B

Missing HSTS or Cookie-warnings

Checked:
08.07.2019 17:29:08


Older results


1. IP-Addresses

HostTIP-Addressis auth.∑ Queries∑ Timeout
cercetare.psy-help.ro
A
86.123.88.182
Blaj/Judetul Alba/Romania (RO) - RCS & RDS SA
No Hostname found
yes
1
0

AAAA

yes


www.cercetare.psy-help.ro

Name Error
yes
1
0


2. DNSSEC

Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

3 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

Public Key with Algorithm 8, KeyTag 59944, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.07.2019, 00:00:00, Signature-Inception: 01.07.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
ro
1 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 21.07.2019, 05:00:00, Signature-Inception: 08.07.2019, 04:00:00, KeyTag 59944, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 59944 used to validate the DS RRSet in the parent zone

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 23914, Flags 256

Public Key with Algorithm 8, KeyTag 61747, Flags 257 (SEP = Secure Entry Point)

2 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 05.08.2019, 16:10:49, Signature-Inception: 06.07.2019, 15:10:49, KeyTag 23914, Signer-Name: ro

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 05.08.2019, 16:10:49, Signature-Inception: 06.07.2019, 15:10:49, KeyTag 61747, Signer-Name: ro

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 23914 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61747 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 61747, DigestType 2 and Digest "uBFmG1aZQ+DvdfcitLtzednnBiBRbdiICQd9nzNXh4A=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
psy-help.ro
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


cercetare.psy-help.ro
0 DS RR in the parent zone found

0 DNSKEY RR found


www.cercetare.psy-help.ro
0 DS RR in the parent zone found


3. Name Servers

DomainNameserverNS-IP
www.cercetare.psy-help.ro
  ns1.doctorel.ro

cercetare.psy-help.ro
  ns1.doctorel.ro
86.123.88.182
Blaj/Judetul Alba/Romania (RO) - RCS & RDS SA

psy-help.ro
  ns.doctorel.ro


  ns1.doctorel.ro


  ns2.doctorel.ro

ro
  dns-at.rotld.ro


  dns-ro.denic.de


  primary.rotld.ro


  sec-dns-a.rotld.ro


  sec-dns-b.rotld.ro


  sns-pb.isc.org


4. SOA-Entries


Domain:ro
Primary:primary.rotld.ro
Mail:hostmaster.rotld.ro
Serial:2015052603
Refresh:10800
Retry:3600
Expire:604800
TTL:3600
num Entries:6


Domain:psy-help.ro
Primary:ns1.doctorel.ro
Mail:office.doctorel.ro
Serial:2019070801
Refresh:7200
Retry:540
Expire:604800
TTL:86400
num Entries:3


Domain:cercetare.psy-help.ro
Primary:ns1.doctorel.ro
Mail:office.doctorel.ro
Serial:2019070801
Refresh:7200
Retry:540
Expire:604800
TTL:86400
num Entries:1


5. Url-Checks


show header:
Domainname Http-StatusredirectSec.G
• http://cercetare.psy-help.ro/
86.123.88.182
301
https://cercetare.psy-help.ro/
0.094
A
Date: Mon, 08 Jul 2019 15:29:22 GMT
Server: Apache/2.4.25 (Debian)
Location: https://cercetare.psy-help.ro/
Content-Length: 325
Connection: close
Content-Type: text/html; charset=iso-8859-1

• https://cercetare.psy-help.ro/
86.123.88.182
200

0.413
B
Date: Mon, 08 Jul 2019 15:29:22 GMT
Server: Apache/2.4.25 (Debian)
Upgrade: h2,h2c
Connection: Upgrade, close
Vary: Accept-Encoding
Content-Length: 5618
Content-Type: text/html; charset=UTF-8

• http://cercetare.psy-help.ro/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
86.123.88.182
301
https://cercetare.psy-help.ro/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
0.090
A
Visible Content: Moved Permanently The document has moved here . Apache/2.4.25 (Debian) Server at cercetare.psy-help.ro Port 80
Date: Mon, 08 Jul 2019 15:29:23 GMT
Server: Apache/2.4.25 (Debian)
Location: https://cercetare.psy-help.ro/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Length: 394
Connection: close
Content-Type: text/html; charset=iso-8859-1

• https://cercetare.psy-help.ro/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

404

0.410
A
Not Found
Visible Content: ERROR 404 - Not Found! The following error occurred: The requested URL was not found on this server. Please check the URL or contact the webmaster. Powered by ISPConfig
Date: Mon, 08 Jul 2019 15:29:23 GMT
Server: Apache/2.4.25 (Debian)
Upgrade: h2,h2c
Connection: Upgrade, close
Last-Modified: Wed, 16 Nov 2016 08:40:03 GMT
ETag: "70e-5416704f0c04c"
Accept-Ranges: bytes
Content-Length: 1806
Content-Type: text/html

6. Comments

Aname "cercetare.psy-help.ro" is subdomain, public suffix is "ro", top-level-domain-type is "country-code", Country is Romania, tld-manager is "National Institute for R&D in Informatics"
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
Agood: destination is https
Agood - only one version with Http-Status 200
Agood: one preferred version: non-www is preferred
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):1 complete Content-Type - header (2 urls)
https://cercetare.psy-help.ro/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Url with incomplete Content-Type - header - missing charset
Ahttp://cercetare.psy-help.ro/ 86.123.88.182
301
https://cercetare.psy-help.ro/
correct redirect http - https with the same domain name
Bhttps://cercetare.psy-help.ro/ 86.123.88.182
200

Missing HSTS-Header
AGood: Nameserver supports TCP connections: 1 good Nameserver
AGood: Nameserver supports Echo Capitalization: 1 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 1 good Nameserver
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory ( <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>).
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN)
ADuration: 15477 milliseconds, 15.477 seconds


7. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
cercetare.psy-help.ro
86.123.88.182
443
ok
Tls12
DiffieHellman
2048
Aes128
128
Sha256
error checking OCSP stapling
ok
cercetare.psy-help.ro
86.123.88.182
443
ok
Tls12
DiffieHellman
2048
Aes128
128
Sha256
error checking OCSP stapling
ok
Chain (complete)
1CN=cercetare.psy-help.ro

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


8. Certificates

1.
1.
CN=cercetare.psy-help.ro
08.07.2019
06.10.2019
expires in 74 days
cercetare.psy-help.ro - 1 entry
1.
1.
CN=cercetare.psy-help.ro
08.07.2019

06.10.2019
expires in 74 days
cercetare.psy-help.ro - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0397B5F0DC002D0E8AAC014B7FC8914DAC4A
Thumbprint:CD3FCD7D9B611C28BEA06DEF07BF377DEC1FC58D
SHA256 / Certificate:KWOhlGH6x0psAt++32LWcdQPC7Jy2DsRPd37mXYJMag=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):4a996a0051442f77c19cc350ee665816716b61c85701972b1abf2420c0f4e321
OCSP - Url:http://ocsp.int-x3.letsencrypt.org
OCSP - must staple:no
Certificate Transparency:yes


2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
17.03.2016
17.03.2021
expires in 602 days


2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
17.03.2016

17.03.2021
expires in 602 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0A0141420000015385736A0B85ECA708
Thumbprint:E6A3B45B062D509B3382282D196EFE97D5956CCB
SHA256 / Certificate:JYR9Zo608E/dQLErawdAxWfafQJDCOtsLJb+QdneIY0=
SHA256 hex / Cert (DANE * 0 1):25847d668eb4f04fdd40b12b6b0740c567da7d024308eb6c2c96fe41d9de218d
SHA256 hex / PublicKey (DANE * 1 1):60b87575447dcba2a36b7d11ac09fb24a9db406fee12d2cc90180517616e8a18
OCSP - Url:http://isrg.trustid.ocsp.identrust.com
OCSP - must staple:no
Certificate Transparency:no


3.
CN=DST Root CA X3, O=Digital Signature Trust Co.
30.09.2000
30.09.2021
expires in 799 days


3.
CN=DST Root CA X3, O=Digital Signature Trust Co.
30.09.2000

30.09.2021
expires in 799 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:44AFB080D6A327BA893039862EF8406B
Thumbprint:DAC9024F54D8F6DF94935FB1732638CA6AD77C13
SHA256 / Certificate:BocmAzGnJAPZCfEF5pvPDTLhvSST/8bZIG0RvNZ3Bzk=
SHA256 hex / Cert (DANE * 0 1):0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739
SHA256 hex / PublicKey (DANE * 1 1):563b3caf8cfef34c2335caf560a7a95906e8488462eb75ac59784830df9e5b2b
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no



9. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1006504072
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-07-08 14:20:52
2019-10-06 14:20:52
cercetare.psy-help.ro - 1 entries



2. Source crt.sh - old and new certificates, sometimes very slow.

No CRT - CT-Log entries found


10. Html-Content - Entries (BETA - mixed content and other checks)

No Html-Content entries found. Only checked if https + status 200/401/403/404


11. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
cercetare.psy-help.ro
0

no CAA entry found
1
0
psy-help.ro
0

no CAA entry found
1
0
ro
0

no CAA entry found
1
0


12. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
psy-help.ro

ok
1
0
cercetare.psy-help.ro

ok
1
0
_acme-challenge.cercetare.psy-help.ro

Name Error - The domain name does not exist
1
0
_acme-challenge.cercetare.psy-help.ro.psy-help.ro

Name Error - The domain name does not exist
1
0
_acme-challenge.cercetare.psy-help.ro.cercetare.psy-help.ro

Name Error - The domain name does not exist
1
0


13. Portchecks (BETA)

No Port informations found. The feature is new (startet 2019-07-09), so recheck this domain.



Permalink: https://check-your-website.server-daten.de/?i=60a7687e-fd49-4db8-b61b-1c2948ade7da


Last Result: https://check-your-website.server-daten.de/?q=cercetare.psy-help.ro - 2019-07-08 17:29:08


Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=cercetare.psy-help.ro" target="_blank">Check this Site: cercetare.psy-help.ro</a>