Check DNS, Urls + Redirects, Certificates and Content of your Website



N

No trusted Certificate

Checked:
22.07.2021 06:02:45


Older results

No older results found


1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
bakatminat.ditpsmk.net


yes
4
4
www.bakatminat.ditpsmk.net


yes
4
4
bakatminat.ditpsmk.net
A
103.40.55.186
South Tangerang/Banten/Indonesia (ID) - PT. Sewiwi Indonesia
No Hostname found
no



2. DNSSEC

Zone (*)DNSSEC - Informations

Zone: (root)
(root)
1 DS RR published



DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=



Status: Valid because published



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 26838, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 11.08.2021, 00:00:00 +, Signature-Inception: 21.07.2021, 00:00:00 +, KeyTag 20326, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: net
net
1 DS RR in the parent zone found



DS with Algorithm 8, KeyTag 35886, DigestType 2 and Digest eGKyf19Rbr4ZaARE1M5edimBkxhCxGXwAjZAHYvZc+4=



1 RRSIG RR to validate DS RR found



RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 03.08.2021, 21:00:00 +, Signature-Inception: 21.07.2021, 20:00:00 +, KeyTag 26838, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26838 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 35886, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 65378, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 02.08.2021, 16:28:30 +, Signature-Inception: 18.07.2021, 16:23:30 +, KeyTag 35886, Signer-Name: net



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 35886 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 35886, DigestType 2 and Digest "eGKyf19Rbr4ZaARE1M5edimBkxhCxGXwAjZAHYvZc+4=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: ditpsmk.net
ditpsmk.net
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "snj8n2ei9c620ae6mt9ofvel4v5qekpa" between the hashed NSEC3-owner "snj19a67on41d0jgd69sbiv5b9bh8l7v" and the hashed NextOwner "snjas5o0soome3v2q9efv9kia2mt234h". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner snj19a67on41d0jgd69sbiv5b9bh8l7v.net., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 27.07.2021, 05:42:30 +, Signature-Inception: 20.07.2021, 04:32:30 +, KeyTag 65378, Signer-Name: net



DS-Query in the parent zone sends valid NSEC3 RR with the Hash "a1rt98bs5qgc9nfi51s9hci47uljg6jh" as Owner. That's the Hash of "net" with the NextHashedOwnerName "a1ruuffjkct2q54p78f8ejgj8jbk7i8b". So that domain name is the Closest Encloser of "ditpsmk.net". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner a1rt98bs5qgc9nfi51s9hci47uljg6jh.net., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 27.07.2021, 05:43:21 +, Signature-Inception: 20.07.2021, 04:33:21 +, KeyTag 65378, Signer-Name: net



0 DNSKEY RR found




Zone: bakatminat.ditpsmk.net
bakatminat.ditpsmk.net
0 DS RR in the parent zone found

Zone: www.bakatminat.ditpsmk.net
www.bakatminat.ditpsmk.net
0 DS RR in the parent zone found


3. Name Servers

DomainNameserverNS-IP
ditpsmk.net
T  earth1.galuhweb.net
67.15.253.219
Wilmington/Delaware/United States (US) - SoftLayer


T 
67.15.47.188
Wilmington/Delaware/United States (US) - SoftLayer


T 
67.15.47.189
Wilmington/Delaware/United States (US) - SoftLayer


T  mars1.galuhweb.net
184.173.149.221
Chantilly/Virginia/United States (US) - SoftLayer


T 
184.173.150.57
Chantilly/Virginia/United States (US) - SoftLayer


T 
184.173.150.58
Chantilly/Virginia/United States (US) - SoftLayer


T  mercury1.galuhweb.net
50.23.136.173
Seattle/Washington/United States (US) - SoftLayer


T 
67.15.253.220
Wilmington/Delaware/United States (US) - SoftLayer


T 
67.15.47.189
Wilmington/Delaware/United States (US) - SoftLayer


T  venus1.galuhweb.net
50.23.75.44
San Jose/California/United States (US) - SoftLayer


T 
50.23.75.96
San Jose/California/United States (US) - SoftLayer


T 
50.23.75.97
San Jose/California/United States (US) - SoftLayer

net
  a.gtld-servers.net / nnn1-fra6


  b.gtld-servers.net / nnn1-eltxl2


  c.gtld-servers.net / nnn1-fra6


  d.gtld-servers.net / nnn1-fra6


  e.gtld-servers.net / nnn1-fra6


  f.gtld-servers.net / nnn1-lon6


  g.gtld-servers.net / nnn1-lon6


  h.gtld-servers.net / nnn1-lon6


  i.gtld-servers.net / nnn1-lon6


  j.gtld-servers.net / nnn1-ein3


  k.gtld-servers.net / nnn1-ein4


  l.gtld-servers.net / nnn1-ein5


  m.gtld-servers.net / nnn1-ein3


4. SOA-Entries


Domain:net
Zone-Name:net
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1626926534
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:2


Domain:net
Zone-Name:net
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1626926549
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:11


Domain:ditpsmk.net
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:12


5. Screenshots

Startaddress: https://bakatminat.ditpsmk.net/register/siswa, address used: https://bakatminat.ditpsmk.net/register/siswa, Screenshot created 2021-07-22 06:16:52 +00:0 url is insecure, certificate invalid

Mobil (412px x 732px)

291 milliseconds

Screenshot mobile - https://bakatminat.ditpsmk.net/register/siswa
Mobil + Landscape (732px x 412px)

276 milliseconds

Screenshot mobile landscape - https://bakatminat.ditpsmk.net/register/siswa
Screen (1280px x 1680px)

893 milliseconds

Screenshot Desktop - https://bakatminat.ditpsmk.net/register/siswa

Mobile- and other Chrome-Checks

widthheight
visual Viewport412732
content Size412732

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

Chrome-Connection: secure. secure connection settings. The connection to this site is encrypted and authenticated using TLS 1.3, X25519, and AES_256_GCM.

Chrome-Resources : secure. all served securely. All resources on this page are served securely.

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://bakatminat.ditpsmk.net/
103.40.55.186
307
http://bakatminat.ditpsmk.net/register/siswa
0.500

Date: Thu, 22 Jul 2021 04:16:01 GMT
Server: Apache/2.4.47 (Win64) OpenSSL/1.1.1k PHP/7.3.28
X-Powered-By: PHP/7.3.28
Set-Cookie: ci_session=5ml6edsjqe0p3ksjldt5cj13gckt0tjh; expires=Thu, 22-Jul-2021 06:16:01 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate,no-store, max-age=0, no-cache
Pragma: no-cache
Location: http://bakatminat.ditpsmk.net/register/siswa
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

• http://bakatminat.ditpsmk.net/register/siswa

200

Html is minified: 186.42 %
0.737

Date: Thu, 22 Jul 2021 04:16:14 GMT
Server: Apache/2.4.47 (Win64) OpenSSL/1.1.1k PHP/7.3.28
X-Powered-By: PHP/7.3.28
Set-Cookie: ci_session=dk58fq5emt27k94r0g1m9e56uoscrdg6; expires=Thu, 22-Jul-2021 06:16:14 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax,ci_session=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate,no-store, max-age=0, no-cache
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

• https://bakatminat.ditpsmk.net/
103.40.55.186
302
https://bakatminat.ditpsmk.net/smk/
4.966
N
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Date: Thu, 22 Jul 2021 04:16:02 GMT
Server: Apache/2.4.47 (Win64) OpenSSL/1.1.1k PHP/7.3.28
X-Powered-By: PHP/7.3.28
Location: https://bakatminat.ditpsmk.net/smk/
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

• https://bakatminat.ditpsmk.net/smk/

307
https://bakatminat.ditpsmk.net/register/siswa
4.263
N
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Date: Thu, 22 Jul 2021 04:16:15 GMT
Server: Apache/2.4.47 (Win64) OpenSSL/1.1.1k PHP/7.3.28
X-Powered-By: PHP/7.3.28
Set-Cookie: ci_session=65scbup7cejk2iu2lf72mj7ab5jqvb1a; expires=Thu, 22-Jul-2021 06:16:15 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate,no-store, max-age=0, no-cache
Pragma: no-cache
Location: https://bakatminat.ditpsmk.net/register/siswa
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

• https://bakatminat.ditpsmk.net/register/siswa

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 100.00 %
4.497
N
Not Found
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
small visible content (num chars: 147)
Not Found The requested URL was not found on this server. Apache/2.4.47 (Win64) OpenSSL/1.1.1k PHP/7.3.28 Server at bakatminat.ditpsmk.net Port 443
Date: Thu, 22 Jul 2021 04:16:25 GMT
Server: Apache/2.4.47 (Win64) OpenSSL/1.1.1k PHP/7.3.28
Content-Length: 310
Connection: close
Content-Type: text/html; charset=iso-8859-1

• http://bakatminat.ditpsmk.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
103.40.55.186
404

0.533
A
Not Found
Visible Content:
Date: Thu, 22 Jul 2021 04:16:07 GMT
Server: Apache/2.4.47 (Win64) OpenSSL/1.1.1k PHP/7.3.28
X-Powered-By: PHP/7.3.28
Cache-control: no-store, max-age=0, no-cache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

• https://103.40.55.186/
103.40.55.186
302
https://103.40.55.186/smk/
4.983
N
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Date: Thu, 22 Jul 2021 04:16:08 GMT
Server: Apache/2.4.47 (Win64) OpenSSL/1.1.1k PHP/7.3.28
X-Powered-By: PHP/7.3.28
Location: https://103.40.55.186/smk/
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

• https://103.40.55.186/smk/

307
https://bakatminat.ditpsmk.net/register/siswa
4.263
N
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Date: Thu, 22 Jul 2021 04:16:20 GMT
Server: Apache/2.4.47 (Win64) OpenSSL/1.1.1k PHP/7.3.28
X-Powered-By: PHP/7.3.28
Set-Cookie: ci_session=3ugp6kpb9d2fg5svlgkh0te9imot9i58; expires=Thu, 22-Jul-2021 06:16:20 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate,no-store, max-age=0, no-cache
Pragma: no-cache
Location: https://bakatminat.ditpsmk.net/register/siswa
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

7. Comments


1. General Results, most used to calculate the result

Aname "bakatminat.ditpsmk.net" is subdomain, public suffix is ".net", top-level-domain is ".net", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services", num .net-domains preloaded: 6448 (complete: 151507)
Agood: All ip addresses are public addresses
Ahttps://bakatminat.ditpsmk.net/smk/
307
https://bakatminat.ditpsmk.net/register/siswa
correct redirect https to https
Ahttps://bakatminat.ditpsmk.net/ 103.40.55.186
302
https://bakatminat.ditpsmk.net/smk/
correct redirect https to https
Ahttps://103.40.55.186/smk/
307
https://bakatminat.ditpsmk.net/register/siswa
correct redirect https to https
Ahttps://103.40.55.186/ 103.40.55.186
302
https://103.40.55.186/smk/
correct redirect https to https
Agood - only one version with Http-Status 200
AGood: Every cookie has a SameSite Attribute with a correct value Strict/Lax/None
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
Bhttps://bakatminat.ditpsmk.net/smk/
307

Missing HSTS-Header
Bhttps://bakatminat.ditpsmk.net/ 103.40.55.186
302

Missing HSTS-Header
Bhttps://bakatminat.ditpsmk.net/register/siswa
404

Missing HSTS-Header
http://bakatminat.ditpsmk.net/ 103.40.55.186
307
ci_session=5ml6edsjqe0p3ksjldt5cj13gckt0tjh; expires=Thu, 22-Jul-2021 06:16:01 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://bakatminat.ditpsmk.net/register/siswa
200
ci_session=dk58fq5emt27k94r0g1m9e56uoscrdg6; expires=Thu, 22-Jul-2021 06:16:14 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://bakatminat.ditpsmk.net/register/siswa
200
ci_session=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
Bhttps://bakatminat.ditpsmk.net/smk/
307
ci_session=65scbup7cejk2iu2lf72mj7ab5jqvb1a; expires=Thu, 22-Jul-2021 06:16:15 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax
Cookie sent via https, but not marked as secure
Bhttps://103.40.55.186/smk/
307
ci_session=3ugp6kpb9d2fg5svlgkh0te9imot9i58; expires=Thu, 22-Jul-2021 06:16:20 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax
Cookie sent via https, but not marked as secure
Bhttp://bakatminat.ditpsmk.net/register/siswa
200
ci_session=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Hfatal error: No https - result with http-status 200, no encryption
HFatal error: http result with http-status 200, no encryption. Add a redirect http ⇒ https, so every connection is secure. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop.
Mhttps://bakatminat.ditpsmk.net/register/siswa
404

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://bakatminat.ditpsmk.net/smk/
307
https://bakatminat.ditpsmk.net/register/siswa
Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://bakatminat.ditpsmk.net/ 103.40.55.186
302
https://bakatminat.ditpsmk.net/smk/
Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://bakatminat.ditpsmk.net/register/siswa
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://103.40.55.186/smk/
307
https://bakatminat.ditpsmk.net/register/siswa
Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://103.40.55.186/ 103.40.55.186
302
https://103.40.55.186/smk/
Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
XFatal error: Nameserver doesn't support TCP connection: earth1.galuhweb.net / 67.15.253.219: Timeout
XFatal error: Nameserver doesn't support TCP connection: earth1.galuhweb.net / 67.15.47.188: Timeout
XFatal error: Nameserver doesn't support TCP connection: earth1.galuhweb.net / 67.15.47.189: Timeout
XFatal error: Nameserver doesn't support TCP connection: mars1.galuhweb.net / 184.173.149.221: Timeout
XFatal error: Nameserver doesn't support TCP connection: mars1.galuhweb.net / 184.173.150.57: Timeout
XFatal error: Nameserver doesn't support TCP connection: mars1.galuhweb.net / 184.173.150.58: Timeout
XFatal error: Nameserver doesn't support TCP connection: mercury1.galuhweb.net / 50.23.136.173: Timeout
XFatal error: Nameserver doesn't support TCP connection: mercury1.galuhweb.net / 67.15.253.220: Timeout
XFatal error: Nameserver doesn't support TCP connection: mercury1.galuhweb.net / 67.15.47.189: Timeout
XFatal error: Nameserver doesn't support TCP connection: venus1.galuhweb.net / 50.23.75.44: Timeout
XFatal error: Nameserver doesn't support TCP connection: venus1.galuhweb.net / 50.23.75.96: Timeout
XFatal error: Nameserver doesn't support TCP connection: venus1.galuhweb.net / 50.23.75.97: Timeout

2. DNS- and NameServer - Checks

A
A
AInfo:: 13 different Name Servers found: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net, 13 Name Servers included in Delegation: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net, 13 Name Servers included in 1 Zone definitions: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net, 1 Name Servers listed in SOA.Primary: a.gtld-servers.net.
AGood: Only one SOA.Primary Name Server found.: a.gtld-servers.net.
AGood: SOA.Primary Name Server included in the delegation set.: a.gtld-servers.net.
AGood: All Name Server Domain Names have a Public Suffix.
A
XNameserver Timeout checking Echo Capitalization: earth1.galuhweb.net / 67.15.253.219
XNameserver Timeout checking Echo Capitalization: earth1.galuhweb.net / 67.15.47.188
XNameserver Timeout checking Echo Capitalization: earth1.galuhweb.net / 67.15.47.189
XNameserver Timeout checking Echo Capitalization: mars1.galuhweb.net / 184.173.149.221
XNameserver Timeout checking Echo Capitalization: mars1.galuhweb.net / 184.173.150.57
XNameserver Timeout checking Echo Capitalization: mars1.galuhweb.net / 184.173.150.58
XNameserver Timeout checking Echo Capitalization: mercury1.galuhweb.net / 50.23.136.173
XNameserver Timeout checking Echo Capitalization: mercury1.galuhweb.net / 67.15.253.220
XNameserver Timeout checking Echo Capitalization: mercury1.galuhweb.net / 67.15.47.189
XNameserver Timeout checking Echo Capitalization: venus1.galuhweb.net / 50.23.75.44
XNameserver Timeout checking Echo Capitalization: venus1.galuhweb.net / 50.23.75.96
XNameserver Timeout checking Echo Capitalization: venus1.galuhweb.net / 50.23.75.97
XNameserver Timeout checking EDNS512: earth1.galuhweb.net / 67.15.253.219
XNameserver Timeout checking EDNS512: earth1.galuhweb.net / 67.15.47.188
XNameserver Timeout checking EDNS512: earth1.galuhweb.net / 67.15.47.189
XNameserver Timeout checking EDNS512: mars1.galuhweb.net / 184.173.149.221
XNameserver Timeout checking EDNS512: mars1.galuhweb.net / 184.173.150.57
XNameserver Timeout checking EDNS512: mars1.galuhweb.net / 184.173.150.58
XNameserver Timeout checking EDNS512: mercury1.galuhweb.net / 50.23.136.173
XNameserver Timeout checking EDNS512: mercury1.galuhweb.net / 67.15.253.220
XNameserver Timeout checking EDNS512: mercury1.galuhweb.net / 67.15.47.189
XNameserver Timeout checking EDNS512: venus1.galuhweb.net / 50.23.75.44
XNameserver Timeout checking EDNS512: venus1.galuhweb.net / 50.23.75.96
XNameserver Timeout checking EDNS512: venus1.galuhweb.net / 50.23.75.97
Nameserver doesn't pass all EDNS-Checks: earth1.galuhweb.net / 67.15.47.188: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: earth1.galuhweb.net / 67.15.47.189: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: earth1.galuhweb.net / 67.15.253.219: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: mars1.galuhweb.net / 184.173.149.221: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: mars1.galuhweb.net / 184.173.150.57: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: mars1.galuhweb.net / 184.173.150.58: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: mercury1.galuhweb.net / 50.23.136.173: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: mercury1.galuhweb.net / 67.15.47.189: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: mercury1.galuhweb.net / 67.15.253.220: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: venus1.galuhweb.net / 50.23.75.44: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: venus1.galuhweb.net / 50.23.75.96: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: venus1.galuhweb.net / 50.23.75.97: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

3. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://bakatminat.ditpsmk.net/register/siswa
404
4.497 seconds
Warning: 404 needs more then one second
ADuration: 853593 milliseconds, 853.593 seconds


8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
bakatminat.ditpsmk.net
bakatminat.ditpsmk.net
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
error checking OCSP stapling
ok
bakatminat.ditpsmk.net
bakatminat.ditpsmk.net
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
Tls.1.2
Tls.1.1
Tls.1.0
Self signed certificate
1CN=localhost


bakatminat.ditpsmk.net
103.40.55.186
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
error checking OCSP stapling
ok

bakatminat.ditpsmk.net
103.40.55.186
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
Tls.1.2
Tls.1.1
Tls.1.0
Self signed certificate
1CN=localhost


103.40.55.186
103.40.55.186
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
error checking OCSP stapling
ok

103.40.55.186
103.40.55.186
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
error checking OCSP stapling
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
Self signed certificate
1CN=localhost


103.40.55.186
103.40.55.186
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
error checking OCSP stapling
ok

103.40.55.186
103.40.55.186
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
error checking OCSP stapling
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
Self signed certificate
1CN=localhost


9. Certificates

1.
1.
CN=localhost
11.11.2009
09.11.2019
633 days expired

1.
1.
CN=localhost
11.11.2009

09.11.2019
633 days expired


KeyalgorithmRSA encryption ( bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:00B5C752C98781B503
Thumbprint:B0238C547A905BFA119C4E8BACCAEACF36491FF6
SHA256 / Certificate:AWlzOAwPHfAL2Vk+2NXvo3Bs1t95k/YUEnK4BSKs3SM=
SHA256 hex / Cert (DANE * 0 1):016973380c0f1df00bd9593ed8d5efa3706cd6df7993f6141272b80522acdd23
SHA256 hex / PublicKey (DANE * 1 1):5c1ccae60a0866288a8e4c4b42ee59bd1f0e5c1ae2e67cd562f3069d664d9b5d
SHA256 hex / Subject Public Key Information (SPKI):9ef15a1ce89f8df6b8fed558a36547e5205501e6b21fe5b00790e4716a3bd248
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Fatal: Key is listed. Don't use that key, the private key isn't private.
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:

UntrustedRoot: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.


10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found


2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > 2019 are listed

No CRT - CT-Log entries found


11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404


12. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers:


No NameServer - IP address - Informations found


13. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
ditpsmk.net



4
4
net
0

no CAA entry found
1
0


14. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
ditpsmk.net


4
4
_acme-challenge.bakatminat.ditpsmk.net.ditpsmk.net


4
4


15. Portchecks

No Port checks



Permalink: https://check-your-website.server-daten.de/?i=e1668064-36b6-4417-9678-f119282225eb


Last Result: https://check-your-website.server-daten.de/?q=bakatminat.ditpsmk.net - 2021-07-22 06:02:45


Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=bakatminat.ditpsmk.net" target="_blank">Check this Site: bakatminat.ditpsmk.net</a>