 1):	ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
SHA256 hex / PublicKey (DANE * 1 1):	2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
SHA256 hex / Subject Public Key Information (SPKI):	2bcee858158cf5465fc9d76f0dfa312fef25a4dca8501da9b46b67d1fbfa1b64
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuer				last 7 days	active	num Certs
CN=AE1, O=Google Trust Services, C=US				0	3	16
CN=GTS CA 2A1, O=Google Trust Services LLC, C=US				0	0	7
CN=WE1, O=Google Trust Services, C=US				1	2	5
CN=WR1, O=Google Trust Services, C=US				1	2	5
CN=R3, O=Let's Encrypt, C=US				0	0	4
CN=E1, O=Let's Encrypt, C=US				0	0	4
CN=E5, O=Let's Encrypt, C=US				0	0	3
CN=R10, O=Let's Encrypt, C=US				0	0	3
CN=E6, O=Let's Encrypt, C=US				0	0	2
CN=GTS CA 1P5, O=Google Trust Services LLC, C=US				0	0	2
CN=R11, O=Let's Encrypt, C=US				0	0	2
CN=E7, O=Let's Encrypt, C=US				0	1	1
CN=R13, O=Let's Encrypt, C=US				0	1	1

CertSpotter-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
12960288887 precert	CN=WE1, O=Google Trust Services, C=US	2025-12-03 22:57:50	2026-03-03 23:57:44	*.ctman.cl, ctman.cl - 2 entries
12960290680 precert	CN=WR1, O=Google Trust Services, C=US	2025-12-03 22:57:38	2026-03-03 23:55:20	*.ctman.cl, ctman.cl - 2 entries
12848809057 precert	CN=AE1, O=Google Trust Services, C=US	2025-11-24 00:15:44	2026-01-08 01:10:34	*.ctman.cl, ctman.cl - 2 entries
12650703800 precert	CN=AE1, O=Google Trust Services, C=US	2025-11-09 23:55:10	2025-12-25 00:55:08	*.ctman.cl, ctman.cl - 2 entries
12466153021 precert	CN=AE1, O=Google Trust Services, C=US	2025-10-26 23:42:11	2025-12-11 00:40:49	*.ctman.cl, ctman.cl - 2 entries
12385140196 leaf cert	CN=E7, O=Let's Encrypt, C=US	2025-10-21 15:59:50	2026-01-19 15:59:49	*.ctman.cl, ctman.cl - 2 entries
12353075631 leaf cert	CN=R13, O=Let's Encrypt, C=US	2025-10-19 16:22:42	2026-01-17 16:22:41	*.ctman.cl, ctman.cl - 2 entries
12254728966 precert	CN=AE1, O=Google Trust Services, C=US	2025-10-12 23:27:56	2025-11-27 00:27:42	*.ctman.cl, ctman.cl - 2 entries
12161229611 leaf cert	CN=WE1, O=Google Trust Services, C=US	2025-10-05 18:24:25	2026-01-03 19:24:11	*.ctman.cl, ctman.cl - 2 entries
12161233784 precert	CN=WR1, O=Google Trust Services, C=US	2025-10-05 18:24:04	2026-01-03 19:21:00	*.ctman.cl, ctman.cl - 2 entries
12072116320 precert	CN=AE1, O=Google Trust Services, C=US	2025-09-28 23:14:19	2025-11-13 00:12:01	*.ctman.cl, ctman.cl - 2 entries
11878014821 precert	CN=AE1, O=Google Trust Services, C=US	2025-09-14 23:03:19	2025-10-30 00:01:42	*.ctman.cl, ctman.cl - 2 entries
11706868301 precert	CN=AE1, O=Google Trust Services, C=US	2025-08-31 22:40:54	2025-10-15 23:39:36	*.ctman.cl, ctman.cl - 2 entries
11531597963 precert	CN=AE1, O=Google Trust Services, C=US	2025-08-17 22:29:13	2025-10-01 23:29:06	*.ctman.cl, ctman.cl - 2 entries
11450506422 leaf cert	CN=E6, O=Let's Encrypt, C=US	2025-08-11 01:04:31	2025-11-09 01:04:30	*.ctman.cl, ctman.cl - 2 entries
11450335951 leaf cert	CN=R11, O=Let's Encrypt, C=US	2025-08-11 00:44:32	2025-11-09 00:44:31	*.ctman.cl, ctman.cl - 2 entries
11409388195 leaf cert	CN=WE1, O=Google Trust Services, C=US	2025-08-07 13:33:53	2025-11-05 14:33:45	*.ctman.cl, ctman.cl - 2 entries
11409388503 precert	CN=WR1, O=Google Trust Services, C=US	2025-08-07 13:33:39	2025-11-05 14:31:56	*.ctman.cl, ctman.cl - 2 entries
11363887855 precert	CN=AE1, O=Google Trust Services, C=US	2025-08-03 22:23:11	2025-09-17 23:20:36	*.ctman.cl, ctman.cl - 2 entries
10767680879 leaf cert	CN=E5, O=Let's Encrypt, C=US	2025-06-15 14:54:08	2025-09-13 14:54:07	*.ctman.cl, ctman.cl - 2 entries
10739870665 leaf cert	CN=R11, O=Let's Encrypt, C=US	2025-06-12 23:17:51	2025-09-10 23:17:50	*.ctman.cl, ctman.cl - 2 entries
8190213989 precert	CN=AE1, O=Google Trust Services, C=US	2024-09-15 23:12:32	2024-10-30 23:12:31	*.ctman.cl, ctman.cl - 2 entries
8086141015 precert	CN=AE1, O=Google Trust Services, C=US	2024-09-01 23:57:14	2024-10-16 23:57:13	*.ctman.cl, ctman.cl - 2 entries
7974213078 precert	CN=AE1, O=Google Trust Services, C=US	2024-08-19 00:39:23	2024-10-03 00:39:22	*.ctman.cl, ctman.cl - 2 entries
7965067001 precert	CN=WE1, O=Google Trust Services, C=US	2024-08-17 16:55:19	2024-11-15 16:55:18	*.ctman.cl, ctman.cl - 2 entries
7965066517 precert	CN=WR1, O=Google Trust Services, C=US	2024-08-17 16:55:08	2024-11-15 16:55:07	*.ctman.cl, ctman.cl - 2 entries
7963871132 leaf cert	CN=E5, O=Let's Encrypt, C=US	2024-08-17 13:12:31	2024-11-15 13:12:30	*.ctman.cl, ctman.cl - 2 entries
7963859988 leaf cert	CN=R10, O=Let's Encrypt, C=US	2024-08-17 13:12:06	2024-11-15 13:12:05	*.ctman.cl, ctman.cl - 2 entries
7871095107 precert	CN=AE1, O=Google Trust Services, C=US	2024-08-05 01:27:05	2024-09-19 01:27:04	*.ctman.cl, ctman.cl - 2 entries
7768245181 precert	CN=AE1, O=Google Trust Services, C=US	2024-07-22 02:15:45	2024-09-05 02:15:44	*.ctman.cl, ctman.cl - 2 entries
7662006985 precert	CN=AE1, O=Google Trust Services, C=US	2024-07-08 02:58:57	2024-08-22 02:58:56	*.ctman.cl, ctman.cl - 2 entries
7566840278 precert	CN=AE1, O=Google Trust Services, C=US	2024-06-24 03:42:18	2024-08-08 03:42:17	*.ctman.cl, ctman.cl - 2 entries
7535888400 leaf cert	CN=E6, O=Let's Encrypt, C=US	2024-06-19 13:41:20	2024-09-17 13:41:19	*.ctman.cl, ctman.cl - 2 entries
7535853373 leaf cert	CN=R10, O=Let's Encrypt, C=US	2024-06-19 13:33:36	2024-09-17 13:33:35	*.ctman.cl, ctman.cl - 2 entries
7535823306 precert	CN=WE1, O=Google Trust Services, C=US	2024-06-19 13:25:14	2024-09-17 13:25:13	*.ctman.cl, ctman.cl - 2 entries
7535816694 leaf cert	CN=E5, O=Let's Encrypt, C=US	2024-06-19 13:25:04	2024-09-17 13:25:03	*.ctman.cl, ctman.cl - 2 entries
7535811671 precert	CN=WR1, O=Google Trust Services, C=US	2024-06-19 13:24:49	2024-09-17 13:24:48	*.ctman.cl, ctman.cl - 2 entries
7535807453 leaf cert	CN=R10, O=Let's Encrypt, C=US	2024-06-19 13:24:43	2024-09-17 13:24:42	*.ctman.cl, ctman.cl - 2 entries
6956437645 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-03-18 08:53:42	2024-05-02 08:53:41	*.ctman.cl, ctman.cl - 2 entries
6868248922 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-03-04 09:39:48	2024-04-18 09:39:47	*.ctman.cl, ctman.cl - 2 entries
6865192452 leaf cert	CN=E1, O=Let's Encrypt, C=US	2024-03-03 22:48:39	2024-06-01 22:48:38	ctman.cl, mta-sts.ctman.cl - 2 entries
6865192286 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-03-03 22:48:36	2024-06-01 22:48:35	ctman.cl, mta-sts.ctman.cl - 2 entries
6864118763 leaf cert	CN=E1, O=Let's Encrypt, C=US	2024-03-03 18:12:27	2024-06-01 18:12:26	ctman.cl, mta-sts.ctman.cl - 2 entries
6864114178 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-03-03 18:12:26	2024-06-01 18:12:25	ctman.cl, mta-sts.ctman.cl - 2 entries
6837950957 precert	CN=GTS CA 1P5, O=Google Trust Services LLC, C=US	2024-02-28 11:51:58	2024-05-28 11:51:57	*.ctman.cl, ctman.cl - 2 entries
6800054341 leaf cert	CN=E1, O=Let's Encrypt, C=US	2024-02-22 06:46:32	2024-05-22 06:46:31	*.ctman.cl, ctman.cl - 2 entries
6800054239 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-02-22 06:46:23	2024-05-22 06:46:22	*.ctman.cl, ctman.cl - 2 entries
6782841388 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-02-19 10:25:48	2024-04-04 10:25:47	*.ctman.cl, ctman.cl - 2 entries
6699438539 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-02-05 11:07:55	2024-03-21 11:07:54	*.ctman.cl, ctman.cl - 2 entries
6610646296 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-01-22 11:55:41	2024-03-07 11:55:40	*.ctman.cl, ctman.cl - 2 entries
6521721304 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-01-08 12:41:31	2024-02-22 12:41:30	*.ctman.cl, ctman.cl - 2 entries
6435415767 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2023-12-25 13:18:50	2024-02-08 13:18:49	*.ctman.cl, ctman.cl - 2 entries
6433342314 precert	CN=GTS CA 1P5, O=Google Trust Services LLC, C=US	2023-12-25 05:20:17	2024-03-24 05:20:16	*.ctman.cl, ctman.cl - 2 entries
6432462900 leaf cert	CN=E1, O=Let's Encrypt, C=US	2023-12-25 02:08:20	2024-03-24 02:08:19	*.ctman.cl, ctman.cl - 2 entries
6107593738 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-11-01 00:09:29	2024-01-30 00:09:28	*.ctman.cl, ctman.cl - 2 entries

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuer				last 7 days	active	num Certs
CN=AE1, O=Google Trust Services, C=US				0	0	14
CN=GTS CA 2A1, O=Google Trust Services LLC, C=US				0	0	13
CN=R3, O=Let's Encrypt, C=US				0 /0 new	0	7
CN=E1, O=Let's Encrypt, C=US				0	0	5
CN=WE1, O=Google Trust Services, C=US				0	0	4
CN=WR1, O=Google Trust Services, C=US				0	0	4
CN=GTS CA 1P5, O=Google Trust Services LLC, C=US				0	0	3
CN=R11, O=Let's Encrypt, C=US				0	0	3
CN=E6, O=Let's Encrypt, C=US				0	0	3
CN=E5, O=Let's Encrypt, C=US				0	0	2
CN=R10, O=Let's Encrypt, C=US				0	0	2

CRT-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
21022780579 precert	CN=AE1, O=Google Trust Services, C=US	2025-09-14 21:03:19	2025-10-29 23:01:42	*.ctman.cl, ctman.cl 2 entries
20710612557 precert	CN=AE1, O=Google Trust Services, C=US	2025-08-31 20:40:54	2025-10-15 21:39:36	*.ctman.cl, ctman.cl 2 entries
20404959188 precert	CN=AE1, O=Google Trust Services, C=US	2025-08-17 20:29:13	2025-10-01 21:29:06	*.ctman.cl, ctman.cl 2 entries
20256086323 leaf cert	CN=E6, O=Let's Encrypt, C=US	2025-08-10 23:04:31	2025-11-09 00:04:30	*.ctman.cl, ctman.cl 2 entries
20255761586 leaf cert	CN=R11, O=Let's Encrypt, C=US	2025-08-10 22:44:32	2025-11-08 23:44:31	*.ctman.cl, ctman.cl 2 entries
20181479368 leaf cert	CN=WE1, O=Google Trust Services, C=US	2025-08-07 11:33:53	2025-11-05 13:33:45	*.ctman.cl, ctman.cl 2 entries
20181446835 precert	CN=WR1, O=Google Trust Services, C=US	2025-08-07 11:33:39	2025-11-05 13:31:56	*.ctman.cl, ctman.cl 2 entries
20099425732 precert	CN=AE1, O=Google Trust Services, C=US	2025-08-03 20:23:11	2025-09-17 21:20:36	*.ctman.cl, ctman.cl 2 entries
19802960840 precert	CN=AE1, O=Google Trust Services, C=US	2025-07-20 19:58:44	2025-09-03 20:58:23	*.ctman.cl, ctman.cl 2 entries
19496730881 precert	CN=AE1, O=Google Trust Services, C=US	2025-07-06 19:43:24	2025-08-20 20:42:10	*.ctman.cl, ctman.cl 2 entries
19188222496 precert	CN=AE1, O=Google Trust Services, C=US	2025-06-22 19:31:24	2025-08-06 20:31:16	*.ctman.cl, ctman.cl 2 entries
19038339787 leaf cert	CN=E5, O=Let's Encrypt, C=US	2025-06-15 12:54:08	2025-09-13 12:54:07	*.ctman.cl, ctman.cl 2 entries
18987338815 leaf cert	CN=R11, O=Let's Encrypt, C=US	2025-06-12 21:17:51	2025-09-10 21:17:50	*.ctman.cl, ctman.cl 2 entries
18910491257 leaf cert	CN=WE1, O=Google Trust Services, C=US	2025-06-09 06:43:07	2025-09-07 07:43:06	*.ctman.cl, ctman.cl 2 entries
18909466335 precert	CN=WR1, O=Google Trust Services, C=US	2025-06-09 06:43:00	2025-09-07 07:40:36	*.ctman.cl, ctman.cl 2 entries
18898801760 precert	CN=AE1, O=Google Trust Services, C=US	2025-06-08 19:14:03	2025-07-23 20:11:37	*.ctman.cl, ctman.cl 2 entries
18621898717 precert	CN=AE1, O=Google Trust Services, C=US	2025-05-25 18:54:07	2025-07-09 19:53:58	*.ctman.cl, ctman.cl 2 entries
18349253531 precert	CN=AE1, O=Google Trust Services, C=US	2025-05-11 18:40:15	2025-06-25 19:38:56	*.ctman.cl, ctman.cl 2 entries
17829128432 leaf cert	CN=WE1, O=Google Trust Services, C=US	2025-04-11 02:40:23	2025-07-10 03:36:48	*.ctman.cl, ctman.cl 2 entries
17776345252 precert	CN=WR1, O=Google Trust Services, C=US	2025-04-11 02:36:42	2025-07-10 03:28:28	*.ctman.cl, ctman.cl 2 entries
17772232310 leaf cert	CN=E6, O=Let's Encrypt, C=US	2025-04-10 17:23:21	2025-07-09 17:23:20	*.ctman.cl, ctman.cl 2 entries
17771938841 leaf cert	CN=R11, O=Let's Encrypt, C=US	2025-04-10 16:52:18	2025-07-09 16:52:17	*.ctman.cl, ctman.cl 2 entries
13998972930 precert	CN=AE1, O=Google Trust Services, C=US	2024-08-04 23:27:05	2024-09-18 23:27:04	*.ctman.cl, ctman.cl 2 entries
13834955638 precert	CN=AE1, O=Google Trust Services, C=US	2024-07-22 00:15:45	2024-09-05 00:15:44	*.ctman.cl, ctman.cl 2 entries
13654359506 precert	CN=AE1, O=Google Trust Services, C=US	2024-07-08 00:58:57	2024-08-22 00:58:56	*.ctman.cl, ctman.cl 2 entries
13496977412 precert	CN=AE1, O=Google Trust Services, C=US	2024-06-24 01:42:18	2024-08-08 01:42:17	*.ctman.cl, ctman.cl 2 entries
13444500726 precert	CN=E6, O=Let's Encrypt, C=US	2024-06-19 11:41:20	2024-09-17 11:41:19	*.ctman.cl, ctman.cl 2 entries
13444444296 leaf cert	CN=R10, O=Let's Encrypt, C=US	2024-06-19 11:33:36	2024-09-17 11:33:35	*.ctman.cl, ctman.cl 2 entries
13444376460 precert	CN=WE1, O=Google Trust Services, C=US	2024-06-19 11:25:14	2024-09-17 11:25:13	*.ctman.cl, ctman.cl 2 entries
13444397581 precert	CN=E5, O=Let's Encrypt, C=US	2024-06-19 11:25:04	2024-09-17 11:25:03	*.ctman.cl, ctman.cl 2 entries
13444371427 precert	CN=WR1, O=Google Trust Services, C=US	2024-06-19 11:24:49	2024-09-17 11:24:48	*.ctman.cl, ctman.cl 2 entries
13444370890 leaf cert	CN=R10, O=Let's Encrypt, C=US	2024-06-19 11:24:43	2024-09-17 11:24:42	*.ctman.cl, ctman.cl 2 entries
13339668395 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-06-10 02:28:10	2024-07-25 02:28:09	*.ctman.cl, ctman.cl 2 entries
13194912854 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-05-27 03:11:04	2024-07-11 03:11:03	*.ctman.cl, ctman.cl 2 entries
13042007044 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-05-13 03:57:09	2024-06-27 03:57:08	*.ctman.cl, ctman.cl 2 entries
12891128408 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-04-29 04:39:48	2024-06-13 04:39:47	*.ctman.cl, ctman.cl 2 entries
12872374266 precert	CN=GTS CA 1P5, O=Google Trust Services LLC, C=US	2024-04-27 09:46:41	2024-07-26 09:46:40	*.ctman.cl, ctman.cl 2 entries
12799292101 leaf cert	CN=E1, O=Let's Encrypt, C=US	2024-04-21 07:54:05	2024-07-20 07:54:04	*.ctman.cl, ctman.cl 2 entries
12799300919 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-04-21 07:54:00	2024-07-20 07:53:59	*.ctman.cl, ctman.cl 2 entries
12730642153 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-04-15 05:26:30	2024-05-30 05:26:29	*.ctman.cl, ctman.cl 2 entries
12582185787 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-04-01 06:11:26	2024-05-16 06:11:25	*.ctman.cl, ctman.cl 2 entries
12423671777 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-03-18 07:53:42	2024-05-02 06:53:41	*.ctman.cl, ctman.cl 2 entries
12269980310 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-03-04 08:39:48	2024-04-18 07:39:47	*.ctman.cl, ctman.cl 2 entries
12264850492 leaf cert	CN=E1, O=Let's Encrypt, C=US	2024-03-03 21:48:39	2024-06-01 20:48:38	ctman.cl, mta-sts.ctman.cl 2 entries
12264846405 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-03-03 21:48:36	2024-06-01 20:48:35	ctman.cl, mta-sts.ctman.cl 2 entries
12263025737 precert	CN=E1, O=Let's Encrypt, C=US	2024-03-03 17:12:27	2024-06-01 16:12:26	ctman.cl, mta-sts.ctman.cl 2 entries
12263022000 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-03-03 17:12:26	2024-06-01 16:12:25	ctman.cl, mta-sts.ctman.cl 2 entries
12218970404 precert	CN=GTS CA 1P5, O=Google Trust Services LLC, C=US	2024-02-28 10:51:58	2024-05-28 09:51:57	*.ctman.cl, ctman.cl 2 entries
12155057835 leaf cert	CN=E1, O=Let's Encrypt, C=US	2024-02-22 05:46:32	2024-05-22 04:46:31	*.ctman.cl, ctman.cl 2 entries
12155057394 leaf cert	CN=R3, O=Let's Encrypt, C=US	2024-02-22 05:46:23	2024-05-22 04:46:22	*.ctman.cl, ctman.cl 2 entries
12125846715 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-02-19 09:25:48	2024-04-04 08:25:47	*.ctman.cl, ctman.cl 2 entries
11983862052 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-02-05 10:07:55	2024-03-21 10:07:54	*.ctman.cl, ctman.cl 2 entries
11831479523 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-01-22 10:55:41	2024-03-07 10:55:40	*.ctman.cl, ctman.cl 2 entries
11678984979 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2024-01-08 11:41:31	2024-02-22 11:41:30	*.ctman.cl, ctman.cl 2 entries
11464712217 precert	CN=GTS CA 2A1, O=Google Trust Services LLC, C=US	2023-12-25 12:18:50	2024-02-08 12:18:49	*.ctman.cl, ctman.cl 2 entries
11458820375 precert	CN=GTS CA 1P5, O=Google Trust Services LLC, C=US	2023-12-25 04:20:17	2024-03-24 04:20:16	*.ctman.cl, ctman.cl 2 entries
11581348046 leaf cert	CN=E1, O=Let's Encrypt, C=US	2023-12-25 01:08:20	2024-03-24 01:08:19	*.ctman.cl, ctman.cl 2 entries
10961045088 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-10-31 23:09:29	2024-01-29 23:09:28	*.ctman.cl, ctman.cl 2 entries
10479112370 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-09-01 22:57:28	2023-11-30 23:57:27	*.ctman.cl, ctman.cl 2 entries
9839244862 leaf cert	CN=R3, O=Let's Encrypt, C=US	2023-07-03 23:17:49	2023-10-01 23:17:48	*.ctman.cl, ctman.cl 2 entries

11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404

12. Html-Parsing via https://validator.w3.org/nu/

Small Code update, wait one minute

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: dana.ns.cloudflare.com, grant.ns.cloudflare.com

QNr.	Domain	Type	NS used
1	com	NS	b.root-servers.net (2001:500:200::b)
	Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2	dana.ns.cloudflare.com	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com
	Answer: ns3.cloudflare.com 162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2
	Answer: ns4.cloudflare.com 162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837
	Answer: ns5.cloudflare.com 162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937
	Answer: ns6.cloudflare.com 162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506
	Answer: ns7.cloudflare.com 162.159.4.8, 162.159.6.6, 2400:cb00:2049:1::a29f:408, 2400:cb00:2049:1::a29f:606
3	grant.ns.cloudflare.com	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com
	Answer: ns3.cloudflare.com 162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2
	Answer: ns4.cloudflare.com 162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837
	Answer: ns5.cloudflare.com 162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937
	Answer: ns6.cloudflare.com 162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506
	Answer: ns7.cloudflare.com 162.159.4.8, 162.159.6.6, 2400:cb00:2049:1::a29f:408, 2400:cb00:2049:1::a29f:606
4	dana.ns.cloudflare.com: 108.162.192.105, 172.64.32.105, 173.245.58.105	A	ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
5	dana.ns.cloudflare.com: 2606:4700:50::adf5:3a69, 2803:f800:50::6ca2:c069, 2a06:98c1:50::ac40:2069	AAAA	ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
6	grant.ns.cloudflare.com: 108.162.195.130, 162.159.44.130, 172.64.35.130	A	ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
7	grant.ns.cloudflare.com: 2606:4700:58::a29f:2c82, 2803:f800:50::6ca2:c382, 2a06:98c1:50::ac40:2382	AAAA	ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)

14. CAA - Entries

Domainname	flag	Name	Value	∑ Queries
mta-sts.ctman.cl	0		no CAA entry found	1
ctman.cl	5	issue	comodoca.com	1
	9	issuewild	comodoca.com	1
	5	issue	digicert.com; cansignhttpexchanges=yes	1
	9	issuewild	digicert.com; cansignhttpexchanges=yes	1
	5	issue	letsencrypt.org	1
	9	issuewild	letsencrypt.org	1
	5	iodef	mailto:reports@ctman.cl	1
	5	issue	pki.goog; cansignhttpexchanges=yes	1
	9	issuewild	pki.goog; cansignhttpexchanges=yes	1
	5	issue	ssl.com	1
	9	issuewild	ssl.com	1
cl	0		no CAA entry found	1

15. TXT - Entries

Domainname	TXT Entry	Status	∑ Queries
ctman.cl	google-site-verification=i4D-zDqnHs50ScwEfne0anVZzljIXM_6Y5eS5K66qac	ok	1
ctman.cl	google-site-verification=ZFFbY6j-B80Qh6ZYI00LXg1bh-pDuXR8KLo3zxH0-_k	ok	1
ctman.cl	pinterest-site-verification=7817777f623c8f0a7a89c2251716283b	ok	1
ctman.cl	v=spf1 +a +mx +ip4:35.212.21.53 include:_add1cf8340028e1bab92ac2d609c58e4.spf.dnssmarthost.net include:amazonses.com ~all	ok	1
mta-sts.ctman.cl		ok	1
_acme-challenge.mta-sts.ctman.cl		Name Error - The domain name does not exist	1
_acme-challenge.mta-sts.ctman.cl.ctman.cl		Name Error - The domain name does not exist	1
_acme-challenge.mta-sts.ctman.cl.mta-sts.ctman.cl		Name Error - The domain name does not exist	1

16. DomainService - Entries

No DomainServiceEntries entries found

17. Cipher Suites

Skipped, CDN used or too many ip addresses

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

Permalink: https://check-your-website.server-daten.de/?i=63da5446-b770-4551-a2a2-307ed5e608d1

Last Result: https://check-your-website.server-daten.de/?q=mta-sts.ctman.cl - 2024-08-07 03:31:21

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=mta-sts.ctman.cl" target="_blank">Check this Site: mta-sts.ctman.cl</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=mta-sts.ctman.cl

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

12. Html-Parsing via https://validator.w3.org/nu/

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks