Check DNS, Urls + Redirects, Certificates and Content of your Website

0 in Queue, 0 of max. 8 Checks (13:34:58)
Why should you only use Prefix - Cookies? |
Hall of Fame - A+ and A

 

Shortcuts: 1. IP-Addresses | 2. DNSSEC | 3. Name Servers | 4. SOA-Entries | 5. Screenshots | 6. Url-Checks | 7. Comments | 8. Connections | 9. Certificates | 10. CT-Logs | 11. Html-Content | 12. Html-Parsing | 13. NameServer-IPAddresses | 14. CAA | 15. TXT | 16. DomainServiceEntries | 17. Cipher Suites | 18. Portchecks |

 

L

 

Loop - it's impossible to use this site

 

Checked:
14.08.2026 18:28:46

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
api.wtdawson.photography
A
104.21.70.146
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.
No Hostname found
yes
1
0

A
172.67.136.189
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.
No Hostname found
yes
1
0

AAAA
2606:4700:3033::6815:4692
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.

yes



AAAA
2606:4700:3037::ac43:88bd
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.

yes


www.api.wtdawson.photography

Name Error
yes
1
0
*.wtdawson.photography
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


*.api.wtdawson.photography
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






• Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 57780, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 31.08.2026, 00:00:00 +, Signature-Inception: 10.08.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: photography

photography
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 30361, DigestType 2 and Digest EatwskZU5iJQaIUjCadj1Dr0lYt8ZwQHhCxA9lW+46o=






1 RRSIG RR to validate DS RR found






RRSIG-Owner photography., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 27.08.2026, 14:00:00 +, Signature-Inception: 14.08.2026, 13:00:00 +, KeyTag 57780, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 30361, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 34878, Flags 256






Public Key with Algorithm 8, KeyTag 62604, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner photography., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 30.08.2026, 15:47:18 +, Signature-Inception: 09.08.2026, 14:47:18 +, KeyTag 30361, Signer-Name: photography






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30361 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 30361, DigestType 2 and Digest "EatwskZU5iJQaIUjCadj1Dr0lYt8ZwQHhCxA9lW+46o=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: wtdawson.photography

wtdawson.photography
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "fptbset76tufavmsiu89edp5usvef2e7" between the hashed NSEC3-owner "fphp8i5gdt1q8ag9ld88agvuo6i7lqgf" and the hashed NextOwner "fq1igh4b17llvfs37eikfmfbcmur02rk". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner fphp8i5gdt1q8ag9ld88agvuo6i7lqgf.photography., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 30.08.2026, 15:47:18 +, Signature-Inception: 09.08.2026, 14:47:18 +, KeyTag 34878, Signer-Name: photography






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "brfk3ajl3n2c9lve2ffldtdd2av0e75v" as Owner. That's the Hash of "photography" with the NextHashedOwnerName "bromkt4smcplcie92hklsscjb35ov4ui". So that domain name is the Closest Encloser of "wtdawson.photography". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner brfk3ajl3n2c9lve2ffldtdd2av0e75v.photography., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 04.09.2026, 16:21:18 +, Signature-Inception: 14.08.2026, 15:21:18 +, KeyTag 34878, Signer-Name: photography






0 DNSKEY RR found









Zone: api.wtdawson.photography

api.wtdawson.photography
0 DS RR in the parent zone found






0 DNSKEY RR found









Zone: www.api.wtdawson.photography

www.api.wtdawson.photography
0 DS RR in the parent zone found

 

3. Name Servers

DomainNameserverNS-IP
www.api.wtdawson.photography
•  doug.ns.cloudflare.com

api.wtdawson.photography
•  doug.ns.cloudflare.com / 67m152
108.162.193.159
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
172.64.33.159
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
173.245.59.159
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
2606:4700:58::adf5:3b9f
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.		•

• 
2803:f800:50::6ca2:c19f
San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.		•

• 
2a06:98c1:50::ac40:219f
London/England/United Kingdom (GB) - CloudFLARENET-EU		•
wtdawson.photography
•  doug.ns.cloudflare.com / 67m85
108.162.193.159
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
172.64.33.159
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
173.245.59.159
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
2606:4700:58::adf5:3b9f
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.		•

• 
2803:f800:50::6ca2:c19f
San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.		•

• 
2a06:98c1:50::ac40:219f
London/England/United Kingdom (GB) - CloudFLARENET-EU		•

•  josephine.ns.cloudflare.com / 67m132
108.162.194.64
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
162.159.38.64
Ashburn/Virginia/United States (US) - Cloudflare, Inc.		•

• 
172.64.34.64
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.		•

• 
2606:4700:50::a29f:2640
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.		•

• 
2803:f800:50::6ca2:c240
San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.		•

• 
2a06:98c1:50::ac40:2240
London/England/United Kingdom (GB) - CloudFLARENET-EU		•
photography
•  v0n0.nic.photography / fra1.micro.hosts.meta.redstone.afilias-nst.info-1740000113
•

•  v0n1.nic.photography / app6.lax1.hosts.meta.redstone.afilias-nst.info-1633102198
•

•  v0n2.nic.photography / app17.lax1.hosts.meta.redstone.afilias-nst.info-1633102198
•

•  v0n3.nic.photography / app4.lax1.hosts.meta.redstone.afilias-nst.info-1633102198
•

•  v2n0.nic.photography / FRA4
•

•  v2n1.nic.photography / FRA3
•

 

4. SOA-Entries


Domain:photography
Zone-Name:photography
Primary:v0n0.nic.photography
Mail:hostmaster.donuts.email
Serial:1786724132
Refresh:7200
Retry:900
Expire:1209600
TTL:3600
num Entries:6


Domain:wtdawson.photography
Zone-Name:wtdawson.photography
Primary:doug.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2412210430
Refresh:10000
Retry:2400
Expire:604800
TTL:1800
num Entries:12


Domain:api.wtdawson.photography
Zone-Name:wtdawson.photography
Primary:doug.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2412210430
Refresh:10000
Retry:2400
Expire:604800
TTL:1800
num Entries:6


Domain:www.api.wtdawson.photography
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


5. Screenshots

No Screenshot listed, because no url-check with https + http status 200-299, 400-599 + not-ACME-check found.

 

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://api.wtdawson.photography/
104.21.70.146
301
https://api.wtdawson.photography/
Html is minified: 109.15 %
0.017
A
Date: Fri, 14 Aug 2026 16:29:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://api.wtdawson.photography/
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cl9pzoYbIcfgOO3pU4gUCbkdZMbgfl%2F6yal9LgC%2Bg88rBML6%2F7afmPF9OuYsvEyZKQbfmvI5kcYZC6Gw15m6PAnB2J8KZ91gZj1TOFh1irZYBdEmTF4p%2BA6Ge%2FWM7HM28KK7Z54YUNzUUec%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: a2b1572deac5c4d0-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html; charset=UTF-8
Content-Length: 167

• http://api.wtdawson.photography/
172.67.136.189
301
https://api.wtdawson.photography/
Html is minified: 109.15 %
0.010
A
Date: Fri, 14 Aug 2026 16:29:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://api.wtdawson.photography/
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=eN6geYIi%2FQ2BXlKbO8kcCa5ZSj8XMvC45c5UywVdNVV3QdJ5%2FwT4RXZkriTSTOU3DtSkIx6plVpUgaouRliWGrtheXvFm3fyBz%2BSsi%2BJuyvSW%2FQWD7YqEjhMblZhBllr0pTU%2FoYAmhsDoZc%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: a2b1572e193de526-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html; charset=UTF-8
Content-Length: 167

• http://api.wtdawson.photography/
2606:4700:3033::6815:4692
301
https://api.wtdawson.photography/
Html is minified: 109.15 %
0.010
A
Date: Fri, 14 Aug 2026 16:29:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://api.wtdawson.photography/
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=W6zhKxCiuyRYxXcecj0rXTAwEFCjYEzGMs9bsckgVd97dX2y5g18seAjzjXprxWOdeW%2Ft4AUrbNGDnoXs8pogCUpZgr0NX1wiiNVOIHwObzlukcgQOtVnPgt41otny6j8S0SaItnFH%2FuZe%2B4nWc8USCI9%2F%2BqX68%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: a2b1572e3b3adcd9-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html; charset=UTF-8
Content-Length: 167

• http://api.wtdawson.photography/
2606:4700:3037::ac43:88bd
301
https://api.wtdawson.photography/
Html is minified: 109.15 %
0.017
A
Date: Fri, 14 Aug 2026 16:29:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://api.wtdawson.photography/
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=8W%2BEl0HBNbNl1jrM0vpMFgO7rMldY0U0c%2Fbr%2FB1Go4RZIHuPcmc0eJk8hi6FYcdMfLZl1lTRNKIxHt07Oa28brkQivNkFRni1q5R0JPgfzcVulGzbEe3itwj3QxEqip5Nf2HScKRHOedqOxSoIjAjbwiBdb7ink%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: a2b1572e69f7c8ec-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html; charset=UTF-8
Content-Length: 167

• https://api.wtdawson.photography/
104.21.70.146
301
https://api.wtdawson.photography/
Html is minified: 103.06 %
1.906
L
Date: Fri, 14 Aug 2026 16:29:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://api.wtdawson.photography/
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Cache-Control: max-age=14400
cf-cache-status: MISS
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=dvfxtuMGBoAZhFNU5OpdaDTLxto2wdtxYvEr9FnP%2Bq%2BVZGKaBjNzUBs2%2FOmjjx2RbfmWzhg2ii67MQGq%2BGdfaSmIT9toz8nENPv5B6ub1ONLfGrV7WgxcOpaBO9IhG1W17mmX0uDtWsTnqE%3D"}]}
CF-RAY: a2b1572ea844339b-TXL
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 471

• https://api.wtdawson.photography/
172.67.136.189
301
https://api.wtdawson.photography/
Html is minified: 103.06 %
1.857
L
Date: Fri, 14 Aug 2026 16:29:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://api.wtdawson.photography/
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Age: 2
Cache-Control: max-age=14400
cf-cache-status: HIT
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FH6N5PKA0hpQ%2Fe3OyOTDiXyN5V7HFXRk0O2s2yFQ4CWR2X69yQU5%2BgAJ7OEvYFc2sHEeCpH87Jte79o%2F%2FY%2FRxrmrqmVEDpF2zawsLEWkYKhkFbf2iPYoBFWOCF3yf50O8UUISaJD%2BYVm3D0%3D"}]}
CF-RAY: a2b157412cde34b9-TXL
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 471

• https://api.wtdawson.photography/
2606:4700:3033::6815:4692
301
https://api.wtdawson.photography/
Html is minified: 103.06 %
1.856
L
Date: Fri, 14 Aug 2026 16:29:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://api.wtdawson.photography/
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Age: 6
Cache-Control: max-age=14400
cf-cache-status: HIT
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=yYykVsi%2Bv9r5YDeYVBtq6ZuPqMNiwAB%2B05EkL1GhWxg%2BrF3QuW66%2FIbyKyToX2Jyu60KLa9pFfQKf6ynmTaoXi1n6bv3tTj5MHi9rZN7qSR7TJUUt0G0yQjdsF5pKedvlXR%2FNQTeXAqipUiju87yU4JpsJfrW7s%3D"}]}
CF-RAY: a2b157552a11e509-TXL
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 471

• https://api.wtdawson.photography/
2606:4700:3037::ac43:88bd
301
https://api.wtdawson.photography/
Html is minified: 103.07 %
1.897
L
Date: Fri, 14 Aug 2026 16:29:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://api.wtdawson.photography/
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Age: 9
Cache-Control: max-age=14400
cf-cache-status: HIT
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=U01wEZ393fXmJqpW2FoGy75PTk6hYe7Dp7uGzMF7MryW8S6Ghdg%2FuEU535nEn%2F2x8Wo0lGJlzZXbdffZxhhbXdodsyCDjsk6qi6n8%2B2Mz%2BhyvthfdDZi4TaBjfPRpj%2FIz%2F0hi5C1zW9iZddGXM%2BwrE5%2FsW4HetA%3D"}]}
CF-RAY: a2b157678c2cb44a-TXL
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 470

• http://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
104.21.70.146
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.46 %
Other inline scripts (∑/total): 0/0		0.037
A
Visible Content:
Date: Fri, 14 Aug 2026 16:30:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Cache-Control: max-age=14400
cf-cache-status: MISS
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JCSlrQrvFJaetTp5asVBMuqqmnMwuBrVicz%2BLjQchsWjdF4e77O57GUpcRMWnIYYVxpzGwVvX%2BB8pAHZrG9Ie1V0300jKxE0ZXfUoYTWZ4wra%2BUilP3hb0rEV1UWDN4gtZc%2BKTV0RbS%2F41w%3D"}]}
CF-RAY: a2b15779dab1c4d0-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 162

• http://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
172.67.136.189
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.46 %
Other inline scripts (∑/total): 0/0		0.020
A
Visible Content:
Date: Fri, 14 Aug 2026 16:30:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Age: 0
Cache-Control: max-age=14400
cf-cache-status: HIT
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=M6ttvnqwmIPXj7DWDYz7pfzSQ4JQbeIYOKhECD16Im9%2FLJHn18ur1xMSRLj0VeddeFvwuIt9dVbDpFh3S5%2Fj411A%2FmVrWQ5lDmnL1QRSKK%2FDDRM8LToCKvYlvR2nFYnANiMS1I6eigsVfQY%3D"}]}
CF-RAY: a2b1577a5f48e526-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 162

• http://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2606:4700:3033::6815:4692
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.46 %
Other inline scripts (∑/total): 0/0		0.016
A
Visible Content:
Date: Fri, 14 Aug 2026 16:30:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Age: 0
Cache-Control: max-age=14400
cf-cache-status: HIT
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=k05K96l1z%2Fl1mGXS2D%2B%2BLFhvDjcgQwXasQoP1lfYuk7TgMZJXmaYLib9Tk6y5lZG1%2Fwhz0iY9kw6W45y1A%2BrYReesNROuReKfVUlpx986d1nnjSAEdY04nKc5bAnUqYoKhEZayapqSEnFuOzHiWYfTcJAa9pwJ0%3D"}]}
CF-RAY: a2b1577acf9fdcd9-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 162

• http://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2606:4700:3037::ac43:88bd
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.46 %
Other inline scripts (∑/total): 0/0		0.014
A
Visible Content:
Date: Fri, 14 Aug 2026 16:30:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Age: 0
Cache-Control: max-age=14400
cf-cache-status: HIT
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=jq13Z6J2i7MCF23l4QRP8PBO1YSu%2BNZmPN46OibFv8M%2BKM4SveTClLvicX54kyJUw0HdS6cSjc4IlOOGpTNOArf0EUmLCeS2z01rLGYrhKlI45y%2FbvBKFVZb0wcK2v0PRv0TWxkcgYNGGdQURaqaXtg7f2%2Fgzac%3D"}]}
CF-RAY: a2b1577b1d00c8ec-TXL
Alt-Svc: h2=":443"; ma=60
Content-Type: text/html
Content-Length: 162

• https://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.46 %
Other inline scripts (∑/total): 0/0		1.896
L
Visible Content:
Date: Fri, 14 Aug 2026 16:30:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Age: 0
Cache-Control: max-age=14400
cf-cache-status: HIT
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=isYk1lGu72Jfm%2BBRM6Yyy%2BBVdmd3sDrvxXUok9MCv%2FX5E9mwN31wLErtaFAL7ZS7X3ulB3LHSnwCMFVg2p4T%2BR%2F2lHW5vZMz4IsT3p88UTsrKbopIUMhGyVOj%2BA%2FfpButh%2FbzIyqGNIoX%2Fk%2BjIscURxjo2U5xss%3D"}]}
CF-RAY: a2b1577cdc4bdd58-TXL
Alt-Svc: h3=":443"
Content-Type: text/html
Content-Length: 162

• https://104.21.70.146/
104.21.70.146
-103


0.026
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure'. (FF: SSL_ERROR_NO_CYPHER_OVERLAP)

• https://172.67.136.189/
172.67.136.189
-103


0.027
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure'. (FF: SSL_ERROR_NO_CYPHER_OVERLAP)

• https://[2606:4700:3033:0000:0000:0000:6815:4692]/
2606:4700:3033::6815:4692
-103


0.030
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure'. (FF: SSL_ERROR_NO_CYPHER_OVERLAP)

• https://[2606:4700:3037:0000:0000:0000:ac43:88bd]/
2606:4700:3037::ac43:88bd
-103


0.026
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure'. (FF: SSL_ERROR_NO_CYPHER_OVERLAP)

 

7. Comments


1. General Results, most used to calculate the result

Aname "api.wtdawson.photography" is subdomain, public suffix is ".photography", top-level-domain is ".photography", top-level-domain-type is "generic", tld-manager is "Binky Moon, LLC", num .photography-domains preloaded: 43 (complete: 276475)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: api.wtdawson.photography has 4 different ip addresses (authoritative).
AGood: Ipv4 and Ipv6 addresses per domain name found: api.wtdawson.photography has 2 ipv4, 2 ipv6 addresses
AGood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
Ahttp://api.wtdawson.photography/ 104.21.70.146
301
https://api.wtdawson.photography/
Correct redirect http - https with the same domain name
Ahttp://api.wtdawson.photography/ 172.67.136.189
301
https://api.wtdawson.photography/
Correct redirect http - https with the same domain name
Ahttp://api.wtdawson.photography/ 2606:4700:3033::6815:4692
301
https://api.wtdawson.photography/
Correct redirect http - https with the same domain name
Ahttp://api.wtdawson.photography/ 2606:4700:3037::ac43:88bd
301
https://api.wtdawson.photography/
Correct redirect http - https with the same domain name
Bhttps://api.wtdawson.photography/ 104.21.70.146
301

Missing HSTS-Header
Bhttps://api.wtdawson.photography/ 172.67.136.189
301

Missing HSTS-Header
Bhttps://api.wtdawson.photography/ 2606:4700:3033::6815:4692
301

Missing HSTS-Header
Bhttps://api.wtdawson.photography/ 2606:4700:3037::ac43:88bd
301

Missing HSTS-Header
Bhttps://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
301

Missing HSTS-Header
CError - no version with Http-Status 200
HFatal error: No https - result with http-status 200, no encryption
Lhttps://api.wtdawson.photography/ 104.21.70.146
301
https://api.wtdawson.photography/
Error direct loop
Lhttps://api.wtdawson.photography/ 172.67.136.189
301
https://api.wtdawson.photography/
Error direct loop
Lhttps://api.wtdawson.photography/ 2606:4700:3033::6815:4692
301
https://api.wtdawson.photography/
Error direct loop
Lhttps://api.wtdawson.photography/ 2606:4700:3037::ac43:88bd
301
https://api.wtdawson.photography/
Error direct loop
Lhttps://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
301
https://api.wtdawson.photography/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Error direct loop
Lhttps://api.wtdawson.photography/ 104.21.70.146
301
https://api.wtdawson.photography/
Error three - step - loop
Lhttps://api.wtdawson.photography/ 172.67.136.189
301
https://api.wtdawson.photography/
Error three - step - loop
Lhttps://api.wtdawson.photography/ 2606:4700:3033::6815:4692
301
https://api.wtdawson.photography/
Error three - step - loop
Lhttps://api.wtdawson.photography/ 2606:4700:3037::ac43:88bd
301
https://api.wtdawson.photography/
Error three - step - loop
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain api.wtdawson.photography, 4 ip addresses.
Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain api.wtdawson.photography, 4 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.api.wtdawson.photography

2. Header-Checks

U

No https result with http status 2** or 4** (standard-check) found, no header checked.

3. DNS- and NameServer - Checks

AInfo:: 7 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 7 Queries complete, 7 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Ok (4 - 8):: An average of 3.5 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 2 different Name Servers found: doug.ns.cloudflare.com, josephine.ns.cloudflare.com, 2 Name Servers included in Delegation: doug.ns.cloudflare.com, josephine.ns.cloudflare.com, 2 Name Servers included in 1 Zone definitions: doug.ns.cloudflare.com, josephine.ns.cloudflare.com, 1 Name Servers listed in SOA.Primary: doug.ns.cloudflare.com.
AGood: Only one SOA.Primary Name Server found.: doug.ns.cloudflare.com.
AGood: SOA.Primary Name Server included in the delegation set.: doug.ns.cloudflare.com.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: doug.ns.cloudflare.com, josephine.ns.cloudflare.com
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: com
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: cloudflare.com
AGood: Name servers with different Country locations found: 2 Name Servers, 4 Countries: CA, CR, GB, US
AInfo: Ipv4-Subnet-list: 6 Name Servers, 4 different subnets (first Byte): 108., 162., 172., 173., 4 different subnets (first two Bytes): 108.162., 162.159., 172.64., 173.245., 6 different subnets (first three Bytes): 108.162.193., 108.162.194., 162.159.38., 172.64.33., 172.64.34., 173.245.59.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 6 Name Servers with IPv6, 3 different subnets (first block): 2606:, 2803:, 2a06:, 3 different subnets (first two blocks): 2606:4700:, 2803:f800:, 2a06:98c1:, 4 different subnets (first three blocks): 2606:4700:0050:, 2606:4700:0058:, 2803:f800:0050:, 2a06:98c1:0050:, 4 different subnets (first four blocks): 2606:4700:0050:0000:, 2606:4700:0058:0000:, 2803:f800:0050:0000:, 2a06:98c1:0050:0000:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 6 good Nameserver
AGood: Nameserver supports Echo Capitalization: 6 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 6 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 6 good Nameserver
Nameserver doesn't pass all EDNS-Checks: doug.ns.cloudflare.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: v0n0.nic.photography: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found (fra1.micro.hosts.meta.redstone.afilias-nst.info-1740000113). COOKIE: fatal timeout. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
ADuration: 80213 milliseconds, 80.213 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
api.wtdawson.photography
104.21.70.146
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
api.wtdawson.photography
104.21.70.146
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=wtdawson.photography


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


api.wtdawson.photography
172.67.136.189
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

api.wtdawson.photography
172.67.136.189
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=wtdawson.photography


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


api.wtdawson.photography
2606:4700:3033::6815:4692
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

api.wtdawson.photography
2606:4700:3033::6815:4692
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=wtdawson.photography


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


api.wtdawson.photography
2606:4700:3037::ac43:88bd
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

api.wtdawson.photography
2606:4700:3037::ac43:88bd
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=wtdawson.photography


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


api.wtdawson.photography
api.wtdawson.photography
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

api.wtdawson.photography
api.wtdawson.photography
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=wtdawson.photography


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US

 

9. Certificates

1.
1.
CN=wtdawson.photography
07.07.2026
05.10.2026
expires in 30 days		*.wtdawson.photography, wtdawson.photography - 2 entries
1.
1.
CN=wtdawson.photography
07.07.2026

05.10.2026
expires in 30 days


*.wtdawson.photography, wtdawson.photography - 2 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:0525073C8C541A92DA5AD90E2E411B5412CF
Thumbprint:A3C16B53ED88F5980E933329E9B58D7429F6325D
SHA256 / Certificate:EXBfuKkcm+ElXNfzptHOKzkMMohWKiVmdM99e6SGBpY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):dc2902fac022ce4d8aafd94553e209deaec025c3e05658da5af2c830e940606f
SHA256 hex / Subject Public Key Information (SPKI):dc2902fac022ce4d8aafd94553e209deaec025c3e05658da5af2c830e940606f (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




2.
CN=wtdawson.photography
07.07.2026
05.10.2026
expires in 30 days		*.wtdawson.photography, wtdawson.photography - 2 entries

2.
CN=wtdawson.photography
07.07.2026

05.10.2026
expires in 30 days


*.wtdawson.photography, wtdawson.photography - 2 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:0525073C8C541A92DA5AD90E2E411B5412CF
Thumbprint:A3C16B53ED88F5980E933329E9B58D7429F6325D
SHA256 / Certificate:EXBfuKkcm+ElXNfzptHOKzkMMohWKiVmdM99e6SGBpY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):dc2902fac022ce4d8aafd94553e209deaec025c3e05658da5af2c830e940606f
SHA256 hex / Subject Public Key Information (SPKI):dc2902fac022ce4d8aafd94553e209deaec025c3e05658da5af2c830e940606f (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=wtdawson.photography
07.07.2026
05.10.2026
expires in 30 days		*.wtdawson.photography, wtdawson.photography - 2 entries

3.
CN=wtdawson.photography
07.07.2026

05.10.2026
expires in 30 days


*.wtdawson.photography, wtdawson.photography - 2 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:0525073C8C541A92DA5AD90E2E411B5412CF
Thumbprint:A3C16B53ED88F5980E933329E9B58D7429F6325D
SHA256 / Certificate:EXBfuKkcm+ElXNfzptHOKzkMMohWKiVmdM99e6SGBpY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):dc2902fac022ce4d8aafd94553e209deaec025c3e05658da5af2c830e940606f
SHA256 hex / Subject Public Key Information (SPKI):dc2902fac022ce4d8aafd94553e209deaec025c3e05658da5af2c830e940606f (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




4.
CN=wtdawson.photography
07.07.2026
05.10.2026
expires in 30 days		*.wtdawson.photography, wtdawson.photography - 2 entries

4.
CN=wtdawson.photography
07.07.2026

05.10.2026
expires in 30 days


*.wtdawson.photography, wtdawson.photography - 2 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:0525073C8C541A92DA5AD90E2E411B5412CF
Thumbprint:A3C16B53ED88F5980E933329E9B58D7429F6325D
SHA256 / Certificate:EXBfuKkcm+ElXNfzptHOKzkMMohWKiVmdM99e6SGBpY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):dc2902fac022ce4d8aafd94553e209deaec025c3e05658da5af2c830e940606f
SHA256 hex / Subject Public Key Information (SPKI):dc2902fac022ce4d8aafd94553e209deaec025c3e05658da5af2c830e940606f (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




5.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 729 days

5.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 729 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




6.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 729 days

6.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 729 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




7.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 729 days

7.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 729 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




8.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 729 days

8.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 729 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




9.
CN=Root YE, O=ISRG, C=US
03.09.2025
03.09.2032
expires in 2190 days

9.
CN=Root YE, O=ISRG, C=US
03.09.2025

03.09.2032
expires in 2190 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:6F5E60E69C3A7469906619D56E4F499A
Thumbprint:40050D482E5AC1271EE1FE5D06F542A498145B0C
SHA256 / Certificate:LXtbQp+AwPCgMqAFH2lqD40LmJgOcfbyROrGNnvEyRc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




10.
CN=Root YE, O=ISRG, C=US
03.09.2025
03.09.2032
expires in 2190 days

10.
CN=Root YE, O=ISRG, C=US
03.09.2025

03.09.2032
expires in 2190 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:6F5E60E69C3A7469906619D56E4F499A
Thumbprint:40050D482E5AC1271EE1FE5D06F542A498145B0C
SHA256 / Certificate:LXtbQp+AwPCgMqAFH2lqD40LmJgOcfbyROrGNnvEyRc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




11.
CN=Root YE, O=ISRG, C=US
13.05.2026
03.09.2032
expires in 2190 days

11.
CN=Root YE, O=ISRG, C=US
13.05.2026

03.09.2032
expires in 2190 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:00872165FC34B6E5FBA8ADD5B3705FB53A
Thumbprint:F37620FC4B1CDDD2A3D74B1D5E8DB42E244CA006
SHA256 / Certificate:D8CQHMorrp6f27AtUNAvEJT3s2ZyCGmRueiXYm3EhfA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




12.
CN=Root YE, O=ISRG, C=US
13.05.2026
03.09.2032
expires in 2190 days

12.
CN=Root YE, O=ISRG, C=US
13.05.2026

03.09.2032
expires in 2190 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:00872165FC34B6E5FBA8ADD5B3705FB53A
Thumbprint:F37620FC4B1CDDD2A3D74B1D5E8DB42E244CA006
SHA256 / Certificate:D8CQHMorrp6f27AtUNAvEJT3s2ZyCGmRueiXYm3EhfA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




13.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
03.09.2025
03.09.2032
expires in 2190 days

13.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
03.09.2025

03.09.2032
expires in 2190 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:7F2AB707B5BDD93C9FD48B7C6029DB33
Thumbprint:B8FB05664499509659A0C8F081816C473824AD1D
SHA256 / Certificate:AL6u8oAnfjiZnTxgsnc26PIeeCw9S0RKw01GWnqyh8U=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




14.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020
17.09.2040
expires in 5126 days

14.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020

17.09.2040
expires in 5126 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:41D29DD172EAEEA780C12C6CE92F8752
Thumbprint:BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA256 / Certificate:aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





15.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020
17.09.2040
expires in 5126 days

15.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020

17.09.2040
expires in 5126 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:41D29DD172EAEEA780C12C6CE92F8752
Thumbprint:BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA256 / Certificate:aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





16.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
13.05.2026
03.09.2032
expires in 2190 days

16.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
13.05.2026

03.09.2032
expires in 2190 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:6C8F1DC727C7117F7BAF853AC980F9CD
Thumbprint:3C34E356C7FC17F5ACF04824BC587C6C623951A2
SHA256 / Certificate:7l96vWmBuwJVYyzY9JKDRRtLGIRNEgQLRO4A8HuP4sY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)



 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=YE2, O=Let's Encrypt, C=US
0
2
2
CN=YE1, O=Let's Encrypt, C=US
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
16505404375
leaf cert		CN=YE2, O=Let's Encrypt, C=US
2026-08-14 13:44:45
2026-11-12 13:44:44
*.services.wtdawson.photography, *.wtdawson.photography - 2 entries


15730924718
leaf cert		CN=YE2, O=Let's Encrypt, C=US
2026-07-07 03:50:22
2026-10-05 03:50:21
*.wtdawson.photography, wtdawson.photography - 2 entries


15728359949
leaf cert		CN=YE1, O=Let's Encrypt, C=US
2026-07-06 23:39:34
2026-10-04 23:39:33
*.wtdawson.photography, wtdawson.photography - 2 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404

 

12. Html-Parsing via https://validator.w3.org/nu/


No https result http status 200 and Content-Type text/html or text/xml found, no Html-Parsing - Check

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: doug.ns.cloudflare.com, josephine.ns.cloudflare.com

 

QNr.DomainTypeNS used
1
com
NS
d.root-servers.net (2001:500:2d::d)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
doug.ns.cloudflare.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com

Answer: ns3.cloudflare.com
162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2

Answer: ns4.cloudflare.com
162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837

Answer: ns5.cloudflare.com
162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937

Answer: ns6.cloudflare.com
162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506

Answer: ns7.cloudflare.com
162.159.4.8, 162.159.6.6, 2400:cb00:2049:1::a29f:408, 2400:cb00:2049:1::a29f:606
3
josephine.ns.cloudflare.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com

Answer: ns3.cloudflare.com
162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2

Answer: ns4.cloudflare.com
162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837

Answer: ns5.cloudflare.com
162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937

Answer: ns6.cloudflare.com
162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506

Answer: ns7.cloudflare.com
162.159.4.8, 162.159.6.6, 2400:cb00:2049:1::a29f:408, 2400:cb00:2049:1::a29f:606
4
doug.ns.cloudflare.com: 108.162.193.159, 172.64.33.159, 173.245.59.159
A
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
5
doug.ns.cloudflare.com: 2606:4700:58::adf5:3b9f, 2803:f800:50::6ca2:c19f, 2a06:98c1:50::ac40:219f
AAAA
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
6
josephine.ns.cloudflare.com: 108.162.194.64, 162.159.38.64, 172.64.34.64
A
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
7
josephine.ns.cloudflare.com: 2606:4700:50::a29f:2640, 2803:f800:50::6ca2:c240, 2a06:98c1:50::ac40:2240
AAAA
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
api.wtdawson.photography
0

no CAA entry found
1
0
wtdawson.photography
0

no CAA entry found
1
0
photography
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
wtdawson.photography
google-site-verification=VjTvJf877FoStN1-Tth4oeOqJ6a5yIcbpdQ-NcE4Lss
ok
1
0
api.wtdawson.photography

ok
1
0
_acme-challenge.api.wtdawson.photography

Name Error - The domain name does not exist
1
0
_acme-challenge.api.wtdawson.photography.wtdawson.photography

Name Error - The domain name does not exist
1
0
_acme-challenge.api.wtdawson.photography.api.wtdawson.photography

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

No DomainServiceEntries entries found

 

 

17. Cipher Suites




Skipped, CDN used or too many ip addresses

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=9a21032d-10e3-4681-8f78-af64f48910bf

 

Last Result: https://check-your-website.server-daten.de/?q=api.wtdawson.photography - 2026-08-14 18:28:46

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=api.wtdawson.photography" target="_blank">Check this Site: api.wtdawson.photography</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=api.wtdawson.photography

 

 

Jürgen Auer • Friedenstr. 37 • 10249 Berlin • +49(0)30 420 200 60 • info@sql-und-xml.de • USt-IdNr.: DE221734518

 

Errors, ideas, questions? Use the Contact form • A project using Server-Daten - Web Database solutions