Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

Redirect to not existing domain

Checked:
02.09.2025 15:29:03

Older results

R - 26.08.2025 10:51:50

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
apb-webserver.ur.de	CNAME	apb-webserver.uni-regensburg.de	yes	1	0
	A	194.94.153.161 Halberstadt/Saxony-Anhalt/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V. No Hostname found	yes
www.apb-webserver.ur.de		Name Error	yes	1	0
*.ur.de	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes
*.apb-webserver.ur.de	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	4 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 46441, Flags 256


	Public Key with Algorithm 8, KeyTag 53148, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2025, 00:00:00 +, Signature-Inception: 30.08.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: de
de	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest 80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 15.09.2025, 05:00:00 +, Signature-Inception: 02.09.2025, 04:00:00 +, KeyTag 46441, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 46441 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 25113, Flags 256


	Public Key with Algorithm 8, KeyTag 26755, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2025, 00:03:48 +, Signature-Inception: 28.08.2025, 22:33:48 +, KeyTag 26755, Signer-Name: de


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26755 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest "80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: ur.de
ur.de	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "8llicbm8ka48lsj7fg7ep5f1bvn9ps3f" between the hashed NSEC3-owner "8llgvmjudean1lkoabglq90jidcbes10" and the hashed NextOwner "8lliruqdcsob257m1e2tleefem8tftqd". So the parent zone confirmes the not-existence of a DS RR. Bitmap: A, RRSIG Validated: RRSIG-Owner 8llgvmjudean1lkoabglq90jidcbes10.de., Algorithm: 8, 2 Labels, original TTL: 7200 sec, Signature-expiration: 13.09.2025, 07:17:34 +, Signature-Inception: 30.08.2025, 05:47:34 +, KeyTag 25113, Signer-Name: de


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "tjlb7qbojvmlf1s6gdriru7vsms1lg16" as Owner. That's the Hash of "de" with the NextHashedOwnerName "tjlcsjat4ljtvo0tjncrrdf6kf6onefb". So that domain name is the Closest Encloser of "ur.de". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner tjlb7qbojvmlf1s6gdriru7vsms1lg16.de., Algorithm: 8, 2 Labels, original TTL: 7200 sec, Signature-expiration: 13.09.2025, 06:17:16 +, Signature-Inception: 30.08.2025, 04:47:16 +, KeyTag 25113, Signer-Name: de


	0 DNSKEY RR found




Zone: apb-webserver.ur.de
apb-webserver.ur.de	0 DS RR in the parent zone found

Zone: www.apb-webserver.ur.de
www.apb-webserver.ur.de	0 DS RR in the parent zone found

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	4 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 46441, Flags 256


	Public Key with Algorithm 8, KeyTag 53148, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2025, 00:00:00 +, Signature-Inception: 30.08.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: de
de	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest 80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 15.09.2025, 05:00:00 +, Signature-Inception: 02.09.2025, 04:00:00 +, KeyTag 46441, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 46441 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 25113, Flags 256


	Public Key with Algorithm 8, KeyTag 26755, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2025, 00:03:48 +, Signature-Inception: 28.08.2025, 22:33:48 +, KeyTag 26755, Signer-Name: de


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26755 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest "80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: uni-regensburg.de
uni-regensburg.de	2 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 32815, DigestType 2 and Digest IQ8Hz8ydi/3DaJ4o7sJ+ukJzQFMw1WMiuPdqqHjYraI=


	DS with Algorithm 8, KeyTag 38089, DigestType 2 and Digest e+rB3k1ManvYeiqVsW75HB0Q/bw1auzzsJHdJUmEX3w=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner uni-regensburg.de., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 13.09.2025, 07:17:34 +, Signature-Inception: 30.08.2025, 05:47:34 +, KeyTag 25113, Signer-Name: de


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25113 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 32815, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 38089, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 42000, Flags 256


	3 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner uni-regensburg.de., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 20.09.2025, 13:40:22 +, Signature-Inception: 21.08.2025, 12:40:22 +, KeyTag 32815, Signer-Name: uni-regensburg.de


	RRSIG-Owner uni-regensburg.de., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 20.09.2025, 13:40:22 +, Signature-Inception: 21.08.2025, 12:40:22 +, KeyTag 38089, Signer-Name: uni-regensburg.de


	RRSIG-Owner uni-regensburg.de., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 20.09.2025, 13:40:22 +, Signature-Inception: 21.08.2025, 12:40:22 +, KeyTag 42000, Signer-Name: uni-regensburg.de


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 32815 used to validate the DNSKEY RRSet


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 38089 used to validate the DNSKEY RRSet


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 42000 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 32815, DigestType 2 and Digest "IQ8Hz8ydi/3DaJ4o7sJ+ukJzQFMw1WMiuPdqqHjYraI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 38089, DigestType 2 and Digest "e+rB3k1ManvYeiqVsW75HB0Q/bw1auzzsJHdJUmEX3w=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: apb-webserver.uni-regensburg.de
apb-webserver.uni-regensburg.de	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "qe8fmp72nu27l0og11g4f34go7r3brlh" between the hashed NSEC3-owner "qe8fmp72nu27l0og11g4f34go7r3brlh" and the hashed NextOwner "qe95t97ep4ttbirjtn87tj90q5tub48k". So the parent zone confirmes the not-existence of a DS RR. Bitmap: A, TXT, RRSIG Validated: RRSIG-Owner qe8fmp72nu27l0og11g4f34go7r3brlh.uni-regensburg.de., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 14.09.2025, 03:07:55 +, Signature-Inception: 15.08.2025, 02:19:22 +, KeyTag 42000, Signer-Name: uni-regensburg.de


	0 DNSKEY RR found





	RRSIG Type 1 validates the A - Result: 194.94.153.161 Validated: RRSIG-Owner apb-webserver.uni-regensburg.de., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 24.09.2025, 23:30:44 +, Signature-Inception: 25.08.2025, 22:58:14 +, KeyTag 42000, Signer-Name: uni-regensburg.de


	RRSIG Type 16 validates the TXT - Result: Subdomain: rz Validated: RRSIG-Owner apb-webserver.uni-regensburg.de., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 24.09.2025, 23:30:44 +, Signature-Inception: 25.08.2025, 22:58:14 +, KeyTag 42000, Signer-Name: uni-regensburg.de


	CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "qe8fmp72nu27l0og11g4f34go7r3brlh" equal the hashed NSEC3-owner "qe8fmp72nu27l0og11g4f34go7r3brlh" and the hashed NextOwner "qe95t97ep4ttbirjtn87tj90q5tub48k". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, TXT, RRSIG Validated: RRSIG-Owner qe8fmp72nu27l0og11g4f34go7r3brlh.uni-regensburg.de., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 14.09.2025, 03:07:55 +, Signature-Inception: 15.08.2025, 02:19:22 +, KeyTag 42000, Signer-Name: uni-regensburg.de


	Status: Good. NoData-Proof required and found.


	AAAA-Query sends a valid NSEC3 RR as result with the hashed query name "qe8fmp72nu27l0og11g4f34go7r3brlh" equal the hashed NSEC3-owner "qe8fmp72nu27l0og11g4f34go7r3brlh" and the hashed NextOwner "qe95t97ep4ttbirjtn87tj90q5tub48k". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, TXT, RRSIG Validated: RRSIG-Owner qe8fmp72nu27l0og11g4f34go7r3brlh.uni-regensburg.de., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 14.09.2025, 03:07:55 +, Signature-Inception: 15.08.2025, 02:19:22 +, KeyTag 42000, Signer-Name: uni-regensburg.de


	Status: Good. NoData-Proof required and found.


	TLSA-Query (_443._tcp.apb-webserver.uni-regensburg.de) sends a valid NSEC3 RR as result with the hashed owner name "qe8fmp72nu27l0og11g4f34go7r3brlh" (unhashed: apb-webserver.uni-regensburg.de). So that's the Closest Encloser of the query name. Bitmap: A, TXT, RRSIG Validated: RRSIG-Owner qe8fmp72nu27l0og11g4f34go7r3brlh.uni-regensburg.de., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 14.09.2025, 03:07:55 +, Signature-Inception: 15.08.2025, 02:19:22 +, KeyTag 42000, Signer-Name: uni-regensburg.de


	Status: Good. NXDomain-Proof required and found.


	TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "qiug5gdb4aih9vpefb3qnvjfbancpr1b" (unhashed: _tcp.apb-webserver.uni-regensburg.de) with the owner "qit1789959ii3ljpt4vqrjjk7a9cll9v" and the NextOwner "qj08mbdc8rskdau6r4ka0768hq3uad34". So that NSEC3 confirms the not-existence of the Next Closer Name. Bitmap: CNAME, RRSIG Validated: RRSIG-Owner qit1789959ii3ljpt4vqrjjk7a9cll9v.uni-regensburg.de., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 22.09.2025, 17:06:16 +, Signature-Inception: 23.08.2025, 16:33:00 +, KeyTag 42000, Signer-Name: uni-regensburg.de


	Status: Good. NXDomain-Proof required and found.


	TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "82ug2l0m75nbvv0j8bji2nrnm99c1tmr" (unhashed: *.apb-webserver.uni-regensburg.de) with the owner "82uahk71bmvap8cmcedrmiuric7625gp" and the NextOwner "82upodpr8mdabgmrm87hm0ntf9rdqacr". So that NSEC3 confirms the not-existence of the Wildcard expansion. Bitmap: A, RRSIG Validated: RRSIG-Owner 82uahk71bmvap8cmcedrmiuric7625gp.uni-regensburg.de., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 16.09.2025, 17:27:15 +, Signature-Inception: 17.08.2025, 16:45:46 +, KeyTag 42000, Signer-Name: uni-regensburg.de


	Status: Good. NXDomain-Proof required and found.


	CAA-Query sends a valid NSEC3 RR as result with the hashed query name "qe8fmp72nu27l0og11g4f34go7r3brlh" equal the hashed NSEC3-owner "qe8fmp72nu27l0og11g4f34go7r3brlh" and the hashed NextOwner "qe95t97ep4ttbirjtn87tj90q5tub48k". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists). Bitmap: A, TXT, RRSIG Validated: RRSIG-Owner qe8fmp72nu27l0og11g4f34go7r3brlh.uni-regensburg.de., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 14.09.2025, 03:07:55 +, Signature-Inception: 15.08.2025, 02:19:22 +, KeyTag 42000, Signer-Name: uni-regensburg.de


	Status: Good. NoData-Proof required and found.

3. Name Servers

Domain	Nameserver	NS-IP
www.apb-webserver.ur.de	• dns1.uni-regensburg.de
ur.de	• dns1.uni-regensburg.de	194.94.152.1 Halberstadt/Saxony-Anhalt/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
	•	2001:638:a05:186:153:1:4:dab0 Bamberg/Bavaria/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
	• dns2.uni-regensburg.de	194.94.152.2 Halberstadt/Saxony-Anhalt/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
	•	2001:638:a05:186:153:1:4:dab3 Bamberg/Bavaria/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
	• dns-3.dfn.de	193.174.75.58 Würzburg/Bavaria/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
	•	2001:638:d:b103::1 Kaiserslautern/Rheinland-Pfalz/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
de	• a.nic.de / ns-2.de.de8.knot		•
	• f.nic.de / ns-1.de.de1.knot		•
	• l.de.net / ns-2.de.fr1.knot		•
	• n.de.net / s3.dex		•
	• s.de.net / ns-2.de.de9.knot		•
	• z.nic.de / ns-2.de.de2.bind		•

apb-webserver.uni-regensburg.de	• dns1.uni-regensburg.de	194.94.152.1 Halberstadt/Saxony-Anhalt/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
	•	2001:638:a05:186:153:1:4:dab0 Bamberg/Bavaria/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
uni-regensburg.de	• dns1.uni-regensburg.de	194.94.152.1 Halberstadt/Saxony-Anhalt/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
	•	2001:638:a05:186:153:1:4:dab0 Bamberg/Bavaria/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
	• dns2.uni-regensburg.de	194.94.152.2 Halberstadt/Saxony-Anhalt/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
	•	2001:638:a05:186:153:1:4:dab3 Bamberg/Bavaria/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
	• dns-3.dfn.de	193.174.75.58 Würzburg/Bavaria/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
	•	2001:638:d:b103::1 Kaiserslautern/Rheinland-Pfalz/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.	•
de	• a.nic.de / ns-2.de.de8.knot		•
	• f.nic.de / ns-1.de.de1.knot		•
	• l.de.net / ns-2.de.fr1.knot		•
	• n.de.net / s3.dex		•
	• s.de.net / ns-2.de.de9.knot		•
	• z.nic.de / ns-1.de.de2.bind		•

4. SOA-Entries

Domain:	de
Zone-Name:	de
Primary:	f.nic.de
Mail:	dns-operations.denic.de
Serial:	1756819603
Refresh:	7200
Retry:	7200
Expire:	3600000
TTL:	7200
num Entries:	6

Domain:	ur.de
Zone-Name:	ur.de
Primary:	dns1.uni-regensburg.de
Mail:	hostmaster.uni-regensburg.de
Serial:	1756764018
Refresh:	14400
Retry:	3600
Expire:	604800
TTL:	3600
num Entries:	6

Domain:	www.apb-webserver.ur.de
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1


Domain:	de
Zone-Name:	de
Primary:	f.nic.de
Mail:	dns-operations.denic.de
Serial:	1756819603
Refresh:	7200
Retry:	7200
Expire:	3600000
TTL:	7200
num Entries:	2

Domain:	de
Zone-Name:	de
Primary:	f.nic.de
Mail:	dns-operations.denic.de
Serial:	1756819705
Refresh:	7200
Retry:	7200
Expire:	3600000
TTL:	7200
num Entries:	4

Domain:	uni-regensburg.de
Zone-Name:	uni-regensburg.de
Primary:	dns1.uni-regensburg.de
Mail:	hostmaster.uni-regensburg.de
Serial:	1756764176
Refresh:	14400
Retry:	3600
Expire:	604800
TTL:	3600
num Entries:	6

Domain:	apb-webserver.uni-regensburg.de
Zone-Name:	uni-regensburg.de
Primary:	dns1.uni-regensburg.de
Mail:	hostmaster.uni-regensburg.de
Serial:	1756764176
Refresh:	14400
Retry:	3600
Expire:	604800
TTL:	3600
num Entries:	2

5. Screenshots

Startaddress: https://apb-webserver.ur.de/, address used: https://apb-webserver.ur.de/, Screenshot created 2025-09-02 15:31:04 +00:0

Mobil (412px x 732px)

1031 milliseconds

Screenshot mobile - https://apb-webserver.ur.de/

Mobil + Landscape (732px x 412px)

1036 milliseconds

Screenshot mobile landscape - https://apb-webserver.ur.de/

Screen (1280px x 1680px)

1109 milliseconds

Screenshot Desktop - https://apb-webserver.ur.de/

Mobile- and other Chrome-Checks

	width	height
visual Viewport	412	732
content Size	412	732

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://apb-webserver.ur.de/ 194.94.153.161	301	https://%25%7bHTTP_HOST%7d Html is minified: 102.90 %	0.043	E
Date: Tue, 02 Sep 2025 13:30:04 GMT
Server: Apache/2.4.62,(Debian)
Location: https://%25%7bHTTP_HOST%7d
Content-Length: 319
Content-Type: text/html; charset=iso-8859-1

• https://apb-webserver.ur.de/ 194.94.153.161 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	403	Html is minified: 103.26 % Other inline scripts (∑/total): 0/0	2.544	M
Forbidden
Date: Tue, 02 Sep 2025 13:30:04 GMT
Server: Apache/2.4.62,(Debian)
Strict-Transport-Security: max-age=63072000
Content-Length: 285
Content-Type: text/html; charset=iso-8859-1

• https://%25%7bHTTP_HOST%7d	-101		0.006	R
Error parsing Url "https://%25%7bHTTP_HOST%7d"

• http://apb-webserver.ur.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 194.94.153.161 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	301	https://%25%7bHTTP_HOST%7d.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Html is minified: 102.37 % Other inline scripts (∑/total): 0/0	0.020	E
Visible Content:
Date: Tue, 02 Sep 2025 13:30:08 GMT
Server: Apache/2.4.62,(Debian)
Location: https://%25%7bHTTP_HOST%7d.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Length: 388
Content-Type: text/html; charset=iso-8859-1

• https://%25%7bHTTP_HOST%7d.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	-101		0.006	R
Error parsing Url "https://%25%7bHTTP_HOST%7d.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de"
Visible Content:

• https://194.94.153.161/ 194.94.153.161 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	403	Html is minified: 103.32 % Other inline scripts (∑/total): 0/0	2.150	N
Forbidden
Certificate error: RemoteCertificateNameMismatch
Date: Tue, 02 Sep 2025 13:30:08 GMT
Server: Apache/2.4.62,(Debian)
Strict-Transport-Security: max-age=63072000
Content-Length: 280
Content-Type: text/html; charset=iso-8859-1

7. Comments

	1. General Results, most used to calculate the result
A	name "apb-webserver.ur.de" is subdomain, public suffix is ".de", top-level-domain is ".de", top-level-domain-type is "country-code", Country is Germany, tld-manager is "DENIC eG", num .de-domains preloaded: 11085 (complete: 276475)
A	Good: All ip addresses are public addresses
	Warning: Only one ip address found: apb-webserver.ur.de has only one ip address.
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: apb-webserver.ur.de has no ipv6 address.
A	Good: No asked Authoritative Name Server had a timeout
A	DNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
A	Good: No cookie sent via http.
	HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
C	Error - no version with Http-Status 200
E	http://apb-webserver.ur.de/ 194.94.153.161	301	https://%25%7bHTTP_HOST%7d	Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
H	Fatal error: No https - result with http-status 200, no encryption
I	http://apb-webserver.ur.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 194.94.153.161	301		Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Not used to calculate the result because it's a http - check. But listed so you should fix it.
M	https://apb-webserver.ur.de/ 194.94.153.161	403		Misconfiguration - main pages should never send http status 400 - 499
M	https://194.94.153.161/ 194.94.153.161	403		Misconfiguration - main pages should never send http status 400 - 499
N	https://194.94.153.161/ 194.94.153.161	403		Error - Certificate isn't trusted, RemoteCertificateNameMismatch
R	http://apb-webserver.ur.de/ 194.94.153.161	301	https://%25%7bHTTP_HOST%7d	Redirect to not existing domain
R	http://apb-webserver.ur.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 194.94.153.161	301	https://%25%7bHTTP_HOST%7d.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	Redirect to not existing domain
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are the same. So that domain doesn't require Server Name Indication (SNI), it's the primary certificate of that set of ip addresses.: Domain apb-webserver.ur.de, 1 ip addresses, 1 different http results.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.apb-webserver.ur.de
	2. Header-Checks
F	apb-webserver.ur.de 194.94.153.161	Content-Security-Policy		Critical: Missing Header:
F	apb-webserver.ur.de 194.94.153.161	X-Content-Type-Options		Critical: Missing Header:
F	apb-webserver.ur.de 194.94.153.161	Referrer-Policy		Critical: Missing Header:
F	apb-webserver.ur.de 194.94.153.161	Permissions-Policy		Critical: Missing Header:
B	apb-webserver.ur.de 194.94.153.161	Cross-Origin-Embedder-Policy		Info: Missing Header
B	apb-webserver.ur.de 194.94.153.161	Cross-Origin-Opener-Policy		Info: Missing Header
B	apb-webserver.ur.de 194.94.153.161	Cross-Origin-Resource-Policy		Info: Missing Header
	3. DNS- and NameServer - Checks
A	Info:: 5 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 3 Name Servers.
A	Info:: 5 Queries complete, 5 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
A	Good: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.dns1.uni-regensburg.de (194.94.152.1, 2001:638:a05:186:153:1:4:dab0), dns2.uni-regensburg.de (194.94.152.2, 2001:638:a05:186:153:1:4:dab3)
A	Good (1 - 3.0):: An average of 1.7 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 3 different Name Servers found: dns1.uni-regensburg.de, dns2.uni-regensburg.de, dns-3.dfn.de, 3 Name Servers included in Delegation: dns-3.dfn.de, dns1.uni-regensburg.de, dns2.uni-regensburg.de, 3 Name Servers included in 1 Zone definitions: dns-3.dfn.de, dns1.uni-regensburg.de, dns2.uni-regensburg.de, 1 Name Servers listed in SOA.Primary: dns1.uni-regensburg.de.
A	Good: Only one SOA.Primary Name Server found.: dns1.uni-regensburg.de.
A	Good: SOA.Primary Name Server included in the delegation set.: dns1.uni-regensburg.de.
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Info: Ipv4-Subnet-list: 3 Name Servers, 2 different subnets (first Byte): 193., 194., 2 different subnets (first two Bytes): 193.174., 194.94., 2 different subnets (first three Bytes): 193.174.75., 194.94.152.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Info: IPv6-Subnet-list: 3 Name Servers with IPv6, 1 different subnets (first block): 2001:, 1 different subnets (first two blocks): 2001:0638:, 2 different subnets (first three blocks): 2001:0638:000d:, 2001:0638:0a05:, 2 different subnets (first four blocks): 2001:0638:000d:b103:, 2001:0638:0a05:0186:
A	Good: Name Server IPv6 addresses from different subnets found.
A	Good: Nameserver supports TCP connections: 6 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 6 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 6 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 6 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: dns1.uni-regensburg.de: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
	Nameserver doesn't pass all EDNS-Checks: dns2.uni-regensburg.de / 194.94.152.2: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
A	Good: All SOA have the same Serial Number
A	Good: CAA entries found, creating certificate is limited: harica.gr is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: telesec.de is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: harica.gr is allowed to create wildcard-certificates
	4. Content- and Performance-critical Checks
	https://%25%7bHTTP_HOST%7d.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	-101		Fatal: Check of /.well-known/acme-challenge/random-filename redirects to not-existing domain. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Info: No img element found, no alt attribute checked
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Duration: 128257 milliseconds, 128.257 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

apb-webserver.ur.de

194.94.153.161

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

apb-webserver.ur.de

194.94.153.161

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

no http/2 via ALPN
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

no http/2 via ALPN
No SNI required - domain included in main certificate

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=apb-webserver.uni-regensburg.de, O=Universitaet Regensburg, C=DE, ST=Bayern
	2	CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR
	3	CN=HARICA TLS ECC Root CA 2021, O=Hellenic Academic and Research Institutions CA, C=GR

194.94.153.161

443

name does not match

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

194.94.153.161

443

name does not match

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

no http/2 via ALPN
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

no http/2 via ALPN
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=apb-webserver.uni-regensburg.de, O=Universitaet Regensburg, C=DE, ST=Bayern
	2	CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR
	3	CN=HARICA TLS ECC Root CA 2021, O=Hellenic Academic and Research Institutions CA, C=GR

9. Certificates

CN=apb-webserver.uni-regensburg.de, O=Universitaet Regensburg, S=Bayern, C=DE

27.08.2025

27.08.2026
expires in 174 days

apb-webserver.uni-regensburg.de, apb-webserver.ur.de, rrzactaprows.uni-regensburg.de, rrzactaprows.ur.de, apb-webserver.uni-r.de, rrzactaprows.uni-r.de - 6 entries

CN=apb-webserver.uni-regensburg.de, O=Universitaet Regensburg, S=Bayern, C=DE

27.08.2025

27.08.2026
expires in 174 days

apb-webserver.uni-regensburg.de, apb-webserver.ur.de, rrzactaprows.uni-regensburg.de, rrzactaprows.ur.de, apb-webserver.uni-r.de, rrzactaprows.uni-r.de - 6 entries

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	38314B81E64CF6F785A1DD1F7BCED63A
Thumbprint:	EAECE7532C1EEB7CE28FFC5EF4F1726509D3D672
SHA256 / Certificate:	gRmBA5rujYg8nVar+xdslnWS8bucGs4k35np7UXj6+Y=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	9ee3b396d552a2c7b8da104e8565fbcc7f8a9c22441cdbf2ced3433c425965ae
SHA256 hex / Subject Public Key Information (SPKI):	9ee3b396d552a2c7b8da104e8565fbcc7f8a9c22441cdbf2ced3433c425965ae (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp-tls.harica.gr
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=apb-webserver.uni-regensburg.de, O=Universitaet Regensburg, S=Bayern, C=DE

27.08.2025

27.08.2026
expires in 174 days

apb-webserver.uni-regensburg.de, apb-webserver.ur.de, rrzactaprows.uni-regensburg.de, rrzactaprows.ur.de, apb-webserver.uni-r.de, rrzactaprows.uni-r.de - 6 entries

CN=apb-webserver.uni-regensburg.de, O=Universitaet Regensburg, S=Bayern, C=DE

27.08.2025

27.08.2026
expires in 174 days

apb-webserver.uni-regensburg.de, apb-webserver.ur.de, rrzactaprows.uni-regensburg.de, rrzactaprows.ur.de, apb-webserver.uni-r.de, rrzactaprows.uni-r.de - 6 entries

Keyalgorithm	EC Public Key (256 bit, prime256v1)
Signatur:	ECDSA SHA384
Serial Number:	38314B81E64CF6F785A1DD1F7BCED63A
Thumbprint:	EAECE7532C1EEB7CE28FFC5EF4F1726509D3D672
SHA256 / Certificate:	gRmBA5rujYg8nVar+xdslnWS8bucGs4k35np7UXj6+Y=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	9ee3b396d552a2c7b8da104e8565fbcc7f8a9c22441cdbf2ced3433c425965ae
SHA256 hex / Subject Public Key Information (SPKI):	9ee3b396d552a2c7b8da104e8565fbcc7f8a9c22441cdbf2ced3433c425965ae (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp-tls.harica.gr
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR

03.01.2025

31.12.2039
expires in 5048 days

CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR

03.01.2025

31.12.2039
expires in 5048 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	42FDDCE1261607E1A5E6935A400161DD
Thumbprint:	CC7333466705F143BE7D76DDB8E774407A3D91C8
SHA256 / Certificate:	bN8LoXEehW0ii6AMoExcHD15lEwDe3E7FVpO5LR+xTw=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	7a314a072773d796753753fe6f9c00d412cadbc3b7bcb9dfedc5105b8aeadfea
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR

03.01.2025

31.12.2039
expires in 5048 days

CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR

03.01.2025

31.12.2039
expires in 5048 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	42FDDCE1261607E1A5E6935A400161DD
Thumbprint:	CC7333466705F143BE7D76DDB8E774407A3D91C8
SHA256 / Certificate:	bN8LoXEehW0ii6AMoExcHD15lEwDe3E7FVpO5LR+xTw=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	7a314a072773d796753753fe6f9c00d412cadbc3b7bcb9dfedc5105b8aeadfea
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=HARICA TLS ECC Root CA 2021, O=Hellenic Academic and Research Institutions CA, C=GR

02.09.2021

31.08.2029
expires in 1274 days

CN=HARICA TLS ECC Root CA 2021, O=Hellenic Academic and Research Institutions CA, C=GR

02.09.2021

31.08.2029
expires in 1274 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	716027C8857A73542DEF516C1C2EEB0F
Thumbprint:	45603600DC2F9E51CDC87E733E70F4CA6F5F31BD
SHA256 / Certificate:	UOJ/kOtq9JWw5u62VcyJREwn08lbaCP6AqvclfFjauE=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	fc784300ec8df4d3d1bad763835182918d52a9ff0238bdf695a1cd9bdb98321c
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=HARICA TLS ECC Root CA 2021, O=Hellenic Academic and Research Institutions CA, C=GR

19.02.2021

13.02.2045
expires in 6919 days

CN=HARICA TLS ECC Root CA 2021, O=Hellenic Academic and Research Institutions CA, C=GR

19.02.2021

13.02.2045
expires in 6919 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA384
Serial Number:	67749D8D77D83B6ADB22F4FF59E2BFCE
Thumbprint:	BCB0C19DE9989270193857E98DA7B45D6EEE0148
SHA256 / Certificate:	P5nMR0rPzk3+1YeUZl5HjRVHc58ueA8btMqbEzCX1AE=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	fc784300ec8df4d3d1bad763835182918d52a9ff0238bdf695a1cd9bdb98321c
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR

07.07.2015

30.06.2040
expires in 5230 days

CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR

07.07.2015

30.06.2040
expires in 5230 days

Keyalgorithm	EC Public Key (384 bit, secp384r1)
Signatur:	ECDSA SHA256
Serial Number:	00
Thumbprint:	9FF1718D92D59AF37D7497B4BC6F84680BBAB666
SHA256 / Certificate:	RLVFqool5lpzyhXcJ/w20kwcuZU6BmU5sRWC3Eh7SDM=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	bb52086d0639e8db332775ac8f4e8435d92ceb00f4e24f28fc0eabe240772e80
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuer				last 7 days	active	num Certs
CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR				0	3	3
CN=GEANT OV RSA CA 4, O=GEANT Vereniging, C=NL				0	0	2
CN=GEANT TLS RSA 1, O=Hellenic Academic and Research Institutions CA, C=GR				0	1	1

CertSpotter-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
11648603652 precert	CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR	2025-08-27 11:02:17	2026-08-27 11:02:17	apb-webserver.uni-r.de, apb-webserver.uni-regensburg.de, apb-webserver.ur.de, rrzactaprows.uni-r.de, rrzactaprows.uni-regensburg.de, rrzactaprows.ur.de - 6 entries
11638400712 precert	CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR	2025-08-26 13:27:54	2026-08-26 13:27:54	apb-webserver.uni-r.de, apb-webserver.uni-regensburg.de, apb-webserver.ur.de - 3 entries
11636882589 precert	CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR	2025-08-26 10:32:53	2026-08-26 10:32:53	apb-webserver.uni-r.de, apb-webserver.uni-regensburg.de, apb-webserver.ur.de - 3 entries
9835308910 precert	CN=GEANT TLS RSA 1, O=Hellenic Academic and Research Institutions CA, C=GR	2025-03-18 16:23:29	2026-03-18 16:23:29	apb-webserver.uni-r.de, apb-webserver.uni-regensburg.de, apb-webserver.ur.de, rrzactaprows.uni-r.de, rrzactaprows.uni-regensburg.de, rrzactaprows.ur.de - 6 entries
8969774546 leaf cert	CN=GEANT OV RSA CA 4, O=GEANT Vereniging, C=NL	2024-12-18 00:00:00	2025-12-18 23:59:59	apb-webserver.uni-r.de, apb-webserver.uni-regensburg.de, apb-webserver.ur.de, rrzactaprows.uni-r.de, rrzactaprows.uni-regensburg.de, rrzactaprows.ur.de - 6 entries
8095792458 leaf cert	CN=GEANT OV RSA CA 4, O=GEANT Vereniging, C=NL	2024-09-03 00:00:00	2025-09-03 23:59:59	apb-webserver.uni-r.de, apb-webserver.uni-regensburg.de, apb-webserver.ur.de, rrzactaprows.uni-r.de, rrzactaprows.uni-regensburg.de, rrzactaprows.ur.de - 6 entries

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuer				last 7 days	active	num Certs
CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR				0	3	3
CN=GEANT OV RSA CA 4, O=GEANT Vereniging, C=NL				0	0	2
CN=GEANT TLS RSA 1, O=Hellenic Academic and Research Institutions CA, C=GR				0	1	1

CRT-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
20606255500 precert	CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR	2025-08-27 09:02:17	2026-08-27 09:02:17	apb-webserver.uni-r.de, apb-webserver.uni-regensburg.de, apb-webserver.ur.de, rrzactaprows.uni-r.de, rrzactaprows.uni-regensburg.de, rrzactaprows.ur.de 6 entries
20588411100 precert	CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR	2025-08-26 11:27:54	2026-08-26 11:27:54	apb-webserver.uni-r.de, apb-webserver.uni-regensburg.de, apb-webserver.ur.de 3 entries
20585718579 precert	CN=GEANT TLS ECC 1, O=Hellenic Academic and Research Institutions CA, C=GR	2025-08-26 08:32:53	2026-08-26 08:32:53	apb-webserver.uni-r.de, apb-webserver.uni-regensburg.de, apb-webserver.ur.de 3 entries
17214581419 precert	CN=GEANT TLS RSA 1, O=Hellenic Academic and Research Institutions CA, C=GR	2025-03-18 15:23:29	2026-03-18 15:23:29	apb-webserver.uni-r.de, apb-webserver.uni-regensburg.de, apb-webserver.ur.de, rrzactaprows.uni-r.de, rrzactaprows.uni-regensburg.de, rrzactaprows.ur.de 6 entries
15810525801 precert	CN=GEANT OV RSA CA 4, O=GEANT Vereniging, C=NL	2024-12-17 23:00:00	2025-12-18 22:59:59	apb-webserver.uni-r.de, apb-webserver.uni-regensburg.de, apb-webserver.ur.de, rrzactaprows.uni-r.de, rrzactaprows.uni-regensburg.de, rrzactaprows.ur.de 6 entries
14410167095 leaf cert	CN=GEANT OV RSA CA 4, O=GEANT Vereniging, C=NL	2024-09-02 22:00:00	2025-09-03 21:59:59	apb-webserver.uni-r.de, apb-webserver.uni-regensburg.de, apb-webserver.ur.de, rrzactaprows.uni-r.de, rrzactaprows.uni-regensburg.de, rrzactaprows.ur.de 6 entries

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
http://apb-webserver.ur.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 194.94.153.161	a		1		1	0	1	0	0	0

Details (currently limited to 500 rows - some problems with spam users)

Domainname	Html-Element	href/src/content	∑	Status
http://apb-webserver.ur.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 194.94.153.161	a	https://%25%7bHTTP_HOST%7d.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	-101	Error parsing Url "https://%25%7bHTTP_HOST%7d.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de"	1	Error parsing Url "https://%25%7bHTTP_HOST%7d.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de"

12. Html-Parsing via https://validator.w3.org/nu/

No https result http status 200 and Content-Type text/html or text/xml found, no Html-Parsing - Check

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: dns1.uni-regensburg.de, dns2.uni-regensburg.de, dns-3.dfn.de

QNr.	Domain	Type	NS used
1	de	NS	b.root-servers.net (2001:500:200::b)
	Answer: a.nic.de, f.nic.de, l.de.net, n.de.net, s.de.net, z.nic.de
2	dns1.uni-regensburg.de: 194.94.152.1, 2001:638:a05:186:153:1:4:dab0	NS	a.nic.de (2001:678:2::53)
	Answer: dns2.uni-regensburg.de 194.94.152.2, 2001:638:a05:186:153:1:4:dab3
3	dns-3.dfn.de	NS	a.nic.de (2001:678:2::53)
	Answer: ns1.dfn.de, ns2.dfn.de, ns3.dfn.de
	Answer: ns1.dfn.de 194.95.236.51, 2001:638:d:c110::51
	Answer: ns2.dfn.de 194.95.236.59, 2001:638:d:c111::59
	Answer: ns3.dfn.de 194.95.236.67
4	dns-3.dfn.de: 193.174.75.58	A	ns1.dfn.de (2001:638:d:c110::51)
5	dns-3.dfn.de: 2001:638:d:b103::1	AAAA	ns1.dfn.de (2001:638:d:c110::51)

14. CAA - Entries

Domainname	flag	Name	Value	∑ Queries
apb-webserver.uni-regensburg.de	0		no CAA entry found	1
apb-webserver.ur.de				1
uni-regensburg.de	5	issue	harica.gr	1
	9	issuewild	harica.gr	1
	5	issue	telesec.de	1
ur.de	5	issue	harica.gr	1
	9	issuewild	harica.gr	1
	5	issue	telesec.de	1
de	0		no CAA entry found	1
	0		no CAA entry found	1

15. TXT - Entries

Domainname	TXT Entry	Status	∑ Queries
ur.de	adobe-idp-site-verification=e57e4339da7d9d63f3f1191241f46e3be0b0028abdc13f8b80753d9cee14e754	ok	1
ur.de	v=spf1 include:_spf.o256.mx.srv.dfn.de ip4:194.94.157.128/28 ip4:194.94.157.144/28 ip4:194.94.155.48/28 ip4:194.94.155.224/28 -all	ok	1
apb-webserver.ur.de	Subdomain: rz	ok	1
_acme-challenge.apb-webserver.ur.de		Name Error - The domain name does not exist	1
_acme-challenge.apb-webserver.ur.de.ur.de		Name Error - The domain name does not exist	1
_acme-challenge.apb-webserver.uni-regensburg.de		Name Error - The domain name does not exist	1
_acme-challenge.apb-webserver.ur.de.apb-webserver.ur.de		Name Error - The domain name does not exist	1
_acme-challenge.apb-webserver.uni-regensburg.de.apb-webserver.uni-regensburg.de		Name Error - The domain name does not exist	1

16. DomainService - Entries

Type		Domain	Pref	Value	DNS-error	num Answers	Status	Description
SPF	TXT	apb-webserver.ur.de					32768	TXT expected, but CNAME found. CNAME not allowed, only TXT queries are allowed. See RFC 7208, 4.4.

17. Cipher Suites

Summary
Domain	IP	Port	num Ciphers	time	Std.Protocol	Forward Secrecy
apb-webserver.ur.de	194.94.153.161	443	3 Ciphers	26.12 sec		0 without, 3 FS	100.00 %
Complete		1	3 Ciphers 3.00 Ciphers/Check	26.12 sec	26.12 sec/Check	0 without, 3 FS	100.00 %

Details
Domain	IP	Port	Cipher (OpenSsl / IANA)
apb-webserver.ur.de	194.94.153.161	443	ECDHE-ECDSA-CHACHA20-POLY1305		(Recommended)	TLSv1.2	0xCC,0xA9	FS
3 Ciphers, 26.12 sec			TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		ECDSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-ECDSA-AES256-GCM-SHA384		(Recommended)	TLSv1.2	0xC0,0x2C	FS
			TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
			ECDH		ECDSA	AESGCM(256)	AEAD
			ECDHE-ECDSA-AES128-GCM-SHA256		(Recommended)	TLSv1.2	0xC0,0x2B	FS
			TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
			ECDH		ECDSA	AESGCM(128)	AEAD

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

Permalink: https://check-your-website.server-daten.de/?i=30ea6c45-9e9b-46eb-b0ee-da044b384f3c

Last Result: https://check-your-website.server-daten.de/?q=apb-webserver.ur.de - 2025-09-02 15:29:03

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=apb-webserver.ur.de" target="_blank">Check this Site: apb-webserver.ur.de</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=apb-webserver.ur.de

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details (currently limited to 500 rows - some problems with spam users)

12. Html-Parsing via https://validator.w3.org/nu/

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks