Check DNS, Urls + Redirects, Certificates and Content of your Website

0 in Queue, 0 of max. 4 Checks (03:44:40)
Why should you only use Prefix - Cookies? |
Hall of Fame - A+ and A

 

Shortcuts: 1. IP-Addresses | 2. DNSSEC | 3. Name Servers | 4. SOA-Entries | 5. Screenshots | 6. Url-Checks | 7. Comments | 8. Connections | 9. Certificates | 10. CT-Logs | 11. Html-Content | 12. Html-Parsing | 13. NameServer-IPAddresses | 14. CAA | 15. TXT | 16. DomainServiceEntries | 17. Cipher Suites | 18. Portchecks |

 

N

 

No trusted Certificate

 

Checked:
02.07.2025 16:54:52

 

Older results

 

N - 18.05.2025 04:09:48
N - 29.01.2025 17:46:05
N - 26.09.2020 02:41:51

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
2a01:238:301b::1226
AAAA
2a01:238:301b::1226
Berlin/State of Berlin/Germany (DE) - Cronon GmbH

yes


 

2. DNSSEC

 

No DNSSEC - Informations found

 

3. Name Servers

 

No Nameserver entries found

 

4. SOA-Entries

 

No SOA entries found

5. Screenshots

Startaddress: https://www.server-daten.de/, address used: https://www.server-daten.de/, Screenshot created 2026-07-25 00:24:24 +00:0 url is insecure, certificate invalid

 

Mobil (412px x 732px)

 

736 milliseconds

 

Screenshot mobile - https://www.server-daten.de/
Mobil + Landscape (732px x 412px)

 

815 milliseconds

 

Screenshot mobile landscape - https://www.server-daten.de/
Screen (1280px x 1680px)

 

815 milliseconds

 

Screenshot Desktop - https://www.server-daten.de/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport397732
content Size3971798

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://[2a01:0238:301b:0000:0000:0000:0000:1226]/
2a01:238:301b::1226
410


0.010
M
Gone
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET,ARR/3.0,ASP.NET
Date: Wed, 02 Jul 2025 14:54:56 GMT
Content-Length: 0

• https://[2a01:0238:301b:0000:0000:0000:0000:1226]/
2a01:238:301b::1226
200


1.927
N
Certificate error: RemoteCertificateNameMismatch
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET,ARR/3.0,ASP.NET
Date: Wed, 02 Jul 2025 14:54:56 GMT
Content-Length: 0

• http://[2a01:0238:301b:0000:0000:0000:0000:1226]/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a01:238:301b::1226
410


0.016
M
Gone
Visible Content:
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET,ARR/3.0,ASP.NET
Date: Wed, 02 Jul 2025 14:55:00 GMT
Content-Length: 0

• https://[2a01:0238:301b:0000:0000:0000:0000:1226]/
2a01:238:301b::1226
200


1.810
B
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET,ARR/3.0,ASP.NET
Date: Wed, 02 Jul 2025 14:55:00 GMT
Content-Length: 0

 

7. Comments


1. General Results, most used to calculate the result

Aname "2a01:238:301b::1226" is ipv6 address, public suffix is not defined
AGood: All ip addresses are public addresses
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: non-www is preferred
AGood: No cookie sent via http.
Bhttps://[2a01:0238:301b:0000:0000:0000:0000:1226]/ 2a01:238:301b::1226
200

Missing HSTS-Header
Mhttp://[2a01:0238:301b:0000:0000:0000:0000:1226]/ 2a01:238:301b::1226
410

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://[2a01:0238:301b:0000:0000:0000:0000:1226]/ 2a01:238:301b::1226
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.2a01:238:301b::1226

2. Header-Checks

F[2a01:0238:301b:0000:0000:0000:0000:1226] 2a01:238:301b::1226
Content-Security-Policy
Critical: Missing Header:
F[2a01:0238:301b:0000:0000:0000:0000:1226] 2a01:238:301b::1226
X-Content-Type-Options
Critical: Missing Header:
F[2a01:0238:301b:0000:0000:0000:0000:1226] 2a01:238:301b::1226
Referrer-Policy
Critical: Missing Header:
F[2a01:0238:301b:0000:0000:0000:0000:1226] 2a01:238:301b::1226
Permissions-Policy
Critical: Missing Header:
B[2a01:0238:301b:0000:0000:0000:0000:1226] 2a01:238:301b::1226
Cross-Origin-Embedder-Policy
Info: Missing Header
B[2a01:0238:301b:0000:0000:0000:0000:1226] 2a01:238:301b::1226
Cross-Origin-Opener-Policy
Info: Missing Header
B[2a01:0238:301b:0000:0000:0000:0000:1226] 2a01:238:301b::1226
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks


4. Content- and Performance-critical Checks

http://[2a01:0238:301b:0000:0000:0000:0000:1226]/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a01:238:301b::1226
410

Fatal: Check of /.well-known/acme-challenge/random-filename has a http status between 400 and 499, but not 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge may not work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 has a minified Html-Content with a quota lower then 110 %.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
AInfo: No img element found, no alt attribute checked
ADuration: 32653 milliseconds, 32.653 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
[2a01:0238:301b:0000:0000:0000:0000:1226]
2a01:238:301b::1226
443
name does not match
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
[2a01:0238:301b:0000:0000:0000:0000:1226]
2a01:238:301b::1226
443
name does not match
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.server-daten.de


2CN=E5, O=Let's Encrypt, C=US


[2a01:0238:301b:0000:0000:0000:0000:1226]
2a01:238:301b::1226
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

[2a01:0238:301b:0000:0000:0000:0000:1226]
2a01:238:301b::1226
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - incomplete

1CN=*.server-daten.de


2CN=E5, O=Let's Encrypt, C=US

 

9. Certificates

1.
1.
CN=*.server-daten.de
25.04.2025
24.07.2025
380 days expired		*.server-daten.de, server-daten.de - 2 entries
1.
1.
CN=*.server-daten.de
25.04.2025

24.07.2025
380 days expired


*.server-daten.de, server-daten.de - 2 entries

KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:06E204FBE885CAFE90F9F3E1FF320AC5F310
Thumbprint:02A2D94B616AEAD23AA41665AFCF0E28C41300AF
SHA256 / Certificate:w46QFCoFHMr8XfT7fz8UAHsZYdHANcFASNJxCO2D280=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):1286982935d3a994eebcd08935c41cff7c397bf62f441b6375091c70a767f73a
SHA256 hex / Subject Public Key Information (SPKI):1286982935d3a994eebcd08935c41cff7c397bf62f441b6375091c70a767f73a (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://e5.o.lencr.org
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=E5, O=Let's Encrypt, C=US
13.03.2024
13.03.2027
expires in 217 days

2.
CN=E5, O=Let's Encrypt, C=US
13.03.2024

13.03.2027
expires in 217 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:00838F6C63CEB1398C6206628315C9FDDE
Thumbprint:5F28D9C589EE4BF31A11B78C72B8D13F079DDC45
SHA256 / Certificate:Xf2zzzGybyPYfAnzoM72QvZAaan7fP4pJwu13A8eFrs=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):3586d4ecf070578cbd27aedce20b964e48bc149faeb9dad72f46b857869172b8
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3222 days

3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3222 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found

 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404

 

12. Html-Parsing via https://validator.w3.org/nu/


No https result http status 200 and Content-Type text/html or text/xml found, no Html-Parsing - Check

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers:

 

 

No NameServer - IP address - Informations found

 

14. CAA - Entries

No CAA entries found

 

15. TXT - Entries

No TXT entries found

 

16. DomainService - Entries

No DomainServiceEntries entries found

 

 

17. Cipher Suites

Summary
DomainIPPortnum CipherstimeStd.ProtocolForward Secrecy
[2a01:0238:301b:0000:0000:0000:0000:1226]
2a01:238:301b::1226
443
4 Ciphers21.01 sec
0 without, 4 FS
100.00 %
Complete

1
4 Ciphers
4.00 Ciphers/Check		21.01 sec21.01 sec/Check
0 without, 4 FS
100.00 %

Details
DomainIPPortCipher (OpenSsl / IANA)
[2a01:0238:301b:0000:0000:0000:0000:1226]
2a01:238:301b::1226
443
ECDHE-ECDSA-AES256-GCM-SHA384
 (Recommended)
TLSv1.2
0xC0,0x2C
 FS
4 Ciphers, 21.01 sec
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
 (Recommended)
TLSv1.2
0xC0,0x2B
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA384
 (Weak)
TLSv1.2
0xC0,0x24
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

ECDH
ECDSA
AES(256)
SHA384




ECDHE-ECDSA-AES128-SHA256
 (Weak)
TLSv1.2
0xC0,0x23
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

ECDH
ECDSA
AES(128)
SHA256

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=f1ca0107-9a08-40c7-9f8a-aae47c4969e0

 

Last Result: https://check-your-website.server-daten.de/?q=%5B2a01%3A238%3A301b%3A%3A1226%5D - 2025-07-02 16:54:52

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=%5B2a01%3A238%3A301b%3A%3A1226%5D" target="_blank">Check this Site: %5B2a01%3A238%3A301b%3A%3A1226%5D</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=[2a01:238:301b::1226]

 

 

Jürgen Auer • Friedenstr. 37 • 10249 Berlin • +49(0)30 420 200 60 • info@sql-und-xml.de • USt-IdNr.: DE221734518

 

Errors, ideas, questions? Use the Contact form • A project using Server-Daten - Web Database solutions