Check DNS, Urls + Redirects, Certificates and Content of your Website


Info: Problems with 3.048.289 Letsencrypt certificates (378.325 accounts). They must be revoked (revocation starts 2020-03-04 20:00 UTC) - see Revoking certain certificates on March 4. Update 2020-03-07: Good news: Mass-revocation is canceled.

This tool: A check (SerialNumber) is added. Letsencrypt has published a list of critical SerialNumbers, this list is checked. See the part "9. Certificates". If there is a warning, renew that certificate and replace the current certificate.




B

Missing HSTS or Cookie-warnings

Checked:
13.02.2020 17:32:49


Older results

No older results found


1. IP-Addresses

HostTIP-Addressis auth.∑ Queries∑ Timeout
app.practiceperfectemr.com
A
159.89.247.4
Clifton/New Jersey/United States (US) - DigitalOcean, LLC
No Hostname found
yes
1
0

AAAA

yes


www.app.practiceperfectemr.com

Name Error
yes
1
0


2. DNSSEC

Zone (*)DNSSEC - Informations (beta)

Zone: (root)
(root)
1 DS RR published



Status: Valid because published



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 33853, Flags 256



1 RRSIG RR to validate DNSKEY RR found



Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.03.2020, 00:00:00, Signature-Inception: 10.02.2020, 00:00:00, KeyTag 20326, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: com
com
1 DS RR in the parent zone found



1 RRSIG RR to validate DS RR found



Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 26.02.2020, 05:00:00, Signature-Inception: 13.02.2020, 04:00:00, KeyTag 33853, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 33853 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 30909, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 56311, Flags 256



1 RRSIG RR to validate DNSKEY RR found



Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 20.02.2020, 19:24:21, Signature-Inception: 05.02.2020, 19:19:21, KeyTag 30909, Signer-Name: com



Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 20.02.2020, 19:24:21, Signature-Inception: 05.02.2020, 19:19:21, KeyTag 30909, Signer-Name: com



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest "4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: practiceperfectemr.com
practiceperfectemr.com
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.Bitmap: NS, DS, RRSIG



0 DNSKEY RR found





Zone: app.practiceperfectemr.com
app.practiceperfectemr.com
0 DS RR in the parent zone found



0 DNSKEY RR found





Zone: www.app.practiceperfectemr.com
www.app.practiceperfectemr.com
0 DS RR in the parent zone found


3. Name Servers

DomainNameserverNS-IP
www.app.practiceperfectemr.com
  dns.internic.ca

app.practiceperfectemr.com
  dns.internic.ca / pdns-slave2
54.236.220.120
Ashburn/Virginia/United States (US) - Amazon.com, Inc.


 
54.236.82.34
Ashburn/Virginia/United States (US) - Amazon.com, Inc.

practiceperfectemr.com
  dns.internic.ca / pdns-slave2


  dns2.internic.ca / pdns-slave-1

com
  a.gtld-servers.net


  b.gtld-servers.net


  c.gtld-servers.net


  d.gtld-servers.net


  e.gtld-servers.net


  f.gtld-servers.net


  g.gtld-servers.net


  h.gtld-servers.net


  i.gtld-servers.net


  j.gtld-servers.net


  k.gtld-servers.net


  l.gtld-servers.net


  m.gtld-servers.net


4. SOA-Entries


Domain:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1581611549
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:10


Domain:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1581611564
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:3


Domain:practiceperfectemr.com
Primary:dns.internic.ca
Mail:noc.internic.ca
Serial:3
Refresh:10800
Retry:3600
Expire:604800
TTL:3600
num Entries:2


Domain:app.practiceperfectemr.com
Primary:dns.internic.ca
Mail:noc.internic.ca
Serial:3
Refresh:10800
Retry:3600
Expire:604800
TTL:3600
num Entries:2


5. Screenshots (Beta)

Startaddress: https://app.practiceperfectemr.com/releaseV1/?token=, address used: https://app.practiceperfectemr.com/releaseV1/?token=, Screenshot created 2020-02-13 17:34:18 +00:0

Mobil (412px x 732px)

318 milliseconds

Screenshot mobile - https://app.practiceperfectemr.com/releaseV1/?token=
Screen (1280px x 1680px)

890 milliseconds

Screenshot Desktop - https://app.practiceperfectemr.com/releaseV1/?token=
Mobil + Landscape (732px x 412px)

335 milliseconds

Screenshot mobile landscape - https://app.practiceperfectemr.com/releaseV1/?token=

Mobile- and other Chrome-Checks

widthheight
visual Viewport412732
content Size412732

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

Chrome-Connection: secure. secure connection settings. The connection to this site is encrypted and authenticated using TLS 1.2, ECDHE_RSA with P-256, and AES_256_GCM.

Chrome-Resources : secure. all served securely. All resources on this page are served securely.

6. Url-Checks


:

:
Domainname Http-StatusredirectSec.G
• http://app.practiceperfectemr.com/
159.89.247.4
302
https://app.practiceperfectemr.com/
Html is minified: 109.03 %
0.217
A
Server: nginx/1.4.6 (Ubuntu)
Date: Thu, 13 Feb 2020 16:33:24 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://app.practiceperfectemr.com/

• https://app.practiceperfectemr.com/
159.89.247.4
302
https://app.practiceperfectemr.com/releaseV1?token=
Html is minified: 109.03 %
4.873
B
Server: nginx/1.4.6 (Ubuntu)
Date: Thu, 13 Feb 2020 16:33:25 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://app.practiceperfectemr.com/releaseV1?token=

• https://app.practiceperfectemr.com/releaseV1?token=

301
https://app.practiceperfectemr.com/releaseV1/?token=
Html is minified: 107.82 %
5.140
B
Server: nginx/1.4.6 (Ubuntu)
Date: Thu, 13 Feb 2020 16:33:30 GMT
Content-Type: text/html
Content-Length: 193
Location: https://app.practiceperfectemr.com/releaseV1/?token=
Connection: close

• https://app.practiceperfectemr.com/releaseV1/?token=
GZip used - 404 / 655 - 38.32 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
200

Html is minified: 100.15 %
4.763
B
Server: nginx/1.4.6 (Ubuntu)
Date: Thu, 13 Feb 2020 16:33:41 GMT
Content-Type: text/html
Last-Modified: Sun, 13 Mar 2016 18:57:34 GMT
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip

• http://app.practiceperfectemr.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
159.89.247.4
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
302
https://app.practiceperfectemr.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.03 %
0.250
A
Visible Content: 302 Found nginx/1.4.6 (Ubuntu)
Server: nginx/1.4.6 (Ubuntu)
Date: Thu, 13 Feb 2020 16:33:30 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://app.practiceperfectemr.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

• https://app.practiceperfectemr.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
302
https://app.practiceperfectemr.com/releaseV1?token=.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.03 %
4.873
A
Visible Content: 302 Found nginx/1.4.6 (Ubuntu)
Server: nginx/1.4.6 (Ubuntu)
Date: Thu, 13 Feb 2020 16:33:35 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://app.practiceperfectemr.com/releaseV1?token=.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

• https://app.practiceperfectemr.com/releaseV1?token=.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
301
https://app.practiceperfectemr.com/releaseV1/?token=.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 107.82 %
4.763
A
Visible Content: 301 Moved Permanently nginx/1.4.6 (Ubuntu)
Server: nginx/1.4.6 (Ubuntu)
Date: Thu, 13 Feb 2020 16:33:46 GMT
Content-Type: text/html
Content-Length: 193
Location: https://app.practiceperfectemr.com/releaseV1/?token=.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Connection: close

• https://app.practiceperfectemr.com/releaseV1/?token=.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
GZip used - 404 / 655 - 38.32 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
200

Html is minified: 100.15 %
4.827

Visible Content: Dear User, As you may be aware, we have been completely redeveloping our Practice Perfect web interface to include many additional features, a cleaner appearance and enhanced speed. This new interface is now ready to use! As of March 1st, we have turned off the old interface. All that is required is that you be updated to the latest version of Practice Perfect and be provided with a new link for your web access. Please note that there is absolutely no cost for this upgrade. Please contact our support department at support@practiceperfectemr.com to schedule your update as soon as possible. Thank you.
Server: nginx/1.4.6 (Ubuntu)
Date: Thu, 13 Feb 2020 16:33:51 GMT
Content-Type: text/html
Last-Modified: Sun, 13 Mar 2016 18:57:34 GMT
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip

7. Comments

Aname "app.practiceperfectemr.com" is subdomain, public suffix is "com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services"
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
Ahttps://app.practiceperfectemr.com/releaseV1?token=
301
https://app.practiceperfectemr.com/releaseV1/?token=
correct redirect https to https
Ahttps://app.practiceperfectemr.com/ 159.89.247.4
302
https://app.practiceperfectemr.com/releaseV1?token=
correct redirect https to https
Ahttps://app.practiceperfectemr.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
302
https://app.practiceperfectemr.com/releaseV1?token=.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
correct redirect https to https
Ahttps://app.practiceperfectemr.com/releaseV1?token=.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
301
https://app.practiceperfectemr.com/releaseV1/?token=.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
correct redirect https to https
Agood: destination is https
Agood - only one version with Http-Status 200
Agood: one preferred version: non-www is preferred
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):0 complete Content-Type - header (2 urls)
https://app.practiceperfectemr.com/releaseV1/?token=


Url with incomplete Content-Type - header - missing charset
https://app.practiceperfectemr.com/releaseV1/?token=.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Url with incomplete Content-Type - header - missing charset
Ahttp://app.practiceperfectemr.com/ 159.89.247.4
302
https://app.practiceperfectemr.com/
correct redirect http - https with the same domain name
Bhttps://app.practiceperfectemr.com/releaseV1?token=
301

Missing HSTS-Header
Bhttps://app.practiceperfectemr.com/ 159.89.247.4
302

Missing HSTS-Header
Bhttps://app.practiceperfectemr.com/releaseV1/?token=
200

Missing HSTS-Header
AGood: Nameserver supports TCP connections: 2 good Nameserver
AGood: Nameserver supports Echo Capitalization: 2 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
Nameserver doesn't pass all EDNS-Checks: dns.internic.ca: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: dns.internic.ca: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok (pdns-slave2). COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns.internic.ca / 54.236.220.120: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok (pdns-slave2). COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns.internic.ca / 54.236.82.34: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok (pdns-slave1). COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns2.internic.ca: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok (pdns-slave-1). COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.
https://app.practiceperfectemr.com/releaseV1/?token=.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
200

Warning: Not existing ACME-file, but Server sends 200, not 404 or redirect. May be a problem creating a Letsencrypt certificate. Checking /.well-known/acme-challenge/random-filename - a http status 404 - Not Found - is expected. If your server sends content and a http status 200, the validation file (87 bytes, token, dot and the hash of the public part of the account key) may be invisible, so Letsencrypt can't validate your domain. If it is an application that sends this content, perhaps create an exception, so /.well-known/acme-challenge sends raw files. Or create a redirect to another domain and / or port 443, but your Letsencrypt client must support such a solution. Certbot: Use webroot as authenticator - https://certbot.eff.org/docs/using.html Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 supports GZip.
AGood: No https + http status 200 with inline CSS / JavaScript found
AGood: Every https result with status 200 has a minified Html-Content with a quota lower then 110 %.
https://app.practiceperfectemr.com/releaseV1/?token=
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
https://app.practiceperfectemr.com/releaseV1/?token=.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
ADuration: 94310 milliseconds, 94.310 seconds


8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
app.practiceperfectemr.com
app.practiceperfectemr.com
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
error checking OCSP stapling
ok
app.practiceperfectemr.com
app.practiceperfectemr.com
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
error checking OCSP stapling
ok
no http/2 via ALPN  Tls.1.2
no Tls.1.1
no Tls.1.0
no http/2 via ALPN Tls.1.2
no Tls.1.1
no Tls.1.0
Chain - too much certificates, don't send root certificates
1CN=*.practiceperfectemr.com, OU=Domain Control Validated

2CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, C=US, ST=Arizona

3CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, C=US, ST=Arizona

4OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US

app.practiceperfectemr.com
159.89.247.4
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
error checking OCSP stapling
ok
app.practiceperfectemr.com
159.89.247.4
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
error checking OCSP stapling
ok
no http/2 via ALPN  Tls.1.2
no Tls.1.1
no Tls.1.0
no http/2 via ALPN Tls.1.2
no Tls.1.1
no Tls.1.0
Chain - too much certificates, don't send root certificates
1CN=*.practiceperfectemr.com, OU=Domain Control Validated

2CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, C=US, ST=Arizona

3CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, C=US, ST=Arizona

4OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US


9. Certificates

1.
1.
CN=*.practiceperfectemr.com, OU=Domain Control Validated
25.07.2019
23.09.2020
expires in 175 days
*.practiceperfectemr.com, practiceperfectemr.com - 2 entries
1.
1.
CN=*.practiceperfectemr.com, OU=Domain Control Validated
25.07.2019

23.09.2020
expires in 175 days
*.practiceperfectemr.com, practiceperfectemr.com - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:03BECC23F9A8C414
Thumbprint:64198860A06D84DEF33AB4D3A8E773EF56597229
SHA256 / Certificate:t/3djWnk8QqGpehgJIm3naNFqXlHuFIQGTLteY69KFs=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):56fe12ee231e55d3d9ba17284b5295e66d3af503f86f71bc503b2cda7a988fb8
SHA256 hex / Subject Public Key Information (SPKI):4a6130085cb8322fe5dd5cfe0ca819055bbcfd57ca9cc411839e723a82c74873
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.godaddy.com/
OCSP - must staple:no
Certificate Transparency:yes


2.
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US
03.05.2011
03.05.2031
expires in 4049 days


2.
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US
03.05.2011

03.05.2031
expires in 4049 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:07
Thumbprint:27AC9369FAF25207BB2627CEFACCBE4EF9C319B8
SHA256 / Certificate:lzpBJ2/9AeAnoqrUnjTDeEbT6Xb/amILZxLjODIEGqY=
SHA256 hex / Cert (DANE * 0 1):973a41276ffd01e027a2aad49e34c37846d3e976ff6a620b6712e33832041aa6
SHA256 hex / PublicKey (DANE * 1 1):f11c3dd048f74edb7c45192b83e5980d2f67ec84b4ddb9396e33ff5173ed698f
SHA256 hex / Subject Public Key Information (SPKI):404986e322e4ccf247942658939363261012ce0d0a9c24ddd182d5a0ba48d00d
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.godaddy.com/
OCSP - must staple:no
Certificate Transparency:no


3.
CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US
01.01.2014
30.05.2031
expires in 4076 days


3.
CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US
01.01.2014

30.05.2031
expires in 4076 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:1BE715
Thumbprint:340B2880F446FCC04E59ED33F52B3D08D6242964
SHA256 / Certificate:Oi++kokeV/4F1XCH9I5zDxflpfU+9APWGOW3TXp+bss=
SHA256 hex / Cert (DANE * 0 1):3a2fbe92891e57fe05d57087f48e730f17e5a5f53ef403d618e5b74d7a7e6ecb
SHA256 hex / PublicKey (DANE * 1 1):2a8f2d8af0eb123898f74c866ac3fa669054e23c17bc7a95bd0234192dc635d0
SHA256 hex / Subject Public Key Information (SPKI):c14278b5b5b2e029d9583fbcf38028f1c1281f435f46576a0c4fc6e501bb985a
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.godaddy.com/
OCSP - must staple:no
Certificate Transparency:no


4.
OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US
29.06.2004
29.06.2034
expires in 5202 days


4.
OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US
29.06.2004

29.06.2034
expires in 5202 days


KeyalgorithmRSA encryption ( bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:00
Thumbprint:2796BAE63F1801E277261BA0D77770028F20EEE4
SHA256 / Certificate:w4Rr8kuek8pkJ0wOxnwezF4CT/ys0tdAGTUOgf5UauQ=
SHA256 hex / Cert (DANE * 0 1):c3846bf24b9e93ca64274c0ec67c1ecc5e024ffcacd2d74019350e81fe546ae4
SHA256 hex / PublicKey (DANE * 1 1):5632d97bfa775bf3c99ddea52fc2553410864016729c52dd6524c8a9c3b4489f
SHA256 hex / Subject Public Key Information (SPKI):1e5d68e37e994a25b975046b3e08a17b0cbabd8625831ad28eff049466c82db4
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no



10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
//certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1036334133
leaf cert
//certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
2019-07-25 15:46:21
2020-09-23 12:29:01
*.practiceperfectemr.com, practiceperfectemr.com - 2 entries



2. Source crt.sh - old and new certificates, sometimes very slow (Update 2020-01-11: Should now work again - code updated. Old message: currently no newer certificates - read Crt.sh has stopped - Letsencrypt-forum - may work next week again - 2019-12-02 - but I must check the code).

Issuerlast 7 daysactivenum Certs
//certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
0
1
5
//certificates.godaddy.com/repository, CN=Go Daddy Secure Certification Authority, serialNumber=07969287
0
0
3

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1713122690
leaf cert
//certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
2019-07-25 13:46:21
2020-09-23 10:29:01
*.practiceperfectemr.com, practiceperfectemr.com
2 entries


628588470
leaf cert
//certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
2018-07-25 19:06:22
2019-09-23 10:29:01
*.practiceperfectemr.com, practiceperfectemr.com
2 entries


221114787
leaf cert
//certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
2017-09-23 10:29:00
2018-09-23 10:29:00
*.practiceperfectemr.com, practiceperfectemr.com
2 entries


36532127
leaf cert
//certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
2016-09-28 17:00:39
2017-09-28 17:00:39
app.practiceperfectemr.com, www.app.practiceperfectemr.com
2 entries


9710751
leaf cert
//certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
2015-09-28 13:51:42
2016-09-28 13:51:42
app.practiceperfectemr.com, www.app.practiceperfectemr.com
2 entries


5160588
leaf cert
//certificates.godaddy.com/repository, CN=Go Daddy Secure Certification Authority, serialNumber=07969287
2014-09-27 19:47:10
2015-09-27 22:58:01
app.practiceperfectemr.com, www.app.practiceperfectemr.com
2 entries


2738806
leaf cert
//certificates.godaddy.com/repository, CN=Go Daddy Secure Certification Authority, serialNumber=07969287
2013-09-27 22:58:01
2014-09-27 22:58:01
app.practiceperfectemr.com, www.app.practiceperfectemr.com
2 entries


536400
leaf cert
//certificates.godaddy.com/repository, CN=Go Daddy Secure Certification Authority, serialNumber=07969287
2012-09-26 07:50:51
2013-09-26 07:50:51
app.practiceperfectemr.com, www.app.practiceperfectemr.com
2 entries



11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404


12. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
app.practiceperfectemr.com
0

no CAA entry found
1
0
practiceperfectemr.com
0

no CAA entry found
1
0
com
0

no CAA entry found
1
0


13. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
practiceperfectemr.com
929tehp9jc5f1o9hn120ti2n61
ok
1
0
practiceperfectemr.com
google-site-verification=Udu7RxQQ30kcv2HDEu2FAt-bqhBdHQO61iz45_Pfd4E
ok
1
0
practiceperfectemr.com
v=spf1 include:_spf.google.com include:mail.zendesk.com ?all
ok
1
0
app.practiceperfectemr.com

ok
1
0
_acme-challenge.app.practiceperfectemr.com

Name Error - The domain name does not exist
1
0
_acme-challenge.app.practiceperfectemr.com.practiceperfectemr.com

Name Error - The domain name does not exist
1
0
_acme-challenge.app.practiceperfectemr.com.app.practiceperfectemr.com

Name Error - The domain name does not exist
1
0


14. Portchecks

Domain or IPPortDescriptionResultAnswer
app.practiceperfectemr.com
21
FTP



app.practiceperfectemr.com
21
FTP



app.practiceperfectemr.com
22
SSH
open
SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2

app.practiceperfectemr.com
22
SSH
open
SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2

app.practiceperfectemr.com
25
SMTP



app.practiceperfectemr.com
25
SMTP



app.practiceperfectemr.com
53
DNS



app.practiceperfectemr.com
53
DNS



app.practiceperfectemr.com
110
POP3



app.practiceperfectemr.com
110
POP3



app.practiceperfectemr.com
143
IMAP



app.practiceperfectemr.com
143
IMAP



app.practiceperfectemr.com
465
SMTP (encrypted)



app.practiceperfectemr.com
465
SMTP (encrypted)



app.practiceperfectemr.com
587
SMTP (encrypted, submission)



app.practiceperfectemr.com
587
SMTP (encrypted, submission)



app.practiceperfectemr.com
993
IMAP (encrypted)



app.practiceperfectemr.com
993
IMAP (encrypted)



app.practiceperfectemr.com
995
POP3 (encrypted)



app.practiceperfectemr.com
995
POP3 (encrypted)



app.practiceperfectemr.com
1433
MS SQL



app.practiceperfectemr.com
1433
MS SQL



app.practiceperfectemr.com
2082
cPanel (http)



app.practiceperfectemr.com
2082
cPanel (http)



app.practiceperfectemr.com
2083
cPanel (https)



app.practiceperfectemr.com
2083
cPanel (https)



app.practiceperfectemr.com
2086
WHM (http)



app.practiceperfectemr.com
2086
WHM (http)



app.practiceperfectemr.com
2087
WHM (https)



app.practiceperfectemr.com
2087
WHM (https)



app.practiceperfectemr.com
2089
cPanel Licensing



app.practiceperfectemr.com
2089
cPanel Licensing



app.practiceperfectemr.com
2095
cPanel Webmail (http)



app.practiceperfectemr.com
2095
cPanel Webmail (http)



app.practiceperfectemr.com
2096
cPanel Webmail (https)



app.practiceperfectemr.com
2096
cPanel Webmail (https)



app.practiceperfectemr.com
2222
DirectAdmin (http)



app.practiceperfectemr.com
2222
DirectAdmin (http)



app.practiceperfectemr.com
2222
DirectAdmin (https)



app.practiceperfectemr.com
2222
DirectAdmin (https)



app.practiceperfectemr.com
3306
mySql



app.practiceperfectemr.com
3306
mySql



app.practiceperfectemr.com
5224
Plesk Licensing



app.practiceperfectemr.com
5224
Plesk Licensing



app.practiceperfectemr.com
5432
PostgreSQL



app.practiceperfectemr.com
5432
PostgreSQL



app.practiceperfectemr.com
8080
Ookla Speedtest (http)



app.practiceperfectemr.com
8080
Ookla Speedtest (http)



app.practiceperfectemr.com
8080
Ookla Speedtest (https)



app.practiceperfectemr.com
8080
Ookla Speedtest (https)



app.practiceperfectemr.com
8083
VestaCP http



app.practiceperfectemr.com
8083
VestaCP http



app.practiceperfectemr.com
8083
VestaCP https



app.practiceperfectemr.com
8083
VestaCP https



app.practiceperfectemr.com
8443
Plesk Administration (https)



app.practiceperfectemr.com
8443
Plesk Administration (https)



app.practiceperfectemr.com
8447
Plesk Installer + Updates



app.practiceperfectemr.com
8447
Plesk Installer + Updates



app.practiceperfectemr.com
8880
Plesk Administration (http)



app.practiceperfectemr.com
8880
Plesk Administration (http)



app.practiceperfectemr.com
10000
Webmin (http)



app.practiceperfectemr.com
10000
Webmin (http)



app.practiceperfectemr.com
10000
Webmin (https)



app.practiceperfectemr.com
10000
Webmin (https)



159.89.247.4
21
FTP



159.89.247.4
21
FTP



159.89.247.4
22
SSH
open
SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2

159.89.247.4
22
SSH
open
SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2

159.89.247.4
25
SMTP



159.89.247.4
25
SMTP



159.89.247.4
53
DNS



159.89.247.4
53
DNS



159.89.247.4
110
POP3



159.89.247.4
110
POP3



159.89.247.4
143
IMAP



159.89.247.4
143
IMAP



159.89.247.4
465
SMTP (encrypted)



159.89.247.4
465
SMTP (encrypted)



159.89.247.4
587
SMTP (encrypted, submission)



159.89.247.4
587
SMTP (encrypted, submission)



159.89.247.4
993
IMAP (encrypted)



159.89.247.4
993
IMAP (encrypted)



159.89.247.4
995
POP3 (encrypted)



159.89.247.4
995
POP3 (encrypted)



159.89.247.4
1433
MS SQL



159.89.247.4
1433
MS SQL



159.89.247.4
2082
cPanel (http)



159.89.247.4
2082
cPanel (http)



159.89.247.4
2083
cPanel (https)



159.89.247.4
2083
cPanel (https)



159.89.247.4
2086
WHM (http)



159.89.247.4
2086
WHM (http)



159.89.247.4
2087
WHM (https)



159.89.247.4
2087
WHM (https)



159.89.247.4
2089
cPanel Licensing



159.89.247.4
2089
cPanel Licensing



159.89.247.4
2095
cPanel Webmail (http)



159.89.247.4
2095
cPanel Webmail (http)



159.89.247.4
2096
cPanel Webmail (https)



159.89.247.4
2096
cPanel Webmail (https)



159.89.247.4
2222
DirectAdmin (http)



159.89.247.4
2222
DirectAdmin (http)



159.89.247.4
2222
DirectAdmin (https)



159.89.247.4
2222
DirectAdmin (https)



159.89.247.4
3306
mySql



159.89.247.4
3306
mySql



159.89.247.4
5224
Plesk Licensing



159.89.247.4
5224
Plesk Licensing



159.89.247.4
5432
PostgreSQL



159.89.247.4
5432
PostgreSQL



159.89.247.4
8080
Ookla Speedtest (http)



159.89.247.4
8080
Ookla Speedtest (http)



159.89.247.4
8080
Ookla Speedtest (https)



159.89.247.4
8080
Ookla Speedtest (https)



159.89.247.4
8083
VestaCP http



159.89.247.4
8083
VestaCP http



159.89.247.4
8083
VestaCP https



159.89.247.4
8083
VestaCP https



159.89.247.4
8443
Plesk Administration (https)



159.89.247.4
8443
Plesk Administration (https)



159.89.247.4
8447
Plesk Installer + Updates



159.89.247.4
8447
Plesk Installer + Updates



159.89.247.4
8880
Plesk Administration (http)



159.89.247.4
8880
Plesk Administration (http)



159.89.247.4
10000
Webmin (http)



159.89.247.4
10000
Webmin (http)



159.89.247.4
10000
Webmin (https)



159.89.247.4
10000
Webmin (https)





Permalink: https://check-your-website.server-daten.de/?i=cedf11c8-45e6-48f5-b438-a31adebc49a5


Last Result: https://check-your-website.server-daten.de/?q=app.practiceperfectemr.com - 2020-02-13 17:32:49


Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=app.practiceperfectemr.com" target="_blank">Check this Site: app.practiceperfectemr.com</a>