| 1. General Results, most used to calculate the result |
| A | name "185.78.116.136" is ipv4 address, public suffix is not defined
|
| A | Good: All ip addresses are public addresses
|
| A | Good: No cookie sent via http.
|
| A | Good: every cookie sent via https is marked as secure
|
| A | Good: Every cookie has a SameSite Attribute with a correct value Strict/Lax/None
|
| B | Warning: HSTS max-age is too short - minimum 31536000 = 365 days required, 15552000 seconds = 180 days found
|
| B | https://185.78.116.136/ 185.78.116.136
| max-age=15552000; includeSu>
| Critical: HSTS-Header has Parse-Errors. Value of max-age is too small. Should be minimal one year = 31536000., Unknown directive found. Only max-age (with value), includeSubdomains or preload allowed.
|
| B | https://185.78.116.136/index.php/login
| max-age=15552000; includeSu>
| Critical: HSTS-Header has Parse-Errors. Value of max-age is too small. Should be minimal one year = 31536000., Unknown directive found. Only max-age (with value), includeSubdomains or preload allowed.
|
| B | https://185.78.116.136/ 185.78.116.136
| max-age=15552000; includeSu>
| Critical: HSTS-Header has Parse-Errors. Value of max-age is too small. Should be minimal one year = 31536000., Unknown directive found. Only max-age (with value), includeSubdomains or preload allowed.
|
| C | Error - no version with Http-Status 200
|
| E | http://185.78.116.136/ 185.78.116.136
| https://192.168.10.3/
| Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
|
| H | Fatal error: No https - result with http-status 200, no encryption
|
| L | https://185.78.116.136/index.php/login
| https://185.78.116.136/index.php/login
| Error direct loop
|
| N | https://185.78.116.136/ 185.78.116.136
| https://185.78.116.136/index.php/login
| Error - Certificate isn't trusted, RemoteCertificateNameMismatch
|
| N | https://185.78.116.136/index.php/login
| https://185.78.116.136/index.php/login
| Error - Certificate isn't trusted, RemoteCertificateNameMismatch
|
| N | https://185.78.116.136/ 185.78.116.136
| https://185.78.116.136/index.php/login
| Error - Certificate isn't trusted, RemoteCertificateNameMismatch
|
| B | No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.185.78.116.136
|
| 2. Header-Checks |
| U |
|
| No https result with http status 2** or 4** (standard-check) found, no header checked.
|
| 3. DNS- and NameServer - Checks |
| 4. Content- and Performance-critical Checks |
| https://192.168.10.3/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
|
| Fatal: Check of /.well-known/acme-challenge/random-filename has a timeout. Creating a Letsencrypt certificate via http-01 challenge can't work. You need a running webserver (http) and an open port 80. If it's a home server + ipv4, perhaps a correct port forwarding port 80 extern ⇒ working port intern is required. Port 80 / http can redirect to another domain port 80 or port 443, but not other ports. If it's a home server, perhaps your ISP blocks port 80. Then you may use the dns-01 challenge. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
|
| A | Good: All checked attribute values are enclosed in quotation marks (" or ').
|
| A | Info: No img element found, no alt attribute checked
|
| https://185.78.116.136/ 185.78.116.136
| Strict-Transport-Security: max-age=15552000; includeSu>
| Parse Error - Header can't be parsed
|
| https://185.78.116.136/index.php/login
| Strict-Transport-Security: max-age=15552000; includeSu>
| Parse Error - Header can't be parsed
|
| https://185.78.116.136/ 185.78.116.136
| Strict-Transport-Security: max-age=15552000; includeSu>
| Parse Error - Header can't be parsed
|
| A | Duration: 45466 milliseconds, 45.466 seconds
|
%22%20style=%22background-color:rgb(255,255,255)%22%3e%3c/svg%3e)