S

Server error

Checked:
12.06.2019 02:55:55


Older results


1. IP-Addresses

HostTIP-Addressis auth.∑ Queries∑ Timeout
crecer.educacion.cdmx.gob.mx
A
189.240.71.202
San Miguel Ajusco/Distrito Federal/MX
yes
1
0

AAAA

yes


www.crecer.educacion.cdmx.gob.mx

Name Error
yes
1
0


2. DNSSEC

Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.07.2019, 00:00:00, Signature-Inception: 10.06.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
mx
1 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 24.06.2019, 17:00:00, Signature-Inception: 11.06.2019, 16:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

3 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 14698, Flags 256

Public Key with Algorithm 8, KeyTag 39767, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 61382, Flags 257 (SEP = Secure Entry Point)

3 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 11.07.2019, 00:00:00, Signature-Inception: 11.06.2019, 00:00:00, KeyTag 14698, Signer-Name: mx

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 01.08.2019, 15:00:00, Signature-Inception: 02.06.2019, 15:00:00, KeyTag 39767, Signer-Name: mx

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 01.08.2019, 15:00:00, Signature-Inception: 02.06.2019, 15:00:00, KeyTag 61382, Signer-Name: mx

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 14698 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 39767 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61382 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 39767, DigestType 2 and Digest "EZvsiRv5z6XFPS2VwzQPIEzS9kfWJLMcuNPfbP1JKB0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
gob.mx
2 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 11.07.2019, 00:00:00, Signature-Inception: 11.06.2019, 00:00:00, KeyTag 14698, Signer-Name: mx

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 14698 used to validate the DS RRSet in the parent zone

3 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 14698, Flags 256

Public Key with Algorithm 8, KeyTag 39767, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 61382, Flags 257 (SEP = Secure Entry Point)

3 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 11.07.2019, 00:00:00, Signature-Inception: 11.06.2019, 00:00:00, KeyTag 14698, Signer-Name: gob.mx

Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 01.08.2019, 15:00:00, Signature-Inception: 02.06.2019, 15:00:00, KeyTag 39767, Signer-Name: gob.mx

Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 01.08.2019, 15:00:00, Signature-Inception: 02.06.2019, 15:00:00, KeyTag 61382, Signer-Name: gob.mx

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 14698 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 39767 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61382 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 39767, DigestType 2 and Digest "tlezgM42voeGP9GMWkgU0o3xdSERavrQNrqua2JMeG4=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 61382, DigestType 2 and Digest "funwX3Z5KLI+OSVQnsjHSzsNf8rBgd0TEIPv9pnVOuE=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
cdmx.gob.mx
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


educacion.cdmx.gob.mx
0 DS RR in the parent zone found

0 DNSKEY RR found


crecer.educacion.cdmx.gob.mx
0 DS RR in the parent zone found

0 DNSKEY RR found


www.crecer.educacion.cdmx.gob.mx
0 DS RR in the parent zone found


3. Name Servers

DomainNameserverNS-IP
www.crecer.educacion.cdmx.gob.mx
  cdmx.gob.mx

crecer.educacion.cdmx.gob.mx
  cdmx.gob.mx

educacion.cdmx.gob.mx
  cdmx.gob.mx

cdmx.gob.mx
  ns1.df.gob.mx


  ns2.df.gob.mx

gob.mx
  c.mx-ns.mx


  e.mx-ns.mx / 1.ber.pch


  i.mx-ns.mx


  m.mx-ns.mx


  o.mx-ns.mx


  x.mx-ns.mx

mx
  c.mx-ns.mx


  e.mx-ns.mx / 3.fra.pch


  i.mx-ns.mx


  m.mx-ns.mx


  o.mx-ns.mx


  x.mx-ns.mx


4. SOA-Entries


Domain:mx
Primary:m.mx-ns.mx
Mail:hostmaster.nic.mx
Serial:1560299610
Refresh:900
Retry:900
Expire:604800
TTL:1800
num Entries:1


Domain:mx
Primary:m.mx-ns.mx
Mail:hostmaster.nic.mx
Serial:1560300510
Refresh:900
Retry:900
Expire:604800
TTL:1800
num Entries:5


Domain:gob.mx
Primary:m.mx-ns.mx
Mail:hostmaster.nic.mx
Serial:1560299165
Refresh:900
Retry:900
Expire:604800
TTL:1800
num Entries:6


Domain:cdmx.gob.mx
Primary:cdmx.gob.mx
Mail:hostmaster.cdmx.gob.mx
Serial:2019061108
Refresh:28800
Retry:7200
Expire:2419200
TTL:86400
num Entries:2


5. Url-Checks


show header:
Domainname Http-StatusredirectSec.G
• http://crecer.educacion.cdmx.gob.mx/
189.240.71.202
301
https://crecer.educacion.cdmx.gob.mx/
0.380
A
Date: Wed, 12 Jun 2019 00:57:00 GMT
Server: Apache/2.4.18 (Ubuntu)
Location: https://crecer.educacion.cdmx.gob.mx/
Content-Length: 339
Connection: close
Content-Type: text/html; charset=iso-8859-1

• https://crecer.educacion.cdmx.gob.mx/
189.240.71.202
500

1.920
N
Internal Server Error
Certificate error: RemoteCertificateChainErrors
Date: Wed, 12 Jun 2019 00:57:01 GMT
Server: Apache/2.4.18 (Ubuntu)
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

• http://crecer.educacion.cdmx.gob.mx/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
189.240.71.202
301
https://crecer.educacion.cdmx.gob.mx/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
0.380
A
Visible Content: Moved Permanently The document has moved here . Apache/2.4.18 (Ubuntu) Server at crecer.educacion.cdmx.gob.mx Port 80
Date: Wed, 12 Jun 2019 00:57:02 GMT
Server: Apache/2.4.18 (Ubuntu)
Location: https://crecer.educacion.cdmx.gob.mx/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Length: 408
Connection: close
Content-Type: text/html; charset=iso-8859-1

• https://crecer.educacion.cdmx.gob.mx/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

404

1.593
N
Not Found
Certificate error: RemoteCertificateChainErrors
Visible Content: Be right back. https://crecer.educacion.cdmx.gob.mx/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Array ( ) 1
Date: Wed, 12 Jun 2019 00:57:03 GMT
Server: Apache/2.4.18 (Ubuntu)
Cache-Control: no-cache, private
Content-Length: 1282
Connection: close
Content-Type: text/html; charset=UTF-8

6. Comments

Aname "crecer.educacion.cdmx.gob.mx" is subdomain, public suffix is "gob.mx", top-level-domain-type is "country-code", Country is Mexico, tld-manager is "NIC-Mexico ITESM - Campus Monterrey"
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
Ahttp://crecer.educacion.cdmx.gob.mx/ 189.240.71.202
301
https://crecer.educacion.cdmx.gob.mx/
correct redirect http - https with the same domain name
CError - no version with Http-Status 200
Hfatal error: No https - result with http-status 200, no encryption
Nhttps://crecer.educacion.cdmx.gob.mx/ 189.240.71.202
500

Error - Certificate isn't trusted, RemoteCertificateChainErrors
Nhttps://crecer.educacion.cdmx.gob.mx/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404

Error - Certificate isn't trusted, RemoteCertificateChainErrors
Nameserver doesn't pass all EDNS-Checks: cdmx.gob.mx: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: cdmx.gob.mx: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: cdmx.gob.mx: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
https://crecer.educacion.cdmx.gob.mx/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
1.593 seconds
Warning: 404 needs more then one second
ADuration: 70750 milliseconds, 70.750 seconds


7. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
crecer.educacion.cdmx.gob.mx
189.240.71.202
443
Certificate/chain invalid
Tls12
DiffieHellman
2048
Aes128
128
Sha256
error checking OCSP stapling
ok
crecer.educacion.cdmx.gob.mx
189.240.71.202
443
Certificate/chain invalid
Tls12
DiffieHellman
2048
Aes128
128
Sha256
error checking OCSP stapling
ok
Chain (complete)
1CN=crecer.educacion.cdmx.gob.mx

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


8. Certificates

1.
1.
CN=crecer.educacion.cdmx.gob.mx
30.10.2018
28.01.2019
150 days expired
crecer.educacion.cdmx.gob.mx - 1 entry
1.
1.
CN=crecer.educacion.cdmx.gob.mx
30.10.2018

28.01.2019
150 days expired
crecer.educacion.cdmx.gob.mx - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:03CBC31C39EC08F1E25354C7F8E879C81C17
Thumbprint:F17A7C3EFC7C70FAAECE590FAFDBA36052C1C395
SHA256 / Certificate:xZuaABFfP4dcc2SQxjBXH5KkPVyOm7ZMSi0gqQvxkyA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):72554727322c01363b94d3ef7b9c146911d09b6fda1ae5c058d5f826cd9ea137
OCSP - Url:http://ocsp.int-x3.letsencrypt.org
OCSP - must staple:no
Certificate Transparency:yes

NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
OfflineRevocation: The revocation function was unable to check revocation because the revocation server was offline.

2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
17.03.2016
17.03.2021
expires in 629 days


2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
17.03.2016

17.03.2021
expires in 629 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0A0141420000015385736A0B85ECA708
Thumbprint:E6A3B45B062D509B3382282D196EFE97D5956CCB
SHA256 / Certificate:JYR9Zo608E/dQLErawdAxWfafQJDCOtsLJb+QdneIY0=
SHA256 hex / Cert (DANE * 0 1):25847d668eb4f04fdd40b12b6b0740c567da7d024308eb6c2c96fe41d9de218d
SHA256 hex / PublicKey (DANE * 1 1):60b87575447dcba2a36b7d11ac09fb24a9db406fee12d2cc90180517616e8a18
OCSP - Url:http://isrg.trustid.ocsp.identrust.com
OCSP - must staple:no
Certificate Transparency:no


3.
CN=DST Root CA X3, O=Digital Signature Trust Co.
30.09.2000
30.09.2021
expires in 826 days


3.
CN=DST Root CA X3, O=Digital Signature Trust Co.
30.09.2000

30.09.2021
expires in 826 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:44AFB080D6A327BA893039862EF8406B
Thumbprint:DAC9024F54D8F6DF94935FB1732638CA6AD77C13
SHA256 / Certificate:BocmAzGnJAPZCfEF5pvPDTLhvSST/8bZIG0RvNZ3Bzk=
SHA256 hex / Cert (DANE * 0 1):0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739
SHA256 hex / PublicKey (DANE * 1 1):563b3caf8cfef34c2335caf560a7a95906e8488462eb75ac59784830df9e5b2b
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no



9. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

Issuerlast 7 daysactivenum Certs
CN=AlphaSSL CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
448270831
CN=AlphaSSL CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
2018-07-06 15:58:11
2019-07-07 15:58:11
crecer.educacion.cdmx.gob.mx - 1 entries



2. Source crt.sh - old and new certificates, sometimes very slow.

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
0
5
CN=AlphaSSL CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
0
1
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
905118372
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-10-30 21:46:55
2019-01-28 21:46:55
crecer.educacion.cdmx.gob.mx
1 entries


576816659
CN=AlphaSSL CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
2018-07-06 13:58:11
2019-07-07 13:58:11
crecer.educacion.cdmx.gob.mx
1 entries


367346160
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-03-27 01:48:01
2018-06-25 01:48:01
crecer.educacion.cdmx.gob.mx
1 entries


313527193
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-01-26 03:34:24
2018-04-26 02:34:24
crecer.educacion.cdmx.gob.mx
1 entries


265075865
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-11-27 03:51:06
2018-02-25 03:51:06
crecer.educacion.cdmx.gob.mx
1 entries


219129335
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-09-27 19:54:00
2017-12-26 20:54:00
crecer.educacion.cdmx.gob.mx
1 entries



10. Html-Content - Entries (BETA - mixed content and other checks)

No Html-Content entries found. Only checked if https + status 200/401/403/404


11. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
crecer.educacion.cdmx.gob.mx
0

no CAA entry found
1
0
educacion.cdmx.gob.mx
0

no CAA entry found
1
0
cdmx.gob.mx
0

no CAA entry found
1
0
gob.mx
0

no CAA entry found
1
0
mx
0

no CAA entry found
1
0


12. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
educacion.cdmx.gob.mx
v=spf1 include:_spf.google.com ~all
ok
1
0
educacion.cdmx.gob.mx
google-site-verification=L4uA4gXwVl-YdJOZHYL3HeW1PwvIXGshHffQED1CZ3o
ok
1
0
crecer.educacion.cdmx.gob.mx

ok
1
0
_acme-challenge.crecer.educacion.cdmx.gob.mx

Name Error - The domain name does not exist
1
0
_acme-challenge.crecer.educacion.cdmx.gob.mx.educacion.cdmx.gob.mx

Name Error - The domain name does not exist
1
0
_acme-challenge.crecer.educacion.cdmx.gob.mx.crecer.educacion.cdmx.gob.mx

Name Error - The domain name does not exist
1
0



Permalink: https://check-your-website.server-daten.de/?i=73935a40-8cf1-4961-b5ec-7bb69ec27e4f


Last Result: https://check-your-website.server-daten.de/?q=crecer.educacion.cdmx.gob.mx - 2019-06-12 02:55:55