Check DNS, Urls + Redirects, Certificates and Content of your Website

0 in Queue, 0 of max. 8 Checks (09:42:59)
Why should you only use Prefix - Cookies? |
Hall of Fame - A+ and A

 

Shortcuts: 1. IP-Addresses | 2. DNSSEC | 3. Name Servers | 4. SOA-Entries | 5. Screenshots | 6. Url-Checks | 7. Comments | 8. Connections | 9. Certificates | 10. CT-Logs | 11. Html-Content | 12. Html-Parsing | 13. NameServer-IPAddresses | 14. CAA | 15. TXT | 16. DomainServiceEntries | 17. Cipher Suites | 18. Portchecks |

 

S

 

Server error

 

Checked:
08.04.2026 17:07:23

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
auth.kliving.org
CNAME
auth-kl.azurewebsites.net
yes
1
0

CNAME
waws-prod-dm1-107.sip.azurewebsites.windows.net
yes


www.auth.kliving.org

Name Error
yes
1
0
auth.kliving.org
A
104.43.221.31
Des Moines/Iowa/United States (US) - Microsoft Corporation
No Hostname found
no


*.kliving.org
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


*.auth.kliving.org
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






• Status: Valid because published






4 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 21831, Flags 256






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 54393, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.04.2026, 00:00:00 +, Signature-Inception: 01.04.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: org

org
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=






1 RRSIG RR to validate DS RR found






RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 21.04.2026, 05:00:00 +, Signature-Inception: 08.04.2026, 04:00:00 +, KeyTag 54393, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 54393 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 26974, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 29805, Flags 256






Public Key with Algorithm 8, KeyTag 39684, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 22.04.2026, 15:33:22 +, Signature-Inception: 01.04.2026, 14:33:22 +, KeyTag 26974, Signer-Name: org






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26974 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest "T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: kliving.org

kliving.org
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "ctur9avqhgfdvqj16s55komsd6ac5euq" between the hashed NSEC3-owner "ctuqf9voouhaualh1fqefo55h555luqm" and the hashed NextOwner "ctuvus7c7gakqn7qqcpfnq3o09bfkn00". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner ctuqf9voouhaualh1fqefo55h555luqm.org., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 22.04.2026, 15:33:22 +, Signature-Inception: 01.04.2026, 14:33:22 +, KeyTag 29805, Signer-Name: org






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "gdtpongmpok61u9lvnipqor8lra9l4t0" as Owner. That's the Hash of "org" with the NextHashedOwnerName "gdtrea8kmj2rneqen4m2ogj26kfsukj7". So that domain name is the Closest Encloser of "kliving.org". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner gdtpongmpok61u9lvnipqor8lra9l4t0.org., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 29.04.2026, 15:06:19 +, Signature-Inception: 08.04.2026, 14:06:19 +, KeyTag 29805, Signer-Name: org






0 DNSKEY RR found









Zone: auth.kliving.org

auth.kliving.org
0 DS RR in the parent zone found



Zone: www.auth.kliving.org

www.auth.kliving.org
0 DS RR in the parent zone found



Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






• Status: Valid because published






4 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 21831, Flags 256






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 54393, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.04.2026, 00:00:00 +, Signature-Inception: 01.04.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: net

net
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 37331, DigestType 2 and Digest LwvsLW95370dCP0ho6+S0OOaS57x4/QRH/8oJJDaRTs=






1 RRSIG RR to validate DS RR found






RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 21.04.2026, 05:00:00 +, Signature-Inception: 08.04.2026, 04:00:00 +, KeyTag 54393, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 54393 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 37331, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 44109, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner net., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 22.04.2026, 14:10:35 +, Signature-Inception: 07.04.2026, 14:05:35 +, KeyTag 37331, Signer-Name: net






• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 37331 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 37331, DigestType 2 and Digest "LwvsLW95370dCP0ho6+S0OOaS57x4/QRH/8oJJDaRTs=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: azurewebsites.net

azurewebsites.net
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "d6lofkh528ci82pefugbvfki9hiot2d3" between the hashed NSEC3-owner "d6lknf7a8u9gc393ds2jp2eulnvc8i1i" and the hashed NextOwner "d6lpktlv5kv98u3fu1hav81be87vg424". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner d6lknf7a8u9gc393ds2jp2eulnvc8i1i.net., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 13.04.2026, 03:20:28 +, Signature-Inception: 06.04.2026, 02:10:28 +, KeyTag 44109, Signer-Name: net






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "a1rt98bs5qgc9nfi51s9hci47uljg6jh" as Owner. That's the Hash of "net" with the NextHashedOwnerName "a1rtlnpgulogn7b9a62shje1u3ttp8dr". So that domain name is the Closest Encloser of "azurewebsites.net". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner a1rt98bs5qgc9nfi51s9hci47uljg6jh.net., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 12.04.2026, 03:21:53 +, Signature-Inception: 05.04.2026, 02:11:53 +, KeyTag 44109, Signer-Name: net






0 DNSKEY RR found









Zone: auth-kl.azurewebsites.net

auth-kl.azurewebsites.net
0 DS RR in the parent zone found

 

3. Name Servers

DomainNameserverNS-IP
www.auth.kliving.org
•  ns1-04.azure-dns.com

kliving.org
•  ns1-04.azure-dns.com
13.107.236.4
Toronto/Ontario/Canada (CA) - Microsoft Corporation		•

• 
2603:1061:0:700::4
Los Angeles/California/United States (US) - Microsoft Corporation		•

•  ns2-04.azure-dns.net
150.171.21.4
Toronto/Ontario/Canada (CA) - Microsoft Corporation		•

• 
2620:1ec:8ec:700::4
Redmond/Washington/United States (US) - Microsoft Corporation		•

•  ns3-04.azure-dns.org
204.14.183.4
Québec/Canada (CA) - Microsoft Corporation		•

• 
2a01:111:4000:700::4
London/England/United Kingdom (GB) - MICROSOFT		•

•  ns4-04.azure-dns.info
208.84.5.4
Toronto/Ontario/Canada (CA) - Microsoft Corporation		•

• 
2620:1ec:bda:700::4
Redmond/Washington/United States (US) - Microsoft Corporation		•
org
•  a0.org.afilias-nst.info / fra1.micro.hosts.meta.redstone.afilias-nst.info-1740000113
•

•  a2.org.afilias-nst.info / FRA4
•

•  b0.org.afilias-nst.org / app29.lax1.hosts.meta.redstone.afilias-nst.info-1633102198
•

•  b2.org.afilias-nst.org / FRA3
•

•  c0.org.afilias-nst.info / app21.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861
•

•  d0.org.afilias-nst.org / fra1.micro.hosts.meta.redstone.afilias-nst.info-1740000113
•
azurewebsites.net
•  ns1-224.azure-dns.com
13.107.236.224
Toronto/Ontario/Canada (CA) - Microsoft Corporation		•

• 
2603:1061:0:700::e0
Los Angeles/California/United States (US) - Microsoft Corporation		•

•  ns2-224.azure-dns.net
150.171.21.224
Toronto/Ontario/Canada (CA) - Microsoft Corporation		•

• 
2620:1ec:8ec:700::e0
Redmond/Washington/United States (US) - Microsoft Corporation		•

•  ns3-224.azure-dns.org
204.14.183.224
Québec/Canada (CA) - Microsoft Corporation		•

• 
2a01:111:4000:700::e0
London/England/United Kingdom (GB) - MICROSOFT		•

•  ns4-224.azure-dns.info
208.84.5.224
Toronto/Ontario/Canada (CA) - Microsoft Corporation		•

• 
2620:1ec:bda:700::e0
Redmond/Washington/United States (US) - Microsoft Corporation		•
net
•  a.gtld-servers.net / nnn1-par6
•

•  b.gtld-servers.net / nnn1-elwaw4
•

•  c.gtld-servers.net / nnn1-par6
•

•  d.gtld-servers.net / nnn1-par6
•

•  e.gtld-servers.net / nnn1-defra-5
•

•  f.gtld-servers.net / nnn1-defra-4
•

•  g.gtld-servers.net / nnn1-defra-4
•

•  h.gtld-servers.net / nnn1-defra-4
•

•  i.gtld-servers.net / nnn1-defra-4
•

•  j.gtld-servers.net / nnn1-frmrs-2
•

•  k.gtld-servers.net / nnn1-ein4
•

•  l.gtld-servers.net / nnn1-frmrs-2
•

•  m.gtld-servers.net / nnn1-frmrs-2
•

 

4. SOA-Entries


Domain:org
Zone-Name:org
Primary:a0.org.afilias-nst.info
Mail:hostmaster.donuts.email
Serial:1775660495
Refresh:7200
Retry:900
Expire:1209600
TTL:3600
num Entries:6


Domain:kliving.org
Zone-Name:kliving.org
Primary:ns1-04.azure-dns.com
Mail:azuredns-hostmaster.microsoft.com
Serial:1
Refresh:3600
Retry:300
Expire:2419200
TTL:300
num Entries:8


Domain:www.auth.kliving.org
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:net
Zone-Name:net
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1775660847
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:6


Domain:net
Zone-Name:net
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1775660862
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:7


Domain:azurewebsites.net
Zone-Name:azurewebsites.net
Primary:ns1-224.azure-dns.com
Mail:msnhst.microsoft.com
Serial:2029458736
Refresh:900
Retry:300
Expire:604800
TTL:60
num Entries:8


5. Screenshots

Startaddress: https://auth.kliving.org/, address used: https://auth.kliving.org/, Screenshot created 2026-04-08 17:09:40 +00:0

 

Mobil (412px x 732px)

 

690 milliseconds

 

Screenshot mobile - https://auth.kliving.org/
Mobil + Landscape (732px x 412px)

 

713 milliseconds

 

Screenshot mobile landscape - https://auth.kliving.org/
Screen (1280px x 1680px)

 

759 milliseconds

 

Screenshot Desktop - https://auth.kliving.org/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport412732
content Size412732

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://auth.kliving.org/
104.43.221.31
301
https://auth.kliving.org/

0.287
A
Date: Wed, 08 Apr 2026 15:08:57 GMT
Location: https://auth.kliving.org/
Content-Length: 0

• https://auth.kliving.org/
104.43.221.31
Inline-JavaScript (∑/total): 1/2 Inline-CSS (∑/total): 1/3586		500

Html is minified: 3448.88 %
Other inline scripts (∑/total): 0/0		10.270
S
Internal Server Error
Date: Wed, 08 Apr 2026 15:08:57 GMT
Server: Kestrel
Cache-Control: no-cache
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:7910d58b-60ad-45d8-a957-0e1901785843
Content-Type: text/html; charset=utf-8
Content-Length: 9243

• http://auth.kliving.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
104.43.221.31
301
https://auth.kliving.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.150
A
Visible Content:
Date: Wed, 08 Apr 2026 15:09:09 GMT
Location: https://auth.kliving.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Length: 0

• https://auth.kliving.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 1/2 Inline-CSS (∑/total): 1/3586		500

Html is minified: 3448.88 %
Other inline scripts (∑/total): 0/0		10.193
S
Internal Server Error
Visible Content:
Date: Wed, 08 Apr 2026 15:09:24 GMT
Server: Kestrel
Cache-Control: no-cache
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:7910d58b-60ad-45d8-a957-0e1901785843
Content-Type: text/html; charset=utf-8
Content-Length: 9243

• https://104.43.221.31/
104.43.221.31
Inline-JavaScript (∑/total): 1/243 Inline-CSS (∑/total): 0/0		404

Html is minified: 290.84 %
Other inline scripts (∑/total): 0/0		13.686
N
Site Not Found
Certificate error: RemoteCertificateNameMismatch
Connection: close
Date: Wed, 08 Apr 2026 15:09:09 GMT
Content-Length: 2667
Content-Type: text/html

 

7. Comments


1. General Results, most used to calculate the result

Aname "auth.kliving.org" is subdomain, public suffix is ".org", top-level-domain is ".org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)", num .org-domains preloaded: 10357 (complete: 276475)
AGood: All ip addresses are public addresses
AGood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):2 complete Content-Type - header (3 urls)
https://104.43.221.31/ 104.43.221.31


Url with incomplete Content-Type - header - missing charset
Ahttp://auth.kliving.org/ 104.43.221.31
301
https://auth.kliving.org/
Correct redirect http - https with the same domain name
Bhttps://auth.kliving.org/ 104.43.221.31
500

Missing HSTS-Header
Bhttps://auth.kliving.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
500

Missing HSTS-Header
CError - no version with Http-Status 200
HFatal error: No https - result with http-status 200, no encryption
Mhttps://104.43.221.31/ 104.43.221.31
404

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://104.43.221.31/ 104.43.221.31
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.auth.kliving.org

2. Header-Checks

U

No https result with http status 2** or 4** (standard-check) found, no header checked.

3. DNS- and NameServer - Checks

AInfo:: 8 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 4 Name Servers.
AInfo:: 8 Queries complete, 8 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
AGood: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.ns1-04.azure-dns.com (13.107.236.4, 2603:1061:0:700::4), ns2-04.azure-dns.net (150.171.21.4, 2620:1ec:8ec:700::4), ns3-04.azure-dns.org (204.14.183.4, 2a01:111:4000:700::4), ns4-04.azure-dns.info (208.84.5.4, 2620:1ec:bda:700::4)
AGood (1 - 3.0):: An average of 2.0 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 4 different Name Servers found: ns1-04.azure-dns.com, ns2-04.azure-dns.net, ns3-04.azure-dns.org, ns4-04.azure-dns.info, 4 Name Servers included in Delegation: ns1-04.azure-dns.com, ns2-04.azure-dns.net, ns3-04.azure-dns.org, ns4-04.azure-dns.info, 4 Name Servers included in 1 Zone definitions: ns1-04.azure-dns.com, ns2-04.azure-dns.net, ns3-04.azure-dns.org, ns4-04.azure-dns.info, 1 Name Servers listed in SOA.Primary: ns1-04.azure-dns.com.
AGood: Only one SOA.Primary Name Server found.: ns1-04.azure-dns.com.
AGood: SOA.Primary Name Server included in the delegation set.: ns1-04.azure-dns.com.
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AInfo: Ipv4-Subnet-list: 4 Name Servers, 4 different subnets (first Byte): 13., 150., 204., 208., 4 different subnets (first two Bytes): 13.107., 150.171., 204.14., 208.84., 4 different subnets (first three Bytes): 13.107.236., 150.171.21., 204.14.183., 208.84.5.
AExcellent: Every Name Server IPv4-address starts with an unique Byte.
AInfo: IPv6-Subnet-list: 4 Name Servers with IPv6, 3 different subnets (first block): 2603:, 2620:, 2a01:, 3 different subnets (first two blocks): 2603:1061:, 2620:01ec:, 2a01:0111:, 4 different subnets (first three blocks): 2603:1061:0000:, 2620:01ec:08ec:, 2620:01ec:0bda:, 2a01:0111:4000:, 4 different subnets (first four blocks): 2603:1061:0000:0700:, 2620:01ec:08ec:0700:, 2620:01ec:0bda:0700:, 2a01:0111:4000:0700:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 8 good Nameserver
AGood: Nameserver supports Echo Capitalization: 8 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 8 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 8 good Nameserver
Nameserver doesn't pass all EDNS-Checks: a0.org.afilias-nst.info: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found (fra1.micro.hosts.meta.redstone.afilias-nst.info-1740000113). COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: d0.org.afilias-nst.org: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found (fra1.micro.hosts.meta.redstone.afilias-nst.info-1740000113). COOKIE: fatal timeout. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1-04.azure-dns.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

https://auth.kliving.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
500

Fatal: Check of /.well-known/acme-challenge/random-filename has a http status 500 - 599, Server Error. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://104.43.221.31/ 104.43.221.31
404
13.686 seconds
Warning: 404 needs more then one second
ADuration: 142150 milliseconds, 142.150 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
auth.kliving.org
104.43.221.31
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
auth.kliving.org
104.43.221.31
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
no http/2 via ALPN 
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - incomplete

1CN=auth.kliving.org


2CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


auth.kliving.org
auth.kliving.org
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

auth.kliving.org
auth.kliving.org
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
no http/2 via ALPN 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
 Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - incomplete

1CN=auth.kliving.org


2CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


104.43.221.31
104.43.221.31
443
name does not match
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

104.43.221.31
104.43.221.31
443
name does not match
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
no http/2 via ALPN 
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

 

9. Certificates

1.
1.
CN=auth.kliving.org
08.04.2026
09.10.2026
expires in 177 days		auth.kliving.org - 1 entry
1.
1.
CN=auth.kliving.org
08.04.2026

09.10.2026
expires in 177 days


auth.kliving.org - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0601985D91322525D5C8C5B3A0A2B142
Thumbprint:4DD85A287A08DF5964E8E264EF5485E084DA455F
SHA256 / Certificate:UAlfVK1B0CH7wVV+YMotd0VGGAHU7CSubwFfuGLvCSw=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):1c5c613e5c21ed01e09a790a0649fff27c9c13d93c347b64c074e2e5f3b88814
SHA256 hex / Subject Public Key Information (SPKI):1c5c613e5c21ed01e09a790a0649fff27c9c13d93c347b64c074e2e5f3b88814 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://status.geotrust.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=auth.kliving.org
08.04.2026
09.10.2026
expires in 177 days		auth.kliving.org - 1 entry

2.
CN=auth.kliving.org
08.04.2026

09.10.2026
expires in 177 days


auth.kliving.org - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0601985D91322525D5C8C5B3A0A2B142
Thumbprint:4DD85A287A08DF5964E8E264EF5485E084DA455F
SHA256 / Certificate:UAlfVK1B0CH7wVV+YMotd0VGGAHU7CSubwFfuGLvCSw=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):1c5c613e5c21ed01e09a790a0649fff27c9c13d93c347b64c074e2e5f3b88814
SHA256 hex / Subject Public Key Information (SPKI):1c5c613e5c21ed01e09a790a0649fff27c9c13d93c347b64c074e2e5f3b88814 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://status.geotrust.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
02.11.2017
02.11.2027
expires in 566 days

3.
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
02.11.2017

02.11.2027
expires in 566 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0D07782A133FC6F9A57296E131FFD179
Thumbprint:8B3C5B9B867D4BE46D1CB5A01D45D67DC8E94082
SHA256 / Certificate:wG4wf3z8HTL6cqTAM8h7kAGa8hbwd11kl4ouymyKIw4=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):4831b9a2b12ff225fa30d7a7200c5af2740536944e07febe965b197571d936ab
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




4.
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
02.11.2017
02.11.2027
expires in 566 days

4.
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
02.11.2017

02.11.2027
expires in 566 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0D07782A133FC6F9A57296E131FFD179
Thumbprint:8B3C5B9B867D4BE46D1CB5A01D45D67DC8E94082
SHA256 / Certificate:wG4wf3z8HTL6cqTAM8h7kAGa8hbwd11kl4ouymyKIw4=
SHA256 hex / Cert (DANE * 0 1):c06e307f7cfc1d32fa72a4c033c87b90019af216f0775d64978a2eca6c8a230e
SHA256 hex / PublicKey (DANE * 1 1):4831b9a2b12ff225fa30d7a7200c5af2740536944e07febe965b197571d936ab
SHA256 hex / Subject Public Key Information (SPKI):4831b9a2b12ff225fa30d7a7200c5af2740536944e07febe965b197571d936ab
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Server Authentication (1.3.6.1.5.5.7.3.1), Client Authentication (1.3.6.1.5.5.7.3.2)




5.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
18.01.2024
10.11.2031
expires in 2035 days

5.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
18.01.2024

10.11.2031
expires in 2035 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0FE032AB844D033106C50C8E13C8B068
Thumbprint:8BF7F178A745A11BAC6AE5B586FC1838EADCB2CF
SHA256 / Certificate:edV7Fd+mXChw6v4Rtjd2WQnP6Te0nBXOfxlAMMqzla0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.cn
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




6.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013
15.01.2038
expires in 4293 days

6.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013

15.01.2038
expires in 4293 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:033AF1E6A711A9A0BB2864B11D09FAE5
Thumbprint:DF3C24F9BFD666761B268073FE06D1CC8D4F82A4
SHA256 / Certificate:yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18=
SHA256 hex / Cert (DANE * 0 1):cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA256 hex / PublicKey (DANE * 1 1):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





7.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006
10.11.2031
expires in 2035 days

7.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006

10.11.2031
expires in 2035 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:083BE056904246B1A1756AC95991C74A
Thumbprint:A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
SHA256 / Certificate:Q0ig6URMeMsmXgWNXolEtNhPlmK9Jtslf4k0pEPHAWE=
SHA256 hex / Cert (DANE * 0 1):4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
SHA256 hex / PublicKey (DANE * 1 1):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SHA256 hex / Subject Public Key Information (SPKI):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
CN=*.azurewebsites.net, O=Microsoft Corporation, L=Redmond, S=WA, C=US
07.03.2026
26.08.2026
expires in 133 days		*.azurewebsites.net, *.scm.azurewebsites.net, *.sso.azurewebsites.net, *.centralus-01.azurewebsites.net, *.scm.centralus-01.azurewebsites.net, *.sso.centralus-01.azurewebsites.net, *.centralus.c.azurewebsites.net, *.scm.centralus.c.azurewebsites.net, *.sso.centralus.c.azurewebsites.net, *.azure-mobile.net, *.scm.azure-mobile.net - 11 entries
2.
1.
CN=*.azurewebsites.net, O=Microsoft Corporation, L=Redmond, S=WA, C=US
07.03.2026

26.08.2026
expires in 133 days


*.azurewebsites.net, *.scm.azurewebsites.net, *.sso.azurewebsites.net, *.centralus-01.azurewebsites.net, *.scm.centralus-01.azurewebsites.net, *.sso.centralus-01.azurewebsites.net, *.centralus.c.azurewebsites.net, *.scm.centralus.c.azurewebsites.net, *.sso.centralus.c.azurewebsites.net, *.azure-mobile.net, *.scm.azure-mobile.net - 11 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:3303434A23B7DB574E63B1A5FC000003434A23
Thumbprint:C9ED8C357CB86741C78C9A640580CDA8A7C7E584
SHA256 / Certificate:RXxq/m6Yc3cfPSq8j+ckva2k+dPwb64VypWyfQBr5XA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):6ff056e2f47dd37e3742fa53825d42eaeba94f0e257b40610dbf9120d7cf30c9
SHA256 hex / Subject Public Key Information (SPKI):6ff056e2f47dd37e3742fa53825d42eaeba94f0e257b40610dbf9120d7cf30c9 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://oneocsp.microsoft.com/ocsp
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




2.
CN=Microsoft Azure RSA TLS Issuing CA 07, O=Microsoft Corporation, C=US
08.06.2023
26.08.2026
expires in 133 days

2.
CN=Microsoft Azure RSA TLS Issuing CA 07, O=Microsoft Corporation, C=US
08.06.2023

26.08.2026
expires in 133 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:0A43A9509B01352F899579EC7208BA50
Thumbprint:3382517058A0C20228D598EE7501B61256A76442
SHA256 / Certificate:ckJHeUlRyT8+QXEWF+lc4UMmPjGWw0Wh2nj2Y5dJ7AM=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):31f9a88b6c0a6f1242a48e78241ec1f8f3cd90ef1d44ee750696e9f86bb86858
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013
15.01.2038
expires in 4293 days

3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013

15.01.2038
expires in 4293 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:033AF1E6A711A9A0BB2864B11D09FAE5
Thumbprint:DF3C24F9BFD666761B268073FE06D1CC8D4F82A4
SHA256 / Certificate:yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18=
SHA256 hex / Cert (DANE * 0 1):cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA256 hex / PublicKey (DANE * 1 1):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
0
3
3

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
14426032260
precert		CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-04-08 00:00:00
2026-10-08 23:59:59
auth.kliving.org - 1 entries


14254685830
leaf cert		CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-03-25 00:00:00
2026-09-25 23:59:59
auth.kliving.org - 1 entries


14096640073
leaf cert		CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-03-11 00:00:00
2026-09-11 23:59:59
auth.kliving.org - 1 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://auth.kliving.org/
104.43.221.31		meta
other
1

0


0
0
0

https://104.43.221.31/
104.43.221.31		a

2

0


0
0
0

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsg∑Status
https://auth.kliving.org/
104.43.221.31
meta
charset
 utf-8


1
ok














https://104.43.221.31/
104.43.221.31
a

https://go.microsoft.com/fwlink/?linkid=2194451


1
ok















a

https://go.microsoft.com/fwlink/?linkid=2194614


1
ok














 

12. Html-Parsing via https://validator.w3.org/nu/


No https result http status 200 and Content-Type text/html or text/xml found, no Html-Parsing - Check

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns1-04.azure-dns.com, ns2-04.azure-dns.net, ns3-04.azure-dns.org, ns4-04.azure-dns.info

 

QNr.DomainTypeNS used
1
com
NS
k.root-servers.net (2001:7fd::1)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
ns1-04.azure-dns.com: 13.107.236.4, 2603:1061:0:700::4
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns1-01.azure-dns.com
13.107.236.1, 2603:1061:0:700::1

Answer: ns1-02.azure-dns.com
13.107.236.2, 2603:1061:0:700::2

Answer: ns1-03.azure-dns.com
13.107.236.3, 2603:1061:0:700::3
3
net
NS
k.root-servers.net (2001:7fd::1)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
4
ns2-04.azure-dns.net: 150.171.21.4, 2620:1ec:8ec:700::4
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: ns2-01.azure-dns.net
150.171.21.1, 2620:1ec:8ec:700::1

Answer: ns2-02.azure-dns.net
150.171.21.2, 2620:1ec:8ec:700::2

Answer: ns2-03.azure-dns.net
150.171.21.3, 2620:1ec:8ec:700::3
5
org
NS
k.root-servers.net (2001:7fd::1)

Answer: a0.org.afilias-nst.info, a2.org.afilias-nst.info, b0.org.afilias-nst.org, b2.org.afilias-nst.org, c0.org.afilias-nst.info, d0.org.afilias-nst.org
6
ns3-04.azure-dns.org: 204.14.183.4, 2a01:111:4000:700::4
NS
a0.org.afilias-nst.info (2001:500:e::1)

Answer: ns3-01.azure-dns.org
204.14.183.1, 2a01:111:4000:700::1

Answer: ns3-02.azure-dns.org
204.14.183.2, 2a01:111:4000:700::2

Answer: ns3-03.azure-dns.org
204.14.183.3, 2a01:111:4000:700::3
7
info
NS
a.root-servers.net (2001:503:ba3e::2:30)

Answer: a0.info.afilias-nst.info, a2.info.afilias-nst.info, b0.info.afilias-nst.org, b2.info.afilias-nst.org, c0.info.afilias-nst.info, d0.info.afilias-nst.org
8
ns4-04.azure-dns.info: 208.84.5.4, 2620:1ec:bda:700::4
NS
a0.info.afilias-nst.info (2001:500:19::1)

Answer: ns4-01.azure-dns.info
208.84.5.1, 2620:1ec:bda:700::1

Answer: ns4-02.azure-dns.info
208.84.5.2, 2620:1ec:bda:700::2

Answer: ns4-03.azure-dns.info
208.84.5.3, 2620:1ec:bda:700::3

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
auth-kl.azurewebsites.net



1
0
azurewebsites.net
12
unknown
contactemailcaarecordaware@microsoft.com
1
0
auth.kliving.org



1
0
kliving.org
0

no CAA entry found
1
0
net
0

no CAA entry found
1
0
org
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
kliving.org
apple-domain-verification=gUGO2f6xCrrxZYmJ
ok
1
0
kliving.org
brevo-code:0954276a0574c54fe9ea5c91d97ffc63
ok
1
0
kliving.org
google-site-verification=jLOO8IEkoO1FwX-nrXYu15sdpT_reUxgQUTl6nhpxrs
ok
1
0
kliving.org
knowbe4-site-verification=23a7d111a5832b8f007468c60e22bb0e
ok
1
0
kliving.org
MS=ms98044153
ok
1
0
kliving.org
v=spf1 include:spf.protection.outlook.com include:50831075.spf02.hubspotemail.net -all
ok
1
0
auth.kliving.org


1
0
_acme-challenge.auth.kliving.org

Name Error - The domain name does not exist
1
0
_acme-challenge.auth-kl.azurewebsites.net

Name Error - The domain name does not exist
1
0
_acme-challenge.auth.kliving.org.kliving.org

Name Error - The domain name does not exist
1
0
_acme-challenge.auth.kliving.org.auth.kliving.org

Name Error - The domain name does not exist
1
0
_acme-challenge.auth-kl.azurewebsites.net.auth-kl.azurewebsites.net

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
SPF
TXT
auth.kliving.org

32768TXT expected, but CNAME found. CNAME not allowed, only TXT queries are allowed. See RFC 7208, 4.4.

				 
			

				 
			
17. Cipher Suites
No results 

				 
			
18. Portchecks



No open Ports <> 80 / 443 found, so no additional Ports checked.



				 
			

				 
			

Permalink: https://check-your-website.server-daten.de/?i=e05e743f-b755-4851-b342-1e3b1d8d45e9

				 
			


Last Result: https://check-your-website.server-daten.de/?q=auth.kliving.org - 2026-04-08 17:07:23

				 
			
Do you like this page? Support this tool, add a link on your page:

				 
			
<a href="https://check-your-website.server-daten.de/?q=auth.kliving.org" target="_blank">Check this Site: auth.kliving.org</a>

				 
			

				 
			


Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

				 
			
QR-Code of this page - https://check-your-website.server-daten.de/?d=auth.kliving.org

				 
			

				 
			



Jürgen Auer • Friedenstr. 37 • 10249 Berlin • +49(0)30 420 200 60 • info@sql-und-xml.de • 
USt-IdNr.: DE221734518

				 
			


Errors, ideas, questions? Use the 
Contact form • A project using

Server-Daten - Web Database solutions