Shortcuts: 1. Basic DNS | 2. Url-Checks | 3. Comments | 4. Connections | 5. Certificates | 6. CT-Logs | 7. Html-Content | 8. CAA | 9. TXT |


V

Connect failure - perhaps firewall

Checked:
12.04.2019 18:29:08


Older results

1. Basic DNS and Nameserver Checks

HostTIP-Addressis auth.∑ Queries∑ Timeout
plexapp.org
A
76.114.42.158
yes
2
0

AAAA

yes


www.plexapp.org
C
plexapp.org
yes
1
0

A
76.114.42.158
yes



Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.05.2019, 00:00:00, Signature-Inception: 11.04.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
org
2 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 25.04.2019, 05:00:00, Signature-Inception: 12.04.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

4 DNSKEY RR found

Public Key with Algorithm 7, KeyTag 9062, Flags 256

Public Key with Algorithm 7, KeyTag 9795, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 7, KeyTag 16454, Flags 256

Public Key with Algorithm 7, KeyTag 17883, Flags 257 (SEP = Secure Entry Point)

3 RRSIG RR to validate DNSKEY RR found

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.04.2019, 15:27:52, Signature-Inception: 09.04.2019, 14:27:52, KeyTag 9062, Signer-Name: org

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.04.2019, 15:27:52, Signature-Inception: 09.04.2019, 14:27:52, KeyTag 9795, Signer-Name: org

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.04.2019, 15:27:52, Signature-Inception: 09.04.2019, 14:27:52, KeyTag 17883, Signer-Name: org

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 9062 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 9795 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 17883 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9795, DigestType 1 and Digest "Nk36s9ryVMq0d7VnWxB2bdqiSYI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9795, DigestType 2 and Digest "OSKzG286TqkrGet7UhIPAx/Y4F/wsDuvz5+JG/5/+OU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
plexapp.org
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


www.plexapp.org
0 DS RR in the parent zone found


DomainNameserverNS-IP
plexapp.org
  ns-cloud-d1.googledomains.com
216.239.32.109

 
2001:4860:4802:32::6d

  ns-cloud-d2.googledomains.com
216.239.34.109

 
2001:4860:4802:34::6d

  ns-cloud-d3.googledomains.com
216.239.36.109

 
2001:4860:4802:36::6d

  ns-cloud-d4.googledomains.com
216.239.38.109

 
2001:4860:4802:38::6d
org
  a0.org.afilias-nst.info / ns000b.app12.mia2.afilias-nst.info


  a2.org.afilias-nst.info / 1.fra.pch


  b0.org.afilias-nst.org / ns000b.app11.ams2.afilias-nst.info


  b2.org.afilias-nst.org / 5.fra.pch


  c0.org.afilias-nst.info / ns000b.app20.ams2.afilias-nst.info


  d0.org.afilias-nst.org / ns000b.app20.lax1.afilias-nst.info



SOA - records (beta)

Domain:org
Primary:a0.org.afilias-nst.info
Mail:noc.afilias-nst.info
Serial:2013428160
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:4


Domain:org
Primary:a0.org.afilias-nst.info
Mail:noc.afilias-nst.info
Serial:2013428161
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:2


Domain:plexapp.org
Primary:ns-cloud-d1.googledomains.com
Mail:cloud-dns-hostmaster.google.com
Serial:7
Refresh:21600
Retry:3600
Expire:259200
TTL:300
num Entries:8


2. Url-Checks


show header:
Domainname Http-StatusredirectSec.G
• http://plexapp.org/
76.114.42.158
200

0.370
H
Server: nginx/1.14.0 (Ubuntu)
Date: Fri, 12 Apr 2019 16:29:29 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close

• http://www.plexapp.org/
76.114.42.158
200

0.370
H
Server: nginx/1.14.0 (Ubuntu)
Date: Fri, 12 Apr 2019 16:29:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close

• https://plexapp.org/
76.114.42.158
-2

1.543
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 76.114.42.158:443

• https://www.plexapp.org/
76.114.42.158
-2

1.544
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 76.114.42.158:443

• http://plexapp.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
76.114.42.158
200

3.370

Visible Content: Loading . . .
Server: nginx/1.14.0 (Ubuntu)
Date: Fri, 12 Apr 2019 16:29:36 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close

• http://www.plexapp.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
76.114.42.158
200

0.370

Visible Content: Loading . . .
Server: nginx/1.14.0 (Ubuntu)
Date: Fri, 12 Apr 2019 16:29:36 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close

3. Comments

Aname "plexapp.org" is domain, public suffix is "org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)"
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
CError - more then one version with Http-Status 200
Hfatal error: No https - result with http-status 200, no encryption
Hfatal error: http result with http-status 200, no encryption
Vhttps://plexapp.org/ 76.114.42.158
-2

connect failure - perhaps firewall
Vhttps://www.plexapp.org/ 76.114.42.158
-2

connect failure - perhaps firewall
AGood: Nameserver supports TCP connections: 8 good Nameserver
AGood: Nameserver supports Echo Capitalization: 8 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 8 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 8 good Nameserver
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
http://plexapp.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 76.114.42.158
200

Warning: Not existing ACME-file, but Server sends 200, not 404 or redirect
http://www.plexapp.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 76.114.42.158
200

Warning: Not existing ACME-file, but Server sends 200, not 404 or redirect
ADuration: 35154 milliseconds, 35.154 seconds


4. Connections

No connection informations found. Perhaps only http - connections.


5. Certificates

No certificate informations found. Perhaps only http - connections.


6. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

No CertSpotter - Certificate-Transparency-Log informations found. The feature is new (startet 2019-05-07), so recheck this domain.


2. Source crt.sh - old and new certificates, sometimes very slow.

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
3
3
CN=CloudFlare Inc ECC CA-2, O="CloudFlare, Inc.", L=San Francisco, C=US, ST=CA
0
1
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1377363161
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-04-11 22:04:34
2019-07-10 22:04:34
plexapp.org
1 entries


1293103043
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-14 18:17:34
2019-06-12 17:17:34
*.plexapp.org
1 entries


1293102900
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-14 18:17:30
2019-06-12 17:17:30
plexapp.org
1 entries


1290226103
CN=CloudFlare Inc ECC CA-2, O="CloudFlare, Inc.", L=San Francisco, C=US, ST=CA
2019-03-12 23:00:00
2020-03-13 11:00:00
*.plexapp.org, CloudFlare, Inc., plexapp.org, sni.cloudflaressl.com
3 entries



7. Html-Content - Entries (BETA - mixed content and other checks)

No Html-Content entries found. Only checked if https + status 200/401/403/404


8. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.plexapp.org



1
0
plexapp.org
0

no CAA entry found
1
0
org
0

no CAA entry found
1
0


9. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
plexapp.org

ok
1
0
www.plexapp.org


1
0
_acme-challenge.plexapp.org

Name Error - The domain name does not exist
1
0
_acme-challenge.www.plexapp.org

Name Error - The domain name does not exist
1
0
_acme-challenge.plexapp.org.plexapp.org

Name Error - The domain name does not exist
1
0
_acme-challenge.www.plexapp.org.www.plexapp.org

Name Error - The domain name does not exist
1
0



Permalink: https://check-your-website.server-daten.de/?i=8018d476-4282-4624-886e-e0ced929bbd3


Last Result: https://check-your-website.server-daten.de/?q=plexapp.org - 2019-04-12 20:18:31