Shortcuts: 1. Basic DNS | 2. Url-Checks | 3. Comments | 4. Connections | 5. Certificates | 6. CT-Logs | 7. Html-Content | 8. CAA | 9. TXT |


A+

Top config, Preload

Checked:
09.04.2019 11:45:48


Older results

1. Basic DNS and Nameserver Checks

HostTIP-Addressis auth.∑ Queries∑ Timeout
server-daten.de
A
85.215.2.228
yes
1
0

AAAA
2a01:238:301b::1228
yes


www.server-daten.de
A
85.215.2.228
yes
1
0

AAAA
2a01:238:301b::1228
yes



Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

0 DNSKEY RR found


de
1 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 22.04.2019, 05:00:00, Signature-Inception: 09.04.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)

not checked

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 5674, Flags 256

Public Key with Algorithm 8, KeyTag 39227, Flags 257 (SEP = Secure Entry Point)

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 1 Labels, original TTL: 7200 sec, Signature-expiration: 25.04.2019, 12:00:00, Signature-Inception: 04.04.2019, 12:00:00, KeyTag 39227, Signer-Name: de

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 39227 used to validate the DNSKEY RRSet

Fatal error: DNSKEY 39227 signs DNSKEY RRset, but no confirming DS RR in the parent zone found. No chain of trust created.
server-daten.de
1 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 16.04.2019, 08:01:05, Signature-Inception: 09.04.2019, 08:01:05, KeyTag 5674, Signer-Name: de

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 5674 used to validate the DS RRSet in the parent zone

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20737, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 39483, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 18.04.2019, 00:00:00, Signature-Inception: 28.03.2019, 00:00:00, KeyTag 20737, Signer-Name: server-daten.de

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20737 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20737, DigestType 2 and Digest "atjk9MBB7MV0rR6m/vjNsoAib1yqTP4vnN1Whf4ZtEE=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

RRSIG Type 1, expiration 2019-04-18 00:00:00 validates the A - Result: 85.215.2.228

RRSIG Type 16, expiration 2019-04-18 00:00:00 validates the TXT - Result: v=spf1 a mx ?all This is a small txt test entry

RRSIG Type 28, expiration 2019-04-18 00:00:00 validates the AAAA - Result: 2A01:0238:301B:0000:0000:0000:0000:1228

RRSIG Type 257, expiration 2019-04-18 00:00:00 validates the CAA - Result: 5|iodefmailto:info@sql-und-xml.de 5|issueletsencrypt.org; accounturi=https://acme-staging-v02.api.letsencrypt.org/acme/acct/5532373 5|issueletsencrypt.org; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/35657966

RRSIG Type 50, expiration 2019-04-18 00:00:00 validates the NSEC3 RR that proves the not-existence of the CNAME RR

RRSIG Type 50, expiration 2019-04-18 00:00:00 validates the NSEC3 RR that proves the not-existence of the TLSA RR
www.server-daten.de
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

RRSIG Type 50, expiration 2019-04-18 00:00:00 validates the NSEC3 RR that proves the not-existence of the CNAME RR

RRSIG Type 50, expiration 2019-04-18 00:00:00 validates the NSEC3 RR that proves the not-existence of the TXT RR

RRSIG Type 50, expiration 2019-04-18 00:00:00 validates the NSEC3 RR that proves the not-existence of the TLSA RR

RRSIG Type 50, expiration 2019-04-18 00:00:00 validates the NSEC3 RR that proves the not-existence of the CAA RR


DomainNameserverNS-IP
www.server-daten.de
  ns.inwx.de

server-daten.de
  ns.inwx.de
192.174.68.104

 
2001:67c:1bc::104

  ns2.inwx.de
176.97.158.104

 
2001:67c:10b8::104

  ns3.inwx.eu
46.165.212.97

 
2a00:c98:2100:a006:3::1

  ns4.inwx.com
95.211.1.145

 
2001:1af8:4400:a048:1::1

  ns5.inwx.net
108.59.8.65

 
2604:9a00:2010:a013:1::1
de
  a.nic.de


  f.nic.de


  l.de.net


  n.de.net


  s.de.net


  z.nic.de



SOA - records (beta)

Domain:de
Primary:f.nic.de
Mail:its.denic.de
Serial:2019040945
Refresh:7200
Retry:7200
Expire:3600000
TTL:7200
num Entries:6


Domain:server-daten.de
Primary:ns.inwx.de
Mail:hostmaster.inwx.de
Serial:2019040200
Refresh:10800
Retry:3600
Expire:604800
TTL:3600
num Entries:10


Domain:www.server-daten.de
Primary:ns.inwx.de
Mail:hostmaster.inwx.de
Serial:2019040200
Refresh:10800
Retry:3600
Expire:604800
TTL:3600
num Entries:1


2. Url-Checks


show header:
Domainname Http-StatusredirectSec.G
• http://server-daten.de/
85.215.2.228
301
https://server-daten.de/
0.090
A
Cache-Control: private
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Location: https://server-daten.de/
Set-Cookie: server-daten.de=6ad5d565-5e1b-4307-92b2-4163f9744d65; Path=/; Domain=server-daten.de; HttpOnly
Date: Tue, 09 Apr 2019 09:46:41 GMT
Connection: close

• http://server-daten.de/
2a01:238:301b::1228
301
https://server-daten.de/
0.046
A
Cache-Control: private
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Location: https://server-daten.de/
Set-Cookie: server-daten.de=97690942-f9b6-4c2a-b01d-6afb12ec8016; Path=/; Domain=server-daten.de; HttpOnly
Date: Tue, 09 Apr 2019 09:46:41 GMT
Connection: close

• http://www.server-daten.de/
85.215.2.228
301
https://www.server-daten.de/
0.023
A
Cache-Control: private
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Location: https://www.server-daten.de/
Set-Cookie: www.server-daten.de=f22df09e-f785-41cc-9b79-a3d3e4fca8f4; Path=/; Domain=www.server-daten.de; HttpOnly
Date: Tue, 09 Apr 2019 09:46:41 GMT
Connection: close

• http://www.server-daten.de/
2a01:238:301b::1228
301
https://www.server-daten.de/
0.016
A
Cache-Control: private
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Location: https://www.server-daten.de/
Set-Cookie: www.server-daten.de=61568a05-4ec2-4afd-8026-4d117fad6ed1; Path=/; Domain=www.server-daten.de; HttpOnly
Date: Tue, 09 Apr 2019 09:46:41 GMT
Connection: close

• https://server-daten.de/
85.215.2.228
301
https://www.server-daten.de/
0.223
A
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Location: https://www.server-daten.de/
Set-Cookie: server-daten.de=04b909d7-8cdc-4f13-be06-f276fc434fc3; Path=/; Domain=server-daten.de; HttpOnly; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Date: Tue, 09 Apr 2019 09:46:41 GMT
Connection: close

• https://server-daten.de/
2a01:238:301b::1228
301
https://www.server-daten.de/
0.100
A
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Location: https://www.server-daten.de/
Set-Cookie: server-daten.de=0250fdbd-7bf0-4cf4-ae87-98eb59856be1; Path=/; Domain=server-daten.de; HttpOnly; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Date: Tue, 09 Apr 2019 09:46:41 GMT
Connection: close

• https://www.server-daten.de/
85.215.2.228
200

0.146
A
Content-Type: text/html; charset=utf-8
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Public-Key-Pins: max-age=2592000; pin-sha256="Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys="; pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M="; includeSubDomains
P3P: CP="NOI CUR OUR STA"
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Expect-CT: enforce, max-age=2592000, report-uri="/-expect-ct.html"
Feature-Policy: camera 'self'
Set-Cookie: www.server-daten.de=5377bbf3-1425-4d64-86e5-755fb405f78e; Path=/; Domain=www.server-daten.de; HttpOnly; Secure
Date: Tue, 09 Apr 2019 09:46:41 GMT
Connection: close
Content-Length: 2769

• https://www.server-daten.de/
2a01:238:301b::1228
200

0.100
A
Content-Type: text/html; charset=utf-8
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Public-Key-Pins: max-age=2592000; pin-sha256="Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys="; pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M="; includeSubDomains
P3P: CP="NOI CUR OUR STA"
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Expect-CT: enforce, max-age=2592000, report-uri="/-expect-ct.html"
Feature-Policy: camera 'self'
Set-Cookie: www.server-daten.de=a5a11c4a-ccd9-42a8-abd7-1fa979299a16; Path=/; Domain=www.server-daten.de; HttpOnly; Secure
Date: Tue, 09 Apr 2019 09:46:43 GMT
Connection: close
Content-Length: 2769

• http://server-daten.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
85.215.2.228
404

0.033
A
Not Found
Visible Content: No such page
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
Date: Tue, 09 Apr 2019 09:46:43 GMT
Connection: close
Content-Length: 38

• http://server-daten.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a01:238:301b::1228
404

0.016
A
Not Found
Visible Content: No such page
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
Date: Tue, 09 Apr 2019 09:46:43 GMT
Connection: close
Content-Length: 38

• http://www.server-daten.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
85.215.2.228
404

0.017
A
Not Found
Visible Content: No such page
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
Date: Tue, 09 Apr 2019 09:46:43 GMT
Connection: close
Content-Length: 38

• http://www.server-daten.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a01:238:301b::1228
404

0.016
A
Not Found
Visible Content: No such page
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
Date: Tue, 09 Apr 2019 09:46:43 GMT
Connection: close
Content-Length: 38

3. Comments

Aname "server-daten.de" is domain, public suffix is "de", top-level-domain-type is "country-code", Country is Germany, tld-manager is "DENIC eG"
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
Agood: destination is https
Agood - only one version with Http-Status 200
Agood: one preferred version: www is preferred
Agood: every cookie sent via https is marked as secure
Agood: every https has a Strict Transport Security Header
Agood: HSTS max-age is long enough, 63072000 seconds = 730 days
Agood: HSTS has includeSubdomains - directive
Agood: HSTS has preload directive
Aexcellent: Domain is in the Google-Preload-List
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
Ahttp://server-daten.de/ 85.215.2.228
301
https://server-daten.de/
correct redirect http - https with the same domain name
Ahttp://server-daten.de/ 2a01:238:301b::1228
301
https://server-daten.de/
correct redirect http - https with the same domain name
Ahttp://www.server-daten.de/ 85.215.2.228
301
https://www.server-daten.de/
correct redirect http - https with the same domain name
Ahttp://www.server-daten.de/ 2a01:238:301b::1228
301
https://www.server-daten.de/
correct redirect http - https with the same domain name
AGood: Nameserver supports TCP connections: 10 good Nameserver
AGood: Nameserver supports Echo Capitalization: 10 good Nameserver
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: a.nic.de
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: f.nic.de
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: l.de.net
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: n.de.net
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: ns.inwx.de
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: ns2.inwx.de
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: ns3.inwx.eu
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: ns4.inwx.com
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: ns5.inwx.net
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: s.de.net
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: z.nic.de
Nameserver doesn't pass all EDNS-Checks: a.nic.de: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: f.nic.de: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: l.de.net: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: n.de.net: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns.inwx.de: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns.inwx.de / 192.174.68.104: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns.inwx.de / 2001:67c:1bc::104: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns2.inwx.de / 176.97.158.104: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns2.inwx.de / 2001:67c:10b8::104: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns3.inwx.eu / 46.165.212.97: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns3.inwx.eu / 2a00:c98:2100:a006:3::1: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns4.inwx.com / 95.211.1.145: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns4.inwx.com / 2001:1af8:4400:a048:1::1: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns5.inwx.net / 108.59.8.65: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns5.inwx.net / 2604:9a00:2010:a013:1::1: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: s.de.net: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: z.nic.de: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
Agood: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
ADuration: 59527 milliseconds, 59.527 seconds


4. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
server-daten.de
85.215.2.228
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
Chain (complete)
1CN=*.server-daten.de

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
server-daten.de
2a01:238:301b::1228
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
Chain (complete)
1CN=*.server-daten.de

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
www.server-daten.de
85.215.2.228
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
Chain (complete)
1CN=*.server-daten.de

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
www.server-daten.de
2a01:238:301b::1228
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
Chain (complete)
1CN=*.server-daten.de

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


5. Certificates

1.
1.
CN=*.server-daten.de
02.04.2019
01.07.2019
expires in 37 days
*.server-daten.de, server-daten.de - 2 entries

KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:04BD15A983BB26EB5C9A4740044A2A06A613
Thumbprint:AE154C8ABD39C3383A8EE852F31C3E7C6A18615F
SHA256 / Certificate:cbUKxUhqJiq0ezESsp0/sg6JFQb3QSC9T+Vz2kXanC4=
SHA256 hex / Cert (DANE * 0 1):71b50ac5486a262ab47b3112b29d3fb20e891506f74120bd4fe573da45da9c2e
SHA256 hex / PublicKey (DANE * 1 1):7dd73755589a7613631cd99ad92a2ab71c47a5e552f9a117aab1f08dc8e63a0e
OCSP - Url:http://ocsp.int-x3.letsencrypt.org
OCSP - must staple:yes
Certificate Transparency:yes


2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
17.03.2016
17.03.2021
expires in 662 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0A0141420000015385736A0B85ECA708
Thumbprint:E6A3B45B062D509B3382282D196EFE97D5956CCB
SHA256 / Certificate:JYR9Zo608E/dQLErawdAxWfafQJDCOtsLJb+QdneIY0=
SHA256 hex / Cert (DANE * 0 1):25847d668eb4f04fdd40b12b6b0740c567da7d024308eb6c2c96fe41d9de218d
SHA256 hex / PublicKey (DANE * 1 1):60b87575447dcba2a36b7d11ac09fb24a9db406fee12d2cc90180517616e8a18
OCSP - Url:http://isrg.trustid.ocsp.identrust.com
OCSP - must staple:no
Certificate Transparency:no


3.
CN=DST Root CA X3, O=Digital Signature Trust Co.
30.09.2000
30.09.2021
expires in 859 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:44AFB080D6A327BA893039862EF8406B
Thumbprint:DAC9024F54D8F6DF94935FB1732638CA6AD77C13
SHA256 / Certificate:BocmAzGnJAPZCfEF5pvPDTLhvSST/8bZIG0RvNZ3Bzk=
SHA256 hex / Cert (DANE * 0 1):0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739
SHA256 hex / PublicKey (DANE * 1 1):563b3caf8cfef34c2335caf560a7a95906e8488462eb75ac59784830df9e5b2b
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no



6. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

Issuerlast 7 daysactivenum Certs
CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
0
1
1
CN=RapidSSL SHA256 CA, O=GeoTrust Inc., C=US
0
1
1
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
844070872
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-04-02 18:58:17
2019-07-01 18:58:17
*.server-daten.de, server-daten.de
2 entries


285136978
CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2018-01-11 00:00:00
2019-09-18 12:00:00
*.server-daten.de, server-daten.de
2 entries


27562537
CN=RapidSSL SHA256 CA, O=GeoTrust Inc., C=US
2016-08-19 00:00:00
2019-09-18 23:59:59
*.server-daten.de, server-daten.de
2 entries



2. Source crt.sh - old and new certificates, sometimes very slow.

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
1
5
CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
0
1
1
CN=RapidSSL SHA256 CA, O=GeoTrust Inc., C=US
0
1
1
CN=RapidSSL SHA256 CA - G3, O=GeoTrust Inc., C=US
0
0
1
OU=Equifax Secure Certificate Authority, O=Equifax, C=US
0
0
1
CN=RapidSSL CA, O="GeoTrust, Inc.", C=US
0
0
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1351200209
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-04-02 16:58:17
2019-07-01 16:58:17
*.server-daten.de, server-daten.de
2 entries


1090504294
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-01-07 19:42:00
2019-04-07 18:42:00
*.server-daten.de, server-daten.de
2 entries


873340019
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-10-18 17:26:02
2019-01-16 18:26:02
*.server-daten.de, server-daten.de
2 entries


764358094
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-09-01 13:09:54
2018-11-30 14:09:54
*.server-daten.de, server-daten.de
2 entries


536444525
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-06-15 07:54:13
2018-09-13 07:54:13
*.server-daten.de, server-daten.de
2 entries


308368327
CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2018-01-10 23:00:00
2019-09-18 10:00:00
*.server-daten.de, server-daten.de
2 entries


29351093
CN=RapidSSL SHA256 CA, O=GeoTrust Inc., C=US
2016-08-18 22:00:00
2019-09-18 21:59:59
*.server-daten.de, server-daten.de
2 entries


5032744
CN=RapidSSL SHA256 CA - G3, O=GeoTrust Inc., C=US
2014-09-17 23:30:33
2016-08-29 09:17:21
*.server-daten.de, Domain Control Validated - RapidSSL(R), GT04822410, See www.rapidssl.com/resources/cps (c)13, server-daten.de
2 entries


2422273
CN=RapidSSL CA, O="GeoTrust, Inc.", C=US
2013-07-28 03:47:05
2016-08-28 08:33:59
*.server-daten.de, Domain Control Validated - RapidSSL(R), GT04822410, See www.rapidssl.com/resources/cps (c)13, server-daten.de
2 entries


126642
OU=Equifax Secure Certificate Authority, O=Equifax, C=US
2010-08-09 09:10:55
2013-08-11 08:32:11
*.server-daten.de, Domain Control Validated - RapidSSL(R), GT04822410, See www.rapidssl.com/resources/cps (c)10, server-daten.de
2 entries



7. Html-Content - Entries (BETA - mixed content and other checks)

Summary

Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://www.server-daten.de/
85.215.2.228
a

11

0







img

1

0







link
stylesheet
1

0







link
other
1

0







meta
other
2

0







script

1

0






https://www.server-daten.de/
2a01:238:301b::1228
a

11

0







img

1

0







link
stylesheet
1

0







link
other
1

0







meta
other
2

0







script

1

0






Details

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://www.server-daten.de/
85.215.2.228
a

/admin/


1
ok



a

/admin/upload.aspx


1
ok



a

/confirm/


1
ok



a

/linkcheck/


1
ok



a

https://www.sql-und-xml.de/


2
ok



a

https://www.sql-und-xml.de/server-daten/


2
ok



a

https://www.sql-und-xml.de/server-daten/datenschutz.html#cookies


1
ok



a

mailto:info@sql-und-xml.de


1
ok



a

tel:+493042020060


1
ok



img
src
/images/server-daten.png
200

1
ok



link
shortcut icon
/favicon.ico
200

1
ok



link
stylesheet
/admin/sd.css
200

1
ok



meta
content-type
text/html; charset=utf-8


1
ok



meta
robots
index,follow


1
ok



script
src
/admin/sd.csp.js
200

1
ok


2a01:238:301b::1228
a

/admin/


1
ok



a

/admin/upload.aspx


1
ok



a

/confirm/


1
ok



a

/linkcheck/


1
ok



a

https://www.sql-und-xml.de/


2
ok



a

https://www.sql-und-xml.de/server-daten/


2
ok



a

https://www.sql-und-xml.de/server-daten/datenschutz.html#cookies


1
ok



a

mailto:info@sql-und-xml.de


1
ok



a

tel:+493042020060


1
ok



img
src
/images/server-daten.png
200

1
ok



link
shortcut icon
/favicon.ico
200

1
ok



link
stylesheet
/admin/sd.css
200

1
ok



meta
content-type
text/html; charset=utf-8


1
ok



meta
robots
index,follow


1
ok



script
src
/admin/sd.csp.js
200

1
ok



8. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.server-daten.de
0

no CAA entry found
1
0

5
issue
letsencrypt.org; accounturi=https://acme-staging-v02.api.letsencrypt.org/acme/acct/5532373
1
0

5
issue
letsencrypt.org; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/35657966
1
0
server-daten.de
5
iodef
mailto:info@sql-und-xml.de
1
0
de
0

no CAA entry found
1
0


9. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
server-daten.de
This is a small txt test entry
ok
1
0
server-daten.de
v=spf1 a mx ?all
ok
1
0
www.server-daten.de

ok
1
0
_acme-challenge.server-daten.de
OhFoOVjo0f4Jhi5hi0r06gl1iD50kMvwJhBjU0y7qdA
looks good
1
0
_acme-challenge.www.server-daten.de

Name Error - The domain name does not exist
1
0
_acme-challenge.server-daten.de.server-daten.de

Name Error - The domain name does not exist
1
0
_acme-challenge.www.server-daten.de.www.server-daten.de

Name Error - The domain name does not exist
1
0



Permalink: https://check-your-website.server-daten.de/?i=d8df957e-4272-47df-9032-c93cb55b9194


Last Result: https://check-your-website.server-daten.de/?q=server-daten.de - 2019-05-24 18:28:24