Check DNS, Urls + Redirects, Certificates and Content of your Website

Domainname	Http-Status	redirect	Sec.	G
• http://[2606:4700:4700:0000:0000:0000:0000:1111]/ 2606:4700:4700::1111	301	https://2606:4700:4700::1111/ Html is minified: 109.15 %	0.014	E
Server: cloudflare
Date: Tue, 10 Mar 2026 22:49:34 GMT
Connection: keep-alive
Location: https://[2606:4700:4700::1111]/
CF-RAY: 9da5df976e3e339b-TXL
Content-Type: text/html
Content-Length: 167

• https://[2606:4700:4700:0000:0000:0000:0000:1111]/ 2606:4700:4700::1111	301	https://one.one.one.one/	2.964	B
Date: Tue, 10 Mar 2026 22:49:34 GMT
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kh3cM7E30Shdv%2BFRvdY%2BQmvve9OBckk6UAJMFtuMSbhrJuxO6d2qMOuNHZekD3EbI6kqGIv4ed887SH%2BPJoMFn9l5U%2BOkAxSaPt0vy%2FEc%2FqS6bKI4JC0QqNB4lnMkV%2FSdml%2BJFgASQzaLOT6Gtn%2FsNOooxA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Location: https://one.one.one.one/
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9da5df97df34e517-TXL
Content-Length: 0

• https://[2606:4700:4700::1111]/	301	https://one.one.one.one/	2.890	B
Date: Tue, 10 Mar 2026 22:49:42 GMT
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sR5%2FsF32W8bat9F7LEc2nj4IM%2B5Obr5UkQKEECzc%2FTCaHfHVFWeYC24wX%2B90yjZUZ4zsdY2F5qobZ3THSPkWCIVGUs0kiK88%2BEmVPbrP0wDTJutJUHdtRGHA5lJ7JZBdnCLJYLZtu20ZNt16S2SbtQOuTqs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Location: https://one.one.one.one/
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9da5dfc638e9e517-TXL
Content-Length: 0

• https://one.one.one.one/ gzip used - 17539 / 56614 - 69.02 %	200	Html is minified: 102.56 %	3.077	B
Date: Tue, 10 Mar 2026 22:49:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Br9IPsIGFyZdMU5tjxjAkpFPiapPbMpJDMbWqG2Qs2bAS7Xdqx5Qm5mTz1vfys6pmre9wR8ru8cQnd2Ucsr%2F0LlF5I2YA6CumbLW5qZvUfSUbTWY%2B3Yhokn7XIZTeuqlWDLfzXkxtxeJ1HDa%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
CF-Ray: 9da5dfd93be3e508-TXL
Access-Control-Allow-Origin: *
Cache-Control: public, must-revalidate, max-age=0
ETag: W/"e3b0b55949321bee09e380eb849f90fd"
Vary: Accept-Encoding
Content-Security-Policy: default-src 'none'; script-src 'self' 'sha256-qcMXZ/ErgDG9p2Htysz9era6iflv8JXya41zOY0slSc=' 'sha256-ydM8qJ+T0Nd7adK8t34/cs0GvvCG0JBujCWzV3uML8E=' 'sha256-TzTXRDJBcbY1qVQheGb/4iSGqKPqCg6XVoerYf5BYMY=' embed.cloudflarestream.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data:; font-src fonts.gstatic.com; connect-src 'self' 1.1.1.1 1.0.0.1 .cloudflare-dns.com .help.every1dns.net; frame-src embed.cloudflarestream.com; manifest-src 'self'
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Server: cloudflare
Alt-Svc: h3=":443"
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Content-Length: 17539

• http://[2606:4700:4700:0000:0000:0000:0000:1111]/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2606:4700:4700::1111	301	https://2606:4700:4700::1111/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Html is minified: 109.15 %	0.010	E
Visible Content:
Server: cloudflare
Date: Tue, 10 Mar 2026 22:49:39 GMT
Connection: keep-alive
Location: https://[2606:4700:4700::1111]/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
CF-RAY: 9da5dfb3bab5339b-TXL
Content-Type: text/html
Content-Length: 167

• https://[2606:4700:4700::1111]/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	301	https://one.one.one.one/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	2.897	A
Visible Content:
Date: Tue, 10 Mar 2026 22:49:49 GMT
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ouBNZkiqwxD5n6KD4%2FZWZiPdXYXh9MAr9Xx%2Fbt7yf5%2FvXLmeDIBH4buLtyl8OCEAw%2FDIOEO7YVh7OEcB1wLMUSgVvdmsZ8xXEUpJD926cP0pcxjLOvq4DGCXZqmRPqghrd0NF%2BvMlYbN0xq09y0TiMaZt0U%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Location: https://one.one.one.one/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9da5dff4ddb3e517-TXL
Content-Length: 0

• https://one.one.one.one/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de gzip used - 386 / 1285 - 69.96 %	404	Html is minified: 103.21 %	2.863	A
Not Found
Visible Content:
Date: Tue, 10 Mar 2026 22:49:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4U2%2B2xMBjtL%2BHEvnfBr2wkCKRvufIqOESD70jcto9%2FGoolAUPyItzazAl5UB3IevFQjdChrKIpRsx96lCePcO9DTEVREuhV%2B1GZ3h7C80bbhkWDeYASSeFxjedHjhiDiscbCRCY2LdkPnPZZEA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
CF-Ray: 9da5e0073998e508-TXL
Access-Control-Allow-Origin: *
Cache-Control: no-store
Vary: Accept-Encoding
Content-Security-Policy: default-src 'none'; script-src 'self' 'sha256-qcMXZ/ErgDG9p2Htysz9era6iflv8JXya41zOY0slSc=' 'sha256-ydM8qJ+T0Nd7adK8t34/cs0GvvCG0JBujCWzV3uML8E=' 'sha256-TzTXRDJBcbY1qVQheGb/4iSGqKPqCg6XVoerYf5BYMY=' embed.cloudflarestream.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data:; font-src fonts.gstatic.com; connect-src 'self' 1.1.1.1 1.0.0.1 .cloudflare-dns.com .help.every1dns.net; frame-src embed.cloudflarestream.com; manifest-src 'self'
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Server: cloudflare
Alt-Svc: h3=":443"
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Content-Length: 386

• https://[2606:4700:4700:0000:0000:0000:0000:1111]/ 2606:4700:4700::1111	301	https://one.one.one.one/	2.900	B
Date: Tue, 10 Mar 2026 22:49:39 GMT
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xqu60PqKbtXLQd3IDvk9un6XJl6QPQKmYnM%2BwW4NNUZUkue0FH98dsoEBpPv8HCM8wnz6VdF9lgSm275By6ctrnBDnNO82u%2FIukyT2X07Gn%2BYe4UJxR0ZOUpQR3dGonWil8xwn%2B01iEq0Om0bo07wkMwKzk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"report_to":"cf-nel","max_age":604800}
Location: https://one.one.one.one/
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 9da5dfb3d82ce517-TXL
Content-Length: 0

7. Comments

	1. General Results, most used to calculate the result
A	name "2606:4700:4700::1111" is ipv6 address, public suffix is not defined
A	Good: All ip addresses are public addresses
A	https://[2606:4700:4700::1111]/	301	https://one.one.one.one/	Correct redirect https to https
A	https://[2606:4700:4700:0000:0000:0000:0000:1111]/ 2606:4700:4700::1111	301	https://one.one.one.one/	Correct redirect https to https
A	https://[2606:4700:4700::1111]/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	301	https://one.one.one.one/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	Correct redirect https to https
A	https://[2606:4700:4700:0000:0000:0000:0000:1111]/ 2606:4700:4700::1111	301	https://one.one.one.one/	Correct redirect https to https
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: non-www is preferred
A	Good: No cookie sent via http.
A	Good: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
B	https://[2606:4700:4700::1111]/	301		Missing HSTS-Header
B	https://[2606:4700:4700:0000:0000:0000:0000:1111]/ 2606:4700:4700::1111	301		Missing HSTS-Header
B	https://one.one.one.one/	200		Missing HSTS-Header
B	https://[2606:4700:4700::1111]/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	301		Missing HSTS-Header
B	https://one.one.one.one/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	404		Missing HSTS-Header
E	http://[2606:4700:4700:0000:0000:0000:0000:1111]/ 2606:4700:4700::1111	301	https://2606:4700:4700::1111/	Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.2606:4700:4700::1111
	2. Header-Checks
A	one.one.one.one	Content-Security-Policy		Ok: Header without syntax errors found: default-src 'none'; script-src 'self' 'sha256-qcMXZ/ErgDG9p2Htysz9era6iflv8JXya41zOY0slSc=' 'sha256-ydM8qJ+T0Nd7adK8t34/cs0GvvCG0JBujCWzV3uML8E=' 'sha256-TzTXRDJBcbY1qVQheGb/4iSGqKPqCg6XVoerYf5BYMY=' embed.cloudflarestream.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data:; font-src fonts.gstatic.com; connect-src 'self' 1.1.1.1 1.0.0.1 .cloudflare-dns.com .help.every1dns.net; frame-src embed.cloudflarestream.com; manifest-src 'self'
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
E				Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E				Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E				Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: No object-src found, but the default-src used as fallback is defined and restricted.
A				Good: script-src without 'unsafe-inline' and 'unsafe-eval' found. That's the recommended configuration.
A				Good: script-src without * and a scheme found.
A				Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A		report-to		Ok: Header without syntax errors found: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Br9IPsIGFyZdMU5tjxjAkpFPiapPbMpJDMbWqG2Qs2bAS7Xdqx5Qm5mTz1vfys6pmre9wR8ru8cQnd2Ucsr%2F0LlF5I2YA6CumbLW5qZvUfSUbTWY%2B3Yhokn7XIZTeuqlWDLfzXkxtxeJ1HDa%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
A				Ok: Header without syntax errors found: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Br9IPsIGFyZdMU5tjxjAkpFPiapPbMpJDMbWqG2Qs2bAS7Xdqx5Qm5mTz1vfys6pmre9wR8ru8cQnd2Ucsr%2F0LlF5I2YA6CumbLW5qZvUfSUbTWY%2B3Yhokn7XIZTeuqlWDLfzXkxtxeJ1HDa%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: strict-origin-when-cross-origin
A		X-Frame-Options		Ok: Header without syntax errors found: DENY
B				Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
F	one.one.one.one	Permissions-Policy		Critical: Missing Header:
B	one.one.one.one	Cross-Origin-Embedder-Policy		Info: Missing Header
B	one.one.one.one	Cross-Origin-Opener-Policy		Info: Missing Header
B	one.one.one.one	Cross-Origin-Resource-Policy		Info: Missing Header
	3. DNS- and NameServer - Checks
	4. Content- and Performance-critical Checks
A	Good: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
A	Good: Every https result with status 200 has a minified Html-Content with a quota lower then 110 %.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
A	Info: No img element found, no alt attribute checked
	https://one.one.one.one/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	404	2.863 seconds	Warning: 404 needs more then one second
A	Duration: 33423 milliseconds, 33.423 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

one.one.one.one

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

one.one.one.one

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - incomplete	1	CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, C=US, ST=California
	2	CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, C=US, ST=Texas

[2606:4700:4700::1111]

2606:4700:4700::1111

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

[2606:4700:4700::1111]

2606:4700:4700::1111

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - incomplete	1	CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, C=US, ST=California
	2	CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, C=US, ST=Texas

[2606:4700:4700:0000:0000:0000:0000:1111]

2606:4700:4700::1111

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

[2606:4700:4700:0000:0000:0000:0000:1111]

2606:4700:4700::1111

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - incomplete	1	CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, C=US, ST=California
	2	CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, C=US, ST=Texas

one.one.one.one

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

one.one.one.one

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - incomplete	1	CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, C=US, ST=California
	2	CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, C=US, ST=Texas

[2606:4700:4700:0000:0000:0000:0000:1111]

2606:4700:4700::1111

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

[2606:4700:4700:0000:0000:0000:0000:1111]

2606:4700:4700::1111

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - incomplete	1	CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, C=US, ST=California
	2	CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, C=US, ST=Texas

9. Certificates

CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, S=California, C=US

31.12.2025

21.12.2026
expires in 284 days

cloudflare-dns.com, *.cloudflare-dns.com, 1.0.0.1, 1.1.1.1, 162.159.36.1, 162.159.46.1, 2606:4700:4700:0000:0000:0000:0000:1001, 2606:4700:4700:0000:0000:0000:0000:1111, 2606:4700:4700:0000:0000:0000:0000:0064, 2606:4700:4700:0000:0000:0000:0000:6400, one.one.one.one - 11 entries

CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, S=California, C=US

31.12.2025

21.12.2026
expires in 284 days

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	4ED03304C46B87A8C2EB5569DB9EBA0C
Thumbprint:	F88635017260D40B9EB417BEE73737911B630E59
SHA256 / Certificate:	47AoJnidZT0iTT7ay+Tod8tyhvxMkiZy9iJnQcpXrWU=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	96d43a697cb7b6aa4d64a25d9debcc0fba11f88b08e6b3566ceb2c143ae5f84c
SHA256 hex / Subject Public Key Information (SPKI):	96d43a697cb7b6aa4d64a25d9debcc0fba11f88b08e6b3566ceb2c143ae5f84c (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsps.ssl.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, S=California, C=US

31.12.2025

21.12.2026
expires in 284 days

CN=cloudflare-dns.com, O="Cloudflare, Inc.", L=San Francisco, S=California, C=US

31.12.2025

21.12.2026
expires in 284 days

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	4ED03304C46B87A8C2EB5569DB9EBA0C
Thumbprint:	F88635017260D40B9EB417BEE73737911B630E59
SHA256 / Certificate:	47AoJnidZT0iTT7ay+Tod8tyhvxMkiZy9iJnQcpXrWU=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	96d43a697cb7b6aa4d64a25d9debcc0fba11f88b08e6b3566ceb2c143ae5f84c
SHA256 hex / Subject Public Key Information (SPKI):	96d43a697cb7b6aa4d64a25d9debcc0fba11f88b08e6b3566ceb2c143ae5f84c (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsps.ssl.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, S=Texas, C=US

07.03.2019

03.03.2034
expires in 2913 days

CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, S=Texas, C=US

07.03.2019

03.03.2034
expires in 2913 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	1CD71212DE1510D91282DA33104A102F
Thumbprint:	9219612E901C4904F9835EE8C2ADD54FF0B797FD
SHA256 / Certificate:	lItxEa9C9UbVec/1ziveyCE03ZkUhCvdsMUocutgTjk=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	cc6800e0e5380e325dbe945852a6e2e5587683d5b939cfcf80a8a1cbd9a42ec1
SHA256 hex / Subject Public Key Information (SPKI):	cc6800e0e5380e325dbe945852a6e2e5587683d5b939cfcf80a8a1cbd9a42ec1
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsps.ssl.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, S=Texas, C=US

07.03.2019

03.03.2034
expires in 2913 days

CN=SSL.com SSL Intermediate CA ECC R2, O=SSL Corp, L=Houston, S=Texas, C=US

07.03.2019

03.03.2034
expires in 2913 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	1CD71212DE1510D91282DA33104A102F
Thumbprint:	9219612E901C4904F9835EE8C2ADD54FF0B797FD
SHA256 / Certificate:	lItxEa9C9UbVec/1ziveyCE03ZkUhCvdsMUocutgTjk=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	cc6800e0e5380e325dbe945852a6e2e5587683d5b939cfcf80a8a1cbd9a42ec1
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsps.ssl.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, S=Texas, C=US

14.02.2019

12.02.2027
expires in 337 days

CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, S=Texas, C=US

14.02.2019

12.02.2027
expires in 337 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	3F2C608C5CF96321
Thumbprint:	8F650CB9C02E39CCCE1AA17C8425E16D7F22DB0B
SHA256 / Certificate:	BrlyKmmcV9/xhp9DC0ebtutJquEYTqycUyXBM0o06kw=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	a320f4d534d7be97c1ae8dd0499735bc895c323add2d388bfccf662c23d7f99a
SHA256 hex / Subject Public Key Information (SPKI):	a320f4d534d7be97c1ae8dd0499735bc895c323add2d388bfccf662c23d7f99a
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsps.ssl.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, S=Texas, C=US

12.02.2016

12.02.2041
expires in 5451 days

CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, S=Texas, C=US

12.02.2016

12.02.2041
expires in 5451 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA256
Serial Number:	75E6DFCBC1685BA8
Thumbprint:	C3197C3924E654AF1BC4AB20957AE2C30E13026A
SHA256 / Certificate:	NBe7BsxgB9oblhySC4q0zj+tgg5Kowuay8SnTr3OvGU=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	a320f4d534d7be97c1ae8dd0499735bc895c323add2d388bfccf662c23d7f99a
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, S=Texas, C=US

12.02.2016

12.02.2041
expires in 5451 days

CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, S=Texas, C=US

12.02.2016

12.02.2041
expires in 5451 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	7B2C9BD316803299
Thumbprint:	B7AB3308D1EA4477BA1480125A6FBDA936490CBB
SHA256 / Certificate:	hWZqVi7gvlzpJcHYiQpvdqh+wW1NfV8p6nQZzyASO2k=
SHA256 hex / Cert (DANE * 0 1):	85666a562ee0be5ce925c1d8890a6f76a87ec16d4d7d5f29ea7419cf20123b69
SHA256 hex / PublicKey (DANE * 1 1):	d1c45377ebdcd618cd1651dc2e02c21d751e5aa9fcd1b3431ff6ecf6a31348fa
SHA256 hex / Subject Public Key Information (SPKI):	d1c45377ebdcd618cd1651dc2e02c21d751e5aa9fcd1b3431ff6ecf6a31348fa
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404

12. Html-Parsing via https://validator.w3.org/nu/

	Type	Message	num found
Url used (first standard-https-result with http status 200): https://one.one.one.one/

Summary
	Good: No non-document-errors
	50 errors
	1 warnings
1.	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.	18
2.	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.	18
3.	error	An `img` element must have an `alt` attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.	5
4.	error	Start tag `a` seen but an element of the same type was already open.	3
5.	error	Stray end tag `a`.	3
6.	error	Attribute `theme` not allowed on element `html` at this point.	1
7.	error	A `meta` element with an `http-equiv` attribute whose value is `X-UA-Compatible` must have a `content` attribute with the value `IE=edge`.	1
8.	error	Element `style` not allowed as child of element `body` in this context. (Suppressing further errors from this subtree.)	1
9.	warning	The `type` attribute is unnecessary for JavaScript resources.	1
Details
	Type	Message + Sample
1	error	Attribute `theme` not allowed on element `html` at this point.
		From line 1, column 16 to line 1, column 79
		TYPE html><html theme="light" lang="en-US" prefix="og: http://ogp.me/ns#"><head>
2	error	A `meta` element with an `http-equiv` attribute whose value is `X-UA-Compatible` must have a `content` attribute with the value `IE=edge`.
		From line 22, column 324 to line 22, column 386
		"1.1.1.1"><meta http-equiv="X-UA-Compatible" content="IE=edge, chrome=1"><meta
3	error	Element `style` not allowed as child of element `body` in this context. (Suppressing further errors from this subtree.)
		From line 22, column 1629 to line 22, column 1635
		ead><body><style>html {
4	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 29 to line 30, column 63
		dropdown"><a class="language" href="/id-ID/">Bahasa
5	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 29 to line 30, column 63
		dropdown"><a class="language" href="/id-ID/">Bahasa
6	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 84 to line 30, column 118
		onesia</a><a class="language" href="/de-DE/">Deutsc
7	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 84 to line 30, column 118
		onesia</a><a class="language" href="/de-DE/">Deutsc
8	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 130 to line 30, column 164
		eutsch</a><a class="language" href="/es-ES/">Españo
9	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 130 to line 30, column 164
		eutsch</a><a class="language" href="/es-ES/">Españo
10	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 176 to line 30, column 210
		spañol</a><a class="language" href="/fr-FR/">França
11	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 176 to line 30, column 210
		spañol</a><a class="language" href="/fr-FR/">França
12	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 223 to line 30, column 257
		ançais</a><a class="language" href="/it-IT/">Italia
13	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 223 to line 30, column 257
		ançais</a><a class="language" href="/it-IT/">Italia
14	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 270 to line 30, column 304
		aliano</a><a class="language" href="/nl-NL/">Nederl
15	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 270 to line 30, column 304
		aliano</a><a class="language" href="/nl-NL/">Nederl
16	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 319 to line 30, column 353
		rlands</a><a class="language" href="/pl-PL/">Polski
17	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 319 to line 30, column 353
		rlands</a><a class="language" href="/pl-PL/">Polski
18	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 364 to line 30, column 398
		Polski</a><a class="language" href="/pt-BR/">Portug
19	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 364 to line 30, column 398
		Polski</a><a class="language" href="/pt-BR/">Portug
20	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 412 to line 30, column 446
		tuguês</a><a class="language" href="/tr-TR/">Türkçe
21	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 412 to line 30, column 446
		tuguês</a><a class="language" href="/tr-TR/">Türkçe
22	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 457 to line 30, column 491
		Türkçe</a><a class="language" href="/ar-EG/">العربي
23	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 457 to line 30, column 491
		Türkçe</a><a class="language" href="/ar-EG/">العربي
24	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 503 to line 30, column 537
		لعربية</a><a class="language" href="/fa-IR/">فارسی<
25	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 503 to line 30, column 537
		لعربية</a><a class="language" href="/fa-IR/">فارسی<
26	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 547 to line 30, column 581
		>فارسی</a><a class="language" href="/he-IL/">עברית<
27	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 547 to line 30, column 581
		>فارسی</a><a class="language" href="/he-IL/">עברית<
28	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 591 to line 30, column 625
		>עברית</a><a class="language" href="/ja-JP/">日本語</a
29	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 591 to line 30, column 625
		>עברית</a><a class="language" href="/ja-JP/">日本語</a
30	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 633 to line 30, column 667
		/">日本語</a><a class="language" href="/ko-KR/">한국어</a
31	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 633 to line 30, column 667
		/">日本語</a><a class="language" href="/ko-KR/">한국어</a
32	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 675 to line 30, column 709
		/">한국어</a><a class="language" href="/ru-RU/">Русски
33	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 675 to line 30, column 709
		/">한국어</a><a class="language" href="/ru-RU/">Русски
34	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 721 to line 30, column 755
		усский</a><a class="language" href="/uk-UA/">Україн
35	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 721 to line 30, column 755
		усский</a><a class="language" href="/uk-UA/">Україн
36	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 770 to line 30, column 806
		їнська</a><a class="language" href="/zh-Hans/">简体中文</
37	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 770 to line 30, column 806
		їнська</a><a class="language" href="/zh-Hans/">简体中文</
38	error	The element `a` with the attribute `href` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 815 to line 30, column 851
		">简体中文</a><a class="language" href="/zh-Hant/">繁體中文</
39	error	The element `a` must not appear as a descendant of an element with the attribute `role=button`.
		From line 30, column 815 to line 30, column 851
		">简体中文</a><a class="language" href="/zh-Hant/">繁體中文</
40	error	Start tag `a` seen but an element of the same type was already open.
		From line 30, column 4086 to line 30, column 4226
		>macOS</p><a class="CopyLink--small CopyLink-with-margin--small" href="https://developers.cloudflare.com/warpclient/setting-up/macOS/" target="_blank">macOS
41	error	Stray end tag `a`.
		From line 30, column 4262 to line 30, column 4265
		ctions</a></a></div>
42	error	Start tag `a` seen but an element of the same type was already open.
		From line 30, column 4749 to line 30, column 4891
		indows</p><a class="CopyLink--small CopyLink-with-margin--small" href="https://developers.cloudflare.com/warpclient/setting-up/windows/" target="_blank">Window
43	error	Stray end tag `a`.
		From line 30, column 4929 to line 30, column 4932
		ctions</a></a></div>
44	error	Start tag `a` seen but an element of the same type was already open.
		From line 30, column 7759 to line 30, column 7899
		>Linux</p><a class="CopyLink--small CopyLink-with-margin--small" href="https://developers.cloudflare.com/warpclient/setting-up/linux/" target="_blank">Linux
45	error	Stray end tag `a`.
		From line 30, column 7935 to line 30, column 7938
		ctions</a></a></div>
46	error	An `img` element must have an `alt` attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.
		From line 30, column 13345 to line 30, column 13379
		-display"><img src="/media/warp-desktop.png"></div>
47	error	An `img` element must have an `alt` attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.
		From line 30, column 19134 to line 30, column 19170
		-display"><img src="/media/warp-desktop-3.png"></div>
48	error	An `img` element must have an `alt` attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.
		From line 30, column 26507 to line 30, column 26538
		-display"><img src="/media/warp-plus.png"></div>
49	error	An `img` element must have an `alt` attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.
		From line 30, column 28621 to line 30, column 28657
		-display"><img src="/media/warp-desktop-2.png"></div>
50	error	An `img` element must have an `alt` attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.
		From line 30, column 30028 to line 30, column 30060
		-display"><img src="/media/lighthouse.svg"></div>
51	warning	The `type` attribute is unnecessary for JavaScript resources.
		From line 30, column 49012 to line 30, column 49078
		</a></div><script type="text/javascript" src="/site-aa686e0e9e4d122550f8.js"></scri

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers:

No NameServer - IP address - Informations found

14. CAA - Entries

No CAA entries found

15. TXT - Entries

No TXT entries found

16. DomainService - Entries

No DomainServiceEntries entries found

17. Cipher Suites

Skipped, CDN used or too many ip addresses

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

Permalink: https://check-your-website.server-daten.de/?i=6e259d1f-1386-4d11-86cf-ca5ed512f0e8

Last Result: https://check-your-website.server-daten.de/?q=%5B2606%3A4700%3A4700%3A%3A1111%5D - 2026-03-10 23:49:30

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=%5B2606%3A4700%3A4700%3A%3A1111%5D" target="_blank">Check this Site: %5B2606%3A4700%3A4700%3A%3A1111%5D</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=[2606:4700:4700::1111]

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

12. Html-Parsing via https://validator.w3.org/nu/

Summary

Details

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks