Check DNS, Urls + Redirects, Certificates and Content of your Website


 

 

A

 

Top config

 

Checked:
31.08.2022 10:30:53

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
bibliographie.ub.rub.de
CNAME
bibliographie.ub.ruhr-uni-bochum.de
yes
1
0

A
129.217.132.18
Dortmund/North Rhine-Westphalia/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
Hostname: pc018.ub.tu-dortmund.de
yes


www.bibliographie.ub.rub.de
CNAME
www.bibliographie.ub.ruhr-uni-bochum.de
yes
1
0
*.ub.rub.de
A

yes



AAAA

yes



CNAME
*.ub.ruhr-uni-bochum.de
yes


*.bibliographie.ub.rub.de
A

yes



AAAA

yes



CNAME
*.bibliographie.ub.ruhr-uni-bochum.de
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 20826, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2022, 00:00:00 +, Signature-Inception: 30.08.2022, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: de

de
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest 80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=






4 RRSIG RR to validate DS RR found






RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2022, 20:00:00 +, Signature-Inception: 30.08.2022, 19:00:00 +, KeyTag 20826, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20826 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 26755, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 53598, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2022, 16:17:03 +, Signature-Inception: 27.08.2022, 14:47:03 +, KeyTag 26755, Signer-Name: de






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26755 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest "80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: rub.de

rub.de
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 3610, DigestType 2 and Digest jNGIiVkUOxcqyb8c1luSm4KS0lrzmh+6aA6NXpJiAuQ=






1 RRSIG RR to validate DS RR found






RRSIG-Owner rub.de., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 13.09.2022, 05:16:18 +, Signature-Inception: 30.08.2022, 03:46:18 +, KeyTag 53598, Signer-Name: de






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 53598 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 3610, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 59637, Flags 256






Public Key with Algorithm 13, KeyTag 65484, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner rub.de., Algorithm: 13, 2 Labels, original TTL: 21600 sec, Signature-expiration: 29.09.2022, 23:59:59 +, Signature-Inception: 30.08.2022, 23:00:00 +, KeyTag 3610, Signer-Name: rub.de






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 3610 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 3610, DigestType 2 and Digest "jNGIiVkUOxcqyb8c1luSm4KS0lrzmh+6aA6NXpJiAuQ=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: ub.rub.de

ub.rub.de
0 DS RR in the parent zone found



Zone: bibliographie.ub.rub.de

bibliographie.ub.rub.de
0 DS RR in the parent zone found



Zone: www.bibliographie.ub.rub.de

www.bibliographie.ub.rub.de
0 DS RR in the parent zone found



Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 20826, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2022, 00:00:00 +, Signature-Inception: 30.08.2022, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: de

de
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest 80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=






4 RRSIG RR to validate DS RR found






RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2022, 20:00:00 +, Signature-Inception: 30.08.2022, 19:00:00 +, KeyTag 20826, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20826 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 26755, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 53598, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2022, 16:17:03 +, Signature-Inception: 27.08.2022, 14:47:03 +, KeyTag 26755, Signer-Name: de






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26755 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest "80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: ruhr-uni-bochum.de

ruhr-uni-bochum.de
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 40358, DigestType 2 and Digest DFAbL9+qdfUicFoR72LKtByNAVVqvtzpV9NGUu4W44k=






3 RRSIG RR to validate DS RR found






RRSIG-Owner ruhr-uni-bochum.de., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 13.09.2022, 05:16:18 +, Signature-Inception: 30.08.2022, 03:46:18 +, KeyTag 53598, Signer-Name: de






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 53598 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 40358, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 45758, Flags 256






Public Key with Algorithm 13, KeyTag 50902, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner ruhr-uni-bochum.de., Algorithm: 13, 2 Labels, original TTL: 86400 sec, Signature-expiration: 29.09.2022, 23:59:59 +, Signature-Inception: 30.08.2022, 23:00:00 +, KeyTag 40358, Signer-Name: ruhr-uni-bochum.de






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 40358 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 40358, DigestType 2 and Digest "DFAbL9+qdfUicFoR72LKtByNAVVqvtzpV9NGUu4W44k=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: ub.ruhr-uni-bochum.de

ub.ruhr-uni-bochum.de
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "ju95doe8qitqa86r9e2kppkdqv65namg" between the hashed NSEC3-owner "ju95doe8qitqa86r9e2kppkdqv65namg" and the hashed NextOwner "ju97ld8rvlilstjgsa9c3ib512jj9bd9". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: MX, RRSIG Validated: RRSIG-Owner ju95doe8qitqa86r9e2kppkdqv65namg.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 13.09.2022, 14:40:24 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






0 DNSKEY RR found









Zone: bibliographie.ub.ruhr-uni-bochum.de

bibliographie.ub.ruhr-uni-bochum.de
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" between the hashed NSEC3-owner "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" and the hashed NextOwner "ll4hjb4ikteqcto9g01742tjn4stt1ot". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A, RRSIG Validated: RRSIG-Owner ll3pcrojbu1vgnpd3igad6bbsgsjb2i3.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 12.09.2022, 07:51:12 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






0 DNSKEY RR found












RRSIG Type 1 validates the A - Result: 129.217.132.18
Validated: RRSIG-Owner bibliographie.ub.ruhr-uni-bochum.de., Algorithm: 13, 4 Labels, original TTL: 3600 sec, Signature-expiration: 22.09.2022, 21:52:21 +, Signature-Inception: 23.08.2022, 21:28:22 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" equal the hashed NSEC3-owner "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" and the hashed NextOwner "ll4hjb4ikteqcto9g01742tjn4stt1ot". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, RRSIG Validated: RRSIG-Owner ll3pcrojbu1vgnpd3igad6bbsgsjb2i3.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 12.09.2022, 07:51:12 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NoData-Proof required and found.






TXT-Query sends a valid NSEC3 RR as result with the hashed query name "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" equal the hashed NSEC3-owner "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" and the hashed NextOwner "ll4hjb4ikteqcto9g01742tjn4stt1ot". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, RRSIG Validated: RRSIG-Owner ll3pcrojbu1vgnpd3igad6bbsgsjb2i3.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 12.09.2022, 07:51:12 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NoData-Proof required and found.






AAAA-Query sends a valid NSEC3 RR as result with the hashed query name "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" equal the hashed NSEC3-owner "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" and the hashed NextOwner "ll4hjb4ikteqcto9g01742tjn4stt1ot". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, RRSIG Validated: RRSIG-Owner ll3pcrojbu1vgnpd3igad6bbsgsjb2i3.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 12.09.2022, 07:51:12 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NoData-Proof required and found.






TLSA-Query (_443._tcp.bibliographie.ub.ruhr-uni-bochum.de) sends a valid NSEC3 RR as result with the hashed owner name "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" (unhashed: bibliographie.ub.ruhr-uni-bochum.de). So that's the Closest Encloser of the query name.
Bitmap: A, RRSIG Validated: RRSIG-Owner ll3pcrojbu1vgnpd3igad6bbsgsjb2i3.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 12.09.2022, 07:51:12 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NXDomain-Proof required and found.






TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "pvj95efa83q0aqpq42248bfc89gta12v" (unhashed: _tcp.bibliographie.ub.ruhr-uni-bochum.de) with the owner "pvig0t52hgtjg0pq4ho1v6o5lcr403d3" and the NextOwner "pvlnhv8i8ni7h1qoajb025qfbil34mim". So that NSEC3 confirms the not-existence of the Next Closer Name.
Bitmap: A, RRSIG Validated: RRSIG-Owner pvig0t52hgtjg0pq4ho1v6o5lcr403d3.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 12.09.2022, 19:01:26 +, Signature-Inception: 22.08.2022, 14:56:59 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NXDomain-Proof required and found.






TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "djjtlirld83rdqp41lc7mfgl3upfjeqd" (unhashed: *.bibliographie.ub.ruhr-uni-bochum.de) with the owner "dji5c5ev6cpkpbsgf0kbcq2k3l1k6mjt" and the NextOwner "djkck91puj5fjjhcsuq0nhktlvev8fd2". So that NSEC3 confirms the not-existence of the Wildcard expansion.
Bitmap: MX, RRSIG Validated: RRSIG-Owner dji5c5ev6cpkpbsgf0kbcq2k3l1k6mjt.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 13.09.2022, 05:09:03 +, Signature-Inception: 22.08.2022, 14:56:53 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NXDomain-Proof required and found.






CAA-Query sends a valid NSEC3 RR as result with the hashed query name "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" equal the hashed NSEC3-owner "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" and the hashed NextOwner "ll4hjb4ikteqcto9g01742tjn4stt1ot". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, RRSIG Validated: RRSIG-Owner ll3pcrojbu1vgnpd3igad6bbsgsjb2i3.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 12.09.2022, 07:51:12 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NoData-Proof required and found.



Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 20826, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2022, 00:00:00 +, Signature-Inception: 30.08.2022, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: de

de
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest 80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=






4 RRSIG RR to validate DS RR found






RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2022, 20:00:00 +, Signature-Inception: 30.08.2022, 19:00:00 +, KeyTag 20826, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20826 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 26755, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 53598, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2022, 16:17:03 +, Signature-Inception: 27.08.2022, 14:47:03 +, KeyTag 26755, Signer-Name: de






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26755 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest "80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: ruhr-uni-bochum.de

ruhr-uni-bochum.de
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 40358, DigestType 2 and Digest DFAbL9+qdfUicFoR72LKtByNAVVqvtzpV9NGUu4W44k=






3 RRSIG RR to validate DS RR found






RRSIG-Owner ruhr-uni-bochum.de., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 13.09.2022, 05:16:18 +, Signature-Inception: 30.08.2022, 03:46:18 +, KeyTag 53598, Signer-Name: de






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 53598 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 40358, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 45758, Flags 256






Public Key with Algorithm 13, KeyTag 50902, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner ruhr-uni-bochum.de., Algorithm: 13, 2 Labels, original TTL: 86400 sec, Signature-expiration: 29.09.2022, 23:59:59 +, Signature-Inception: 30.08.2022, 23:00:00 +, KeyTag 40358, Signer-Name: ruhr-uni-bochum.de






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 40358 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 40358, DigestType 2 and Digest "DFAbL9+qdfUicFoR72LKtByNAVVqvtzpV9NGUu4W44k=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: ub.ruhr-uni-bochum.de

ub.ruhr-uni-bochum.de
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "ju95doe8qitqa86r9e2kppkdqv65namg" between the hashed NSEC3-owner "ju95doe8qitqa86r9e2kppkdqv65namg" and the hashed NextOwner "ju97ld8rvlilstjgsa9c3ib512jj9bd9". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: MX, RRSIG Validated: RRSIG-Owner ju95doe8qitqa86r9e2kppkdqv65namg.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 13.09.2022, 14:40:24 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






0 DNSKEY RR found












A-Query sends a valid NSEC3 RR as result with the hashed query name "ju95doe8qitqa86r9e2kppkdqv65namg" equal the hashed NSEC3-owner "ju95doe8qitqa86r9e2kppkdqv65namg" and the hashed NextOwner "ju97ld8rvlilstjgsa9c3ib512jj9bd9". So the zone confirmes the not-existence of that A RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: MX, RRSIG Validated: RRSIG-Owner ju95doe8qitqa86r9e2kppkdqv65namg.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 13.09.2022, 14:40:24 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NoData-Proof required and found.






CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "ju95doe8qitqa86r9e2kppkdqv65namg" equal the hashed NSEC3-owner "ju95doe8qitqa86r9e2kppkdqv65namg" and the hashed NextOwner "ju97ld8rvlilstjgsa9c3ib512jj9bd9". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: MX, RRSIG Validated: RRSIG-Owner ju95doe8qitqa86r9e2kppkdqv65namg.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 13.09.2022, 14:40:24 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NoData-Proof required and found.






TXT-Query sends a valid NSEC3 RR as result with the hashed query name "ju95doe8qitqa86r9e2kppkdqv65namg" equal the hashed NSEC3-owner "ju95doe8qitqa86r9e2kppkdqv65namg" and the hashed NextOwner "ju97ld8rvlilstjgsa9c3ib512jj9bd9". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: MX, RRSIG Validated: RRSIG-Owner ju95doe8qitqa86r9e2kppkdqv65namg.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 13.09.2022, 14:40:24 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NoData-Proof required and found.






AAAA-Query sends a valid NSEC3 RR as result with the hashed query name "ju95doe8qitqa86r9e2kppkdqv65namg" equal the hashed NSEC3-owner "ju95doe8qitqa86r9e2kppkdqv65namg" and the hashed NextOwner "ju97ld8rvlilstjgsa9c3ib512jj9bd9". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: MX, RRSIG Validated: RRSIG-Owner ju95doe8qitqa86r9e2kppkdqv65namg.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 13.09.2022, 14:40:24 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NoData-Proof required and found.






TLSA-Query (_443._tcp.ub.ruhr-uni-bochum.de) sends a valid NSEC3 RR as result with the hashed owner name "ju95doe8qitqa86r9e2kppkdqv65namg" (unhashed: ub.ruhr-uni-bochum.de). So that's the Closest Encloser of the query name.
Bitmap: MX, RRSIG Validated: RRSIG-Owner ju95doe8qitqa86r9e2kppkdqv65namg.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 13.09.2022, 14:40:24 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NXDomain-Proof required and found.






TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "s389e258ak8r0ngib74t5pmj76dtm4n1" (unhashed: _tcp.ub.ruhr-uni-bochum.de) with the owner "s36lt9hbi6n6m4lk9eirna8ntb0a3j37" and the NextOwner "s3dlnkp8ap45alm128siqnssu9g6ujco". So that NSEC3 confirms the not-existence of the Next Closer Name.
Bitmap: A, RRSIG Validated: RRSIG-Owner s36lt9hbi6n6m4lk9eirna8ntb0a3j37.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 29.09.2022, 02:03:51 +, Signature-Inception: 30.08.2022, 02:02:08 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NXDomain-Proof required and found.






TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "eupcgp1dlarul28j38hvn6pbdlmu51ec" (unhashed: *.ub.ruhr-uni-bochum.de) with the owner "eundv1ahp7r1gicpp61rt92c8vtakfng" and the NextOwner "eupoi63r7fme40t2b8v8qjq6kq1mu7im". So that NSEC3 confirms the not-existence of the Wildcard expansion.
Bitmap: A, RRSIG Validated: RRSIG-Owner eundv1ahp7r1gicpp61rt92c8vtakfng.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 23.09.2022, 20:59:01 +, Signature-Inception: 24.08.2022, 20:30:10 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NXDomain-Proof required and found.






CAA-Query sends a valid NSEC3 RR as result with the hashed query name "ju95doe8qitqa86r9e2kppkdqv65namg" equal the hashed NSEC3-owner "ju95doe8qitqa86r9e2kppkdqv65namg" and the hashed NextOwner "ju97ld8rvlilstjgsa9c3ib512jj9bd9". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: MX, RRSIG Validated: RRSIG-Owner ju95doe8qitqa86r9e2kppkdqv65namg.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 13.09.2022, 14:40:24 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






Status: Good. NoData-Proof required and found.



Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 20826, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2022, 00:00:00 +, Signature-Inception: 30.08.2022, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: de

de
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest 80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=






4 RRSIG RR to validate DS RR found






RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2022, 20:00:00 +, Signature-Inception: 30.08.2022, 19:00:00 +, KeyTag 20826, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20826 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 26755, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 53598, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2022, 16:17:03 +, Signature-Inception: 27.08.2022, 14:47:03 +, KeyTag 26755, Signer-Name: de






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26755 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26755, DigestType 2 and Digest "80E1eAmllUMRzLgq3hFMbB1ySnXAOVE3qjl4A1Ql540=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: ruhr-uni-bochum.de

ruhr-uni-bochum.de
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 40358, DigestType 2 and Digest DFAbL9+qdfUicFoR72LKtByNAVVqvtzpV9NGUu4W44k=






3 RRSIG RR to validate DS RR found






RRSIG-Owner ruhr-uni-bochum.de., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 13.09.2022, 05:16:18 +, Signature-Inception: 30.08.2022, 03:46:18 +, KeyTag 53598, Signer-Name: de






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 53598 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 40358, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 45758, Flags 256






Public Key with Algorithm 13, KeyTag 50902, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner ruhr-uni-bochum.de., Algorithm: 13, 2 Labels, original TTL: 86400 sec, Signature-expiration: 29.09.2022, 23:59:59 +, Signature-Inception: 30.08.2022, 23:00:00 +, KeyTag 40358, Signer-Name: ruhr-uni-bochum.de






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 40358 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 40358, DigestType 2 and Digest "DFAbL9+qdfUicFoR72LKtByNAVVqvtzpV9NGUu4W44k=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: ub.ruhr-uni-bochum.de

ub.ruhr-uni-bochum.de
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "ju95doe8qitqa86r9e2kppkdqv65namg" between the hashed NSEC3-owner "ju95doe8qitqa86r9e2kppkdqv65namg" and the hashed NextOwner "ju97ld8rvlilstjgsa9c3ib512jj9bd9". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: MX, RRSIG Validated: RRSIG-Owner ju95doe8qitqa86r9e2kppkdqv65namg.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 13.09.2022, 14:40:24 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






0 DNSKEY RR found









Zone: bibliographie.ub.ruhr-uni-bochum.de

bibliographie.ub.ruhr-uni-bochum.de
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" between the hashed NSEC3-owner "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" and the hashed NextOwner "ll4hjb4ikteqcto9g01742tjn4stt1ot". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A, RRSIG Validated: RRSIG-Owner ll3pcrojbu1vgnpd3igad6bbsgsjb2i3.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 12.09.2022, 07:51:12 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






0 DNSKEY RR found









Zone: www.bibliographie.ub.ruhr-uni-bochum.de

www.bibliographie.ub.ruhr-uni-bochum.de
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "3ehr67l8t3l3bv272u0avoag13vgqibu" between the hashed NSEC3-owner "3ehhnuqm1rldlhl5mjfsbieccle4h5dg" and the hashed NextOwner "3eiaojr04dpsopcn26a9fmm4v1tbeeov". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: MX, RRSIG Validated: RRSIG-Owner 3ehhnuqm1rldlhl5mjfsbieccle4h5dg.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 30.09.2022, 02:31:06 +, Signature-Inception: 31.08.2022, 01:42:56 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ll3pcrojbu1vgnpd3igad6bbsgsjb2i3" as Owner. That's the Hash of "bibliographie.ub.ruhr-uni-bochum.de" with the NextHashedOwnerName "ll4hjb4ikteqcto9g01742tjn4stt1ot". So that domain name is the Closest Encloser of "www.bibliographie.ub.ruhr-uni-bochum.de". Opt-Out: False.
Bitmap: A, RRSIG Validated: RRSIG-Owner ll3pcrojbu1vgnpd3igad6bbsgsjb2i3.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 12.09.2022, 07:51:12 +, Signature-Inception: 22.08.2022, 14:57:04 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de






The ClosestEncloser says, that "*.bibliographie.ub.ruhr-uni-bochum.de" with the Hash "djjtlirld83rdqp41lc7mfgl3upfjeqd" is a possible Wildcard of the DS Query Name. But the DS-Query in the parent zone sends a valid NSEC3 RR With the owner "dji5c5ev6cpkpbsgf0kbcq2k3l1k6mjt" and the Next Owner "djkck91puj5fjjhcsuq0nhktlvev8fd2", so the Hash of the wildcard is between these hashes. So that NSEC3 proves the Not-existence of that wildcard expansion. Opt-Out: False.
Bitmap: MX, RRSIG Validated: RRSIG-Owner dji5c5ev6cpkpbsgf0kbcq2k3l1k6mjt.ruhr-uni-bochum.de., Algorithm: 13, 3 Labels, original TTL: 900 sec, Signature-expiration: 13.09.2022, 05:09:03 +, Signature-Inception: 22.08.2022, 14:56:53 +, KeyTag 45758, Signer-Name: ruhr-uni-bochum.de

 

3. Name Servers

DomainNameserverNS-IP
rub.de
  dns1.ruhr-uni-bochum.de
134.147.231.10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:1:1007::231:10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


  dns2.ruhr-uni-bochum.de
134.147.220.178
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:9:1002::220:178
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


  sdns01.de.tmr.net
185.249.168.154
Essen/North Rhine-Westphalia/Germany (DE) - GLASFASER RUHR GmbH & Co. KG


 
2001:7d8:601::53
Bochum/North Rhine-Westphalia/Germany (DE) - GLASFASER RUHR GmbH & Co. KG

de
  a.nic.de / ns-1.de.de8.bind


  f.nic.de / ns-1.de.de1


  l.de.net / ns-1.de.fr1


  n.de.net / s3.mtv


  s.de.net / ns-3.de.de9


  z.nic.de / ns-1.de.de2.bind


www.bibliographie.ub.ruhr-uni-bochum.de
  dns1.ruhr-uni-bochum.de

bibliographie.ub.ruhr-uni-bochum.de
  dns1.ruhr-uni-bochum.de
134.147.231.10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
134.147.231.10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:1:1007::231:10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:1:1007::231:10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum

ub.ruhr-uni-bochum.de
  dns1.ruhr-uni-bochum.de
134.147.231.10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
134.147.231.10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
134.147.231.10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:1:1007::231:10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:1:1007::231:10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:1:1007::231:10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum

ruhr-uni-bochum.de
  dns-1.dfn.de
193.174.75.50
Berlin/Land Berlin/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.


 
193.174.75.50
Berlin/Land Berlin/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.


 
193.174.75.50
Berlin/Land Berlin/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.


 
2001:638:d:b101::1
Kaiserslautern/Rheinland-Pfalz/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.


 
2001:638:d:b101::1
Kaiserslautern/Rheinland-Pfalz/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.


 
2001:638:d:b101::1
Kaiserslautern/Rheinland-Pfalz/Germany (DE) - Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.


  dns1.ruhr-uni-bochum.de
134.147.231.10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
134.147.231.10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
134.147.231.10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:1:1007::231:10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:1:1007::231:10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:1:1007::231:10
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


  dns2.ruhr-uni-bochum.de
134.147.220.178
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
134.147.220.178
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
134.147.220.178
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:9:1002::220:178
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:9:1002::220:178
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum


 
2a05:3e00:9:1002::220:178
Bochum/North Rhine-Westphalia/Germany (DE) - Ruhr-Universitaet Bochum

de
  a.nic.de / ns-2.de.de8.bind


  a.nic.de / ns-2.de.de8.bind


  a.nic.de / ns-1.de.de8.bind


  f.nic.de / ns-2.de.de1


  f.nic.de / ns-2.de.de1


  f.nic.de / ns-2.de.de1


  l.de.net / ns-1.de.fr1


  l.de.net / ns-1.de.fr1


  l.de.net / ns-1.de.fr1


  n.de.net / s3.mtv


  n.de.net / s3.mtv


  n.de.net / s3.mtv


  s.de.net / ns-3.de.de9


  s.de.net / ns-3.de.de9


  s.de.net / ns-3.de.de9


  z.nic.de / ns-1.de.de2.bind


  z.nic.de / ns-1.de.de2.bind


  z.nic.de / ns-1.de.de2.bind

 

4. SOA-Entries


Domain:de
Zone-Name:de
Primary:f.nic.de
Mail:dns-operations.denic.de
Serial:1661934715
Refresh:7200
Retry:7200
Expire:3600000
TTL:7200
num Entries:2


Domain:de
Zone-Name:de
Primary:f.nic.de
Mail:dns-operations.denic.de
Serial:1661934829
Refresh:7200
Retry:7200
Expire:3600000
TTL:7200
num Entries:4


Domain:rub.de
Zone-Name:rub.de
Primary:dns1.ruhr-uni-bochum.de
Mail:hostmaster.ruhr-uni-bochum.de
Serial:2022248055
Refresh:1800
Retry:450
Expire:604800
TTL:900
num Entries:6



Domain:de
Zone-Name:de
Primary:f.nic.de
Mail:dns-operations.denic.de
Serial:1661934829
Refresh:7200
Retry:7200
Expire:3600000
TTL:7200
num Entries:5


Domain:de
Zone-Name:de
Primary:f.nic.de
Mail:dns-operations.denic.de
Serial:1661934946
Refresh:7200
Retry:7200
Expire:3600000
TTL:7200
num Entries:1


Domain:ruhr-uni-bochum.de
Zone-Name:ruhr-uni-bochum.de
Primary:dns1.ruhr-uni-bochum.de
Mail:hostmaster.ruhr-uni-bochum.de
Serial:203696377
Refresh:1800
Retry:450
Expire:604800
TTL:900
num Entries:6


Domain:ub.ruhr-uni-bochum.de
Zone-Name:ruhr-uni-bochum.de
Primary:dns1.ruhr-uni-bochum.de
Mail:hostmaster.ruhr-uni-bochum.de
Serial:203696378
Refresh:1800
Retry:450
Expire:604800
TTL:900
num Entries:2


Domain:bibliographie.ub.ruhr-uni-bochum.de
Zone-Name:ruhr-uni-bochum.de
Primary:dns1.ruhr-uni-bochum.de
Mail:hostmaster.ruhr-uni-bochum.de
Serial:203696378
Refresh:1800
Retry:450
Expire:604800
TTL:900
num Entries:2



Domain:de
Zone-Name:de
Primary:f.nic.de
Mail:dns-operations.denic.de
Serial:1661934946
Refresh:7200
Retry:7200
Expire:3600000
TTL:7200
num Entries:6


Domain:ruhr-uni-bochum.de
Zone-Name:ruhr-uni-bochum.de
Primary:dns1.ruhr-uni-bochum.de
Mail:hostmaster.ruhr-uni-bochum.de
Serial:203696378
Refresh:1800
Retry:450
Expire:604800
TTL:900
num Entries:6


Domain:ub.ruhr-uni-bochum.de
Zone-Name:ruhr-uni-bochum.de
Primary:dns1.ruhr-uni-bochum.de
Mail:hostmaster.ruhr-uni-bochum.de
Serial:203696378
Refresh:1800
Retry:450
Expire:604800
TTL:900
num Entries:2



Domain:de
Zone-Name:de
Primary:f.nic.de
Mail:dns-operations.denic.de
Serial:1661934829
Refresh:7200
Retry:7200
Expire:3600000
TTL:7200
num Entries:6


Domain:ruhr-uni-bochum.de
Zone-Name:ruhr-uni-bochum.de
Primary:dns1.ruhr-uni-bochum.de
Mail:hostmaster.ruhr-uni-bochum.de
Serial:203696377
Refresh:1800
Retry:450
Expire:604800
TTL:900
num Entries:6


Domain:ub.ruhr-uni-bochum.de
Zone-Name:ruhr-uni-bochum.de
Primary:dns1.ruhr-uni-bochum.de
Mail:hostmaster.ruhr-uni-bochum.de
Serial:203696377
Refresh:1800
Retry:450
Expire:604800
TTL:900
num Entries:2


Domain:bibliographie.ub.ruhr-uni-bochum.de
Zone-Name:ruhr-uni-bochum.de
Primary:dns1.ruhr-uni-bochum.de
Mail:hostmaster.ruhr-uni-bochum.de
Serial:203696377
Refresh:1800
Retry:450
Expire:604800
TTL:900
num Entries:2


Domain:www.bibliographie.ub.ruhr-uni-bochum.de
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


5. Screenshots

Startaddress: https://bibliographie.ub.rub.de/, address used: https://bibliographie.ub.rub.de/, Screenshot created 2022-08-31 10:40:11 +00:0

 

Mobil (412px x 732px)

 

581 milliseconds

 

Screenshot mobile - https://bibliographie.ub.rub.de/
Mobil + Landscape (732px x 412px)

 

472 milliseconds

 

Screenshot mobile landscape - https://bibliographie.ub.rub.de/
Screen (1280px x 1680px)

 

779 milliseconds

 

Screenshot Desktop - https://bibliographie.ub.rub.de/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport396716
content Size7656075

 

Fatal: Horizontal scrollbar detected. Content-size width is greater then visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://bibliographie.ub.rub.de/
129.217.132.18
301
https://bibliographie.ub.rub.de/
Html is minified: 109.03 %
0.073
A
Server: nginx/1.21.6
Date: Wed, 31 Aug 2022 08:39:06 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://bibliographie.ub.rub.de/

• https://bibliographie.ub.rub.de/
129.217.132.18
Inline-JavaScript (∑/total): 3/3677 Inline-CSS (∑/total): 0/0
200

Html is minified: 649.70 %
Other inline scripts (∑/total): 1/3677
3.340
A
small visible content (num chars: 46)
You need to enable JavaScript to run this app.
Server: nginx/1.21.6
Date: Wed, 31 Aug 2022 08:39:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Last-Modified: Fri, 26 Aug 2022 09:17:17 GMT
Vary: Accept-Encoding
ETag: W/"63088f9d-110e"
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000

• http://bibliographie.ub.rub.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
129.217.132.18
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 110.07 %
Other inline scripts (∑/total): 0/0
0.126
A
Not Found
Visible Content: 404 Not Found nginx/1.21.6
Server: nginx/1.21.6
Date: Wed, 31 Aug 2022 08:39:12 GMT
Content-Type: text/html
Content-Length: 153
Connection: close

• https://129.217.132.18/
129.217.132.18
503

Html is minified: 107.95 %
2.230
N
Service Temporarily Unavailable
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Server: nginx
Date: Wed, 31 Aug 2022 08:39:12 GMT
Content-Type: text/html
Content-Length: 190
Connection: close

 

7. Comments


1. General Results, most used to calculate the result

Aname "bibliographie.ub.rub.de" is subdomain, public suffix is ".de", top-level-domain is ".de", top-level-domain-type is "country-code", Country is Germany, tld-manager is "DENIC eG", num .de-domains preloaded: 7449 (complete: 175327)
AGood: All ip addresses are public addresses
Warning: Only one ip address found: bibliographie.ub.rub.de has only one ip address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: bibliographie.ub.rub.de has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: non-www is preferred
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):0 complete Content-Type - header (2 urls)
https://bibliographie.ub.rub.de/ 129.217.132.18


Url with incomplete Content-Type - header - missing charset
http://bibliographie.ub.rub.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 129.217.132.18


Url with incomplete Content-Type - header - missing charset
Ahttp://bibliographie.ub.rub.de/ 129.217.132.18
301
https://bibliographie.ub.rub.de/
Correct redirect http - https with the same domain name
Nhttps://129.217.132.18/ 129.217.132.18
503

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain bibliographie.ub.rub.de, 1 ip addresses.

2. Header-Checks


3. DNS- and NameServer - Checks

AInfo:: 9 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 3 Name Servers.
AInfo:: 9 Queries complete, 7 with IPv6, 2 with IPv4.
Warning: Only some DNS Queries done via ipv6. IPv6 is the future, so the name servers of your name servers should have ipv6 addresses.
AGood: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.dns1.ruhr-uni-bochum.de (134.147.231.10, 2a05:3e00:1:1007::231:10), dns2.ruhr-uni-bochum.de (134.147.220.178, 2a05:3e00:9:1002::220:178)
AGood (1 - 3.0):: An average of 3.0 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 3 different Name Servers found: dns1.ruhr-uni-bochum.de, dns2.ruhr-uni-bochum.de, sdns01.de.tmr.net, 3 Name Servers included in Delegation: dns1.ruhr-uni-bochum.de, dns2.ruhr-uni-bochum.de, sdns01.de.tmr.net, 3 Name Servers included in 1 Zone definitions: dns1.ruhr-uni-bochum.de, dns2.ruhr-uni-bochum.de, sdns01.de.tmr.net, 1 Name Servers listed in SOA.Primary: dns1.ruhr-uni-bochum.de.
AGood: Only one SOA.Primary Name Server found.: dns1.ruhr-uni-bochum.de.
AGood: SOA.Primary Name Server included in the delegation set.: dns1.ruhr-uni-bochum.de.
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AInfo: Ipv4-Subnet-list: 3 Name Servers, 2 different subnets (first Byte): 134., 185., 2 different subnets (first two Bytes): 134.147., 185.249., 3 different subnets (first three Bytes): 134.147.220., 134.147.231., 185.249.168.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 3 Name Servers with IPv6, 2 different subnets (first block): 2001:, 2a05:, 2 different subnets (first two blocks): 2001:07d8:, 2a05:3e00:, 3 different subnets (first three blocks): 2001:07d8:0601:, 2a05:3e00:0001:, 2a05:3e00:0009:, 3 different subnets (first four blocks): 2001:07d8:0601:0000:, 2a05:3e00:0001:1007:, 2a05:3e00:0009:1002:
AGood: Name Server IPv6 addresses from different subnets found.
Nameserver doesn't pass all EDNS-Checks: dns1.ruhr-uni-bochum.de: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
AGood: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: pki.dfn.de is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: sectigo.com is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: no CAA is allowed to create wildcard certificates

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
https://bibliographie.ub.rub.de/ 129.217.132.18
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://bibliographie.ub.rub.de/ 129.217.132.18
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
https://bibliographie.ub.rub.de/ 129.217.132.18
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 2 script elements without defer/async.
AGood: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 4 external CSS / JavaScript files found
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 4 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 4 complete.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
AInfo: Different Server-Headers found
ADuration: 566166 milliseconds, 566.166 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
bibliographie.ub.rub.de
129.217.132.18
443
ok
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
supported
ok
bibliographie.ub.rub.de
129.217.132.18
443
ok
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=bibliographie.ub.rub.de


2CN=R3, O=Let's Encrypt, C=US


3CN=ISRG Root X1, O=Internet Security Research Group, C=US


129.217.132.18
129.217.132.18
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

129.217.132.18
129.217.132.18
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Self signed certificate

1CN=letsencrypt-nginx-proxy-companion

 

9. Certificates

1.
1.
CN=bibliographie.ub.rub.de
24.08.2022
22.11.2022
845 days expired
bibliographie.ub.rub.de, mms3.ub.tu-dortmund.de - 2 entries
1.
1.
CN=bibliographie.ub.rub.de
24.08.2022

22.11.2022
845 days expired


bibliographie.ub.rub.de, mms3.ub.tu-dortmund.de - 2 entries

KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:03D560A69B801FACF6E7EBEF75033E95D988
Thumbprint:482343C3C9882AAC8E832D870252B01D4E324886
SHA256 / Certificate:JS1d/lauv5ctcVqKfBVU5kKdDMaVGzZSGbURquXib4s=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):f21c8a885746a69ed820d71a9290eb92e841de84f049e25d1fe87568ee8d6df0
SHA256 hex / Subject Public Key Information (SPKI):f21c8a885746a69ed820d71a9290eb92e841de84f049e25d1fe87568ee8d6df0 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://r3.o.lencr.org
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020
15.09.2025
expires in 183 days


2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020

15.09.2025
expires in 183 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:00912B084ACF0C18A753F6D62E25A75F5A
Thumbprint:A053375BFE84E8B748782C7CEE15827A6AF5A405
SHA256 / Certificate:Z63RFmsCCuYbj1/JaBPATCqliZYHloZVcqPH5zdhPf0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SHA256 hex / Subject Public Key Information (SPKI):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3732 days


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3732 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
CN=letsencrypt-nginx-proxy-companion
27.07.2022
27.07.2023
598 days expired

2.
1.
CN=letsencrypt-nginx-proxy-companion
27.07.2022

27.07.2023
598 days expired




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:29DAECC4FDB0F3128B09B53CD46B66533867E945
Thumbprint:4FF0F691AB66EA4034FD23FE06363B7A72E09742
SHA256 / Certificate:j4R7XEmewF2pPfJiH2a63JsxkvmK4ZmE9ohcGrDnVOY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):593540508c494151d7eb6e252fe8003fccfb0c61a936b35f8df1a546dca2b2b7
SHA256 hex / Subject Public Key Information (SPKI):593540508c494151d7eb6e252fe8003fccfb0c61a936b35f8df1a546dca2b2b7 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:


UntrustedRoot: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.


 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Small Code Update - wait one minute

 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Small Code Update - wait one minute

 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://bibliographie.ub.rub.de/
129.217.132.18
link
stylesheet
2

0
2
0
0
0
0


link
other
2

0
1
0
0
0
0


meta
other
3

0


0
0
0


script

2

0
2
0
0
0
0

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://bibliographie.ub.rub.de/
129.217.132.18
link
manifest
/manifest.json


1
ok















link
shortcut icon
/favicon.ico
200

1
ok
image/x-icon
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 3780 Bytes








link
stylesheet
/static/css/5.66a4d421.chunk.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 4330 Bytes






local SRI possible, possible hash-values:

 

sha256-1LXFCXjNOPa6DnwnbtXBIpuwn9f3OZLg8LqrAfu5H5o=
sha384-IMTeZ3BBBGzolBynGDfCCIoyFGhTNqACmwLt1B2O046FoGBob0wZZMnuPbNJmD6Z
sha512-wU4LhAnuQ5eRm1DEtff+KD/bkPxVo1p1waCVfx0MLdOnuImDOc2pB5CdrMHFwxFz8yo1CVGEEEzt1ouNcGby2w==

 

<link rel="stylesheet" href="/static/css/5.66a4d421.chunk.css" crossorigin="anonymous" integrity="sha256-1LXFCXjNOPa6DnwnbtXBIpuwn9f3OZLg8LqrAfu5H5o=" />


Content loaded via url("...")

 

/static/media/loader-big.a770b679.gif1
/static/media/rw-widgets.12f0820c.woff1
/static/media/rw-widgets.792dcd18.svg#fontawesomeregular1
/static/media/rw-widgets.bc7c4a59.eot1
/static/media/rw-widgets.bc7c4a59.eot?#iefix&v=4.1.01
/static/media/rw-widgets.eceddf47.ttf1
data:image/gif;base64,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1

link
stylesheet
/static/css/main.aa3687a6.chunk.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 3719 Bytes






local SRI possible, possible hash-values:

 

sha256-L0gHmM12up8v2i7eMnrjbjr3+ZTZsEOwxHqe+IMmqx0=
sha384-+LHSua7RHuen7IbWjCIxG8axkP16DgqrGUI1WYKvG0uYXj9dHteFg2P97Pb3nb6L
sha512-nt6HqFp47o0dvuzn/rpcjieyvR7mxZfMtS9e4Vjd5t/cXUcR0kGPn+6UgtdswiRXnEgKM1eYhAhctZzBM8MlHA==

 

<link rel="stylesheet" href="/static/css/main.aa3687a6.chunk.css" crossorigin="anonymous" integrity="sha256-L0gHmM12up8v2i7eMnrjbjr3+ZTZsEOwxHqe+IMmqx0=" />


Content loaded via url("...")

 

/static/media/06807d16-017f-4d3d-afb1-1f97c0150427.bad8076d.woff1
/static/media/0a2caf4c-c387-4017-b49a-ff310c9b904a.74fc047c.eot1
/static/media/0a2caf4c-c387-4017-b49a-ff310c9b904a.74fc047c.eot?#iefix1
/static/media/0af5367d-999c-4bc0-9bad-9422140ca749.f0909cff.svg#0af5367d-999c-4bc0-9bad-9422140ca7491
/static/media/0e076fbb-4139-4d5e-8bc0-8bf5a90766e0.055400dd.eot1
/static/media/0e076fbb-4139-4d5e-8bc0-8bf5a90766e0.055400dd.eot?#iefix1
/static/media/179f9213-a414-4fd1-914a-8e7b8f2a24d2.37fe9dcd.eot1
/static/media/179f9213-a414-4fd1-914a-8e7b8f2a24d2.37fe9dcd.eot?#iefix1
/static/media/3be292a2-4a09-4da9-a6d0-b49bc9bd1416.45a34810.ttf1
/static/media/3fe779fd-47cd-4f65-8e79-523e6106a73c.b0d12b12.woff1
/static/media/402d489d-8605-4109-911f-c2fe749c5210.80d001c4.ttf1
/static/media/556c8792-4efa-40d8-9944-3ce48e9edc1b.f1a0888c.woff1
/static/media/95fba401-19ec-44f6-b568-5cad124a3f73.b84f8043.svg#95fba401-19ec-44f6-b568-5cad124a3f731
/static/media/affe177e-580a-4dad-8333-dee8db15c368.071d6d87.ttf1
/static/media/c2f4564c-1e6b-499c-875f-0e56eb9f6c35.8255f5c6.svg#c2f4564c-1e6b-499c-875f-0e56eb9f6c351
/static/media/d1d81415-bffa-4516-a833-9e545abc685c.8f4e462d.ttf1
/static/media/d6334097-85f7-45a7-b236-61fde24453f4.3be83cfe.eot1
/static/media/d6334097-85f7-45a7-b236-61fde24453f4.3be83cfe.eot?#iefix1
/static/media/d6e16d44-3e92-437e-9f02-6f3ca07c3a96.93fe84df.svg#d6e16d44-3e92-437e-9f02-6f3ca07c3a961
/static/media/dd5daa4e-14c2-42a9-838e-73fa41ea9044.d92053f5.woff1
/static/media/flama-basic-a.16fa2274.ttf1
/static/media/flama-basic-a.889c4616.svg#Flama-Basic1
/static/media/flama-basic-a.91c9c285.woff1
/static/media/flama-basic-a.e52d79fc.eot1
/static/media/flama-basic-a.e52d79fc.eot?#iefix1
/static/media/icomoon.109ef719.ttf1
/static/media/icomoon.477b9f2c.woff1
/static/media/icomoon.9beadd16.svg#icomoon1
/static/media/icomoon.e53d7023.eot1
/static/media/icomoon.e53d7023.eot#iefix1
/static/media/rub_newsportal_icons_abc.0e21c285.eot1
/static/media/rub_newsportal_icons_abc.0e21c285.eot?#iefix1
/static/media/rub_newsportal_icons_abc.36511b6c.svg#rub_newsportal_icons_abc1
/static/media/rub_newsportal_icons_abc.ce201549.woff1
/static/media/rub_newsportal_icons_abc.fd2d4c2d.ttf1
/static/media/rubflama-bold.2029849b.svg#RubFlama-Bold1
/static/media/rubflama-bold.3d2a300f.woff1
/static/media/rubflama-bold.597d7253.ttf1
/static/media/rubflama-bold.60ac49db.eot1
/static/media/rubflama-bold.60ac49db.eot?#iefix1
/static/media/titillium-bold.08d37409.ttf1
/static/media/titillium-bold.c759dce5.woff1
/static/media/titillium-italic.97665641.woff1
/static/media/titillium-italic.a30e681e.ttf1
/static/media/titillium-light.d465ccf4.woff1
/static/media/titillium-light.edc21ba4.ttf1
/static/media/titillium-regular.62bbb345.woff1
/static/media/titillium-regular.ed1d014b.ttf1

meta
charset
utf-8


1
ok















meta
theme-color
#000000


1
ok















meta
viewport
width=device-width,initial-scale=1,shrink-to-fit=no


1
ok















script
src
/static/js/5.802763ac.chunk.js
200

1
ok
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 565898 Bytes






local SRI possible, possible hash-values:

 

sha256-iySBmMQ0AjDklxydUZUWJ9u0hZ5KyZ90R7jbH2xBL/M=
sha384-cLdxj7fxW0j+ULRWmOfFykUi2RDWgOlR6dqZRbRaFNP0tUvbz9MaN7SOgTGyPQEQ
sha512-AALee1iZTIH1QoYNRS/zFOPelqVJP0El/UeqRRxA17O1aI5zWdYfVakfkdlcSUryHLtRxUlSCHwqKvOB4u8Apw==

 

<script src="/static/js/5.802763ac.chunk.js" crossorigin="anonymous" integrity="sha256-iySBmMQ0AjDklxydUZUWJ9u0hZ5KyZ90R7jbH2xBL/M=" />



script
src
/static/js/main.a47b354c.chunk.js
200

1
ok
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 209529 Bytes






local SRI possible, possible hash-values:

 

sha256-XKPRtmjpbvm7arcEGw7b/kRLIiM6OKQ3UG82zvPiP0s=
sha384-MAVfSh3q7v8qGNJ2Xz48MLEvOtaZEsgmuE4UQjiYs3VChVWp3H/MtScUkHFbO4fY
sha512-d4a0cer6ay6Io25xowDmEgPPSPwcVFxKZsmnTl4U7X/Ug1Y/XD6gur4rlYZKTZM4lbaLCU0NPSJs9/5f440ljQ==

 

<script src="/static/js/main.a47b354c.chunk.js" crossorigin="anonymous" integrity="sha256-XKPRtmjpbvm7arcEGw7b/kRLIiM6OKQ3UG82zvPiP0s=" />


 

12. Html-Parsing via https://validator.w3.org/nu/

Small Code update, wait one minute

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: dns1.ruhr-uni-bochum.de, dns2.ruhr-uni-bochum.de, sdns01.de.tmr.net

 

QNr.DomainTypeNS used
1
de
NS
h.root-servers.net (2001:500:1::53)

Answer: a.nic.de, f.nic.de, l.de.net, n.de.net, s.de.net, z.nic.de
2
dns1.ruhr-uni-bochum.de: 134.147.231.10, 2a05:3e00:1:1007::231:10
NS
a.nic.de (2001:678:2::53)

Answer: dns2.ruhr-uni-bochum.de
134.147.220.178, 2a05:3e00:9:1002::220:178
3
net
NS
h.root-servers.net (2001:500:1::53)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
4
sdns01.de.tmr.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: adns01.de.tmr.net, adns02.de.tmr.net

Answer: adns02.de.tmr.net
212.23.146.234

Answer: adns01.de.tmr.net
212.23.147.66
5
dns-1.dfn.de
NS
a.nic.de (2001:678:2::53)

Answer: ns1.dfn.de, ns2.dfn.de, ns3.dfn.de

Answer: ns3.dfn.de
194.95.236.67

Answer: ns2.dfn.de
194.95.236.59, 2001:638:d:c111::59

Answer: ns1.dfn.de
194.95.236.51, 2001:638:d:c110::51
6
dns-1.dfn.de: 193.174.75.50
A
ns1.dfn.de (2001:638:d:c110::51)
7
dns-1.dfn.de: 2001:638:d:b101::1
AAAA
ns1.dfn.de (2001:638:d:c110::51)
8
sdns01.de.tmr.net: 185.249.168.154
A
adns01.de.tmr.net (212.23.147.66)
9
sdns01.de.tmr.net: 2001:7d8:601::53
AAAA
adns01.de.tmr.net (212.23.147.66)

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
bibliographie.ub.ruhr-uni-bochum.de
0

no CAA entry found
1
0

0

no CAA entry found
1
0
www.bibliographie.ub.rub.de



1
0
bibliographie.ub.rub.de



1
0
ub.ruhr-uni-bochum.de
0

no CAA entry found
1
0

0

no CAA entry found
1
0

0

no CAA entry found
1
0
ruhr-uni-bochum.de
9
issuewild
;
1
0

9
issuewild
;
1
0

9
issuewild
;
1
0

5
issue
letsencrypt.org
1
0

5
issue
letsencrypt.org
1
0

5
issue
letsencrypt.org
1
0

5
iodef
mailto-abuse@ruhr-uni-bochum.de
1
0

5
iodef
mailto-abuse@ruhr-uni-bochum.de
1
0

5
iodef
mailto-abuse@ruhr-uni-bochum.de
1
0

5
issue
pki.dfn.de
1
0

5
issue
pki.dfn.de
1
0

5
issue
pki.dfn.de
1
0

5
issue
sectigo.com
1
0

5
issue
sectigo.com
1
0

5
issue
sectigo.com
1
0
ub.rub.de



1
0
rub.de
9
issuewild
;
1
0

5
issue
letsencrypt.org
1
0

5
iodef
mailto-abuse@ruhr-uni-bochum.de
1
0

5
issue
pki.dfn.de
1
0

5
issue
sectigo.com
1
0
de
0

no CAA entry found
1
0

0

no CAA entry found
1
0

0

no CAA entry found
1
0

0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
ub.rub.de


1
0
bibliographie.ub.rub.de


1
0
www.bibliographie.ub.rub.de


1
0
_acme-challenge.ub.ruhr-uni-bochum.de

Name Error - The domain name does not exist
1
0
_acme-challenge.bibliographie.ub.rub.de


1
0
_acme-challenge.www.bibliographie.ub.rub.de


1
0
_acme-challenge.bibliographie.ub.rub.de.ub.rub.de


1
0
_acme-challenge.bibliographie.ub.ruhr-uni-bochum.de

Name Error - The domain name does not exist
1
0
_acme-challenge.ub.ruhr-uni-bochum.de.ub.ruhr-uni-bochum.de

Name Error - The domain name does not exist
1
0
_acme-challenge.bibliographie.ub.rub.de.bibliographie.ub.rub.de


1
0
_acme-challenge.www.bibliographie.ub.rub.de.bibliographie.ub.rub.de


1
0
_acme-challenge.www.bibliographie.ub.rub.de.www.bibliographie.ub.rub.de


1
0
_acme-challenge.bibliographie.ub.ruhr-uni-bochum.de.bibliographie.ub.ruhr-uni-bochum.de

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

ub.ruhr-uni-bochum.de
0
01ok

 

 

17. Cipher Suites

Summary
DomainIPPortnum CipherstimeStd.ProtocolForward Secrecy
bibliographie.ub.rub.de
129.217.132.18
443
5 Ciphers36.40 sec
0 without, 5 FS
100.00 %
Complete

1
5 Ciphers
5.00 Ciphers/Check
36.40 sec36.40 sec/Check
0 without, 5 FS
100.00 %

Details
DomainIPPortCipher (OpenSsl / IANA)
bibliographie.ub.rub.de
129.217.132.18
443
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
5 Ciphers, 36.40 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
RSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

DH
RSA
AESGCM(256)
AEAD




ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ECDH
RSA
AESGCM(128)
AEAD




DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

DH
RSA
AESGCM(128)
AEAD

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=fb6815f0-4b27-4a47-840a-3fec9b34e18e

 

Last Result: https://check-your-website.server-daten.de/?q=bibliographie.ub.rub.de - 2022-08-31 10:30:53

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=bibliographie.ub.rub.de" target="_blank">Check this Site: bibliographie.ub.rub.de</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=bibliographie.ub.rub.de