Shortcuts: 1. Basic DNS | 2. Url-Checks | 3. Comments | 4. Connections | 5. Certificates | 6. CT-Logs | 7. Html-Content | 8. CAA | 9. TXT |


N

No trusted Certificate

Checked:
10.05.2019 12:28:15


Older results

No older results found

1. Basic DNS and Nameserver Checks

HostTIP-Addressis auth.∑ Queries∑ Timeout
demetrashop.it
A
80.211.189.236
yes
1
0

AAAA

yes


www.demetrashop.it
A
80.211.189.236
yes
1
0

AAAA

yes



Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.05.2019, 00:00:00, Signature-Inception: 01.05.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
it
1 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 23.05.2019, 05:00:00, Signature-Inception: 10.05.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

2 DNSKEY RR found

Public Key with Algorithm 10, KeyTag 18395, Flags 256

Public Key with Algorithm 10, KeyTag 41901, Flags 257 (SEP = Secure Entry Point)

2 RRSIG RR to validate DNSKEY RR found

Algorithm: 10, 1 Labels, original TTL: 10800 sec, Signature-expiration: 09.06.2019, 09:02:34, Signature-Inception: 10.05.2019, 09:02:34, KeyTag 18395, Signer-Name: it

Algorithm: 10, 1 Labels, original TTL: 10800 sec, Signature-expiration: 09.06.2019, 09:02:34, Signature-Inception: 10.05.2019, 09:02:34, KeyTag 41901, Signer-Name: it

Status: Good - Algorithmus 10 and DNSKEY with KeyTag 18395 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 10 and DNSKEY with KeyTag 41901 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 10, KeyTag 41901, DigestType 2 and Digest "R/f3uiHkhZH2Fy7tE+NbZrk62fKID8m62mT2jOKOu5A=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
demetrashop.it
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


www.demetrashop.it
0 DS RR in the parent zone found


DomainNameserverNS-IP
www.demetrashop.it
  dns1.regdom.it / dns1.regdom.it

demetrashop.it
  dns1.regdom.it / dns1.regdom.it
194.69.192.4

  dns2.regdom.it / dns2rd
92.243.15.25
it
  a.dns.it


  dns.nic.it


  m.dns.it


  nameserver.cnr.it


  r.dns.it


  s.dns.it / s2.amx



SOA - records (beta)

Domain:it
Primary:dns.nic.it
Mail:hostmaster.nic.it
Serial:2019051012
Refresh:10800
Retry:900
Expire:604800
TTL:3600
num Entries:6


Domain:demetrashop.it
Primary:dns1.regdom.it
Mail:postmaster.demetrashop.it
Serial:2019050304
Refresh:86400
Retry:7200
Expire:604800
TTL:86400
num Entries:2


Domain:www.demetrashop.it
Primary:dns1.regdom.it
Mail:postmaster.demetrashop.it
Serial:2019050304
Refresh:86400
Retry:7200
Expire:604800
TTL:86400
num Entries:1


2. Url-Checks


show header:
Domainname Http-StatusredirectSec.G
• http://demetrashop.it/
80.211.189.236
301
http://www.demetrashop.it/
0.430
D
Date: Fri, 10 May 2019 10:28:46 GMT
Server: Apache/2.4.25 (Debian)
X-Redirect-By: WordPress
Location: http://www.demetrashop.it/
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

• http://www.demetrashop.it/
80.211.189.236
200

0.963
H
Date: Fri, 10 May 2019 10:28:46 GMT
Server: Apache/2.4.25 (Debian)
Link: <http://www.demetrashop.it/wp-json/>; rel="https://api.w.org/", <http://www.demetrashop.it/>; rel=shortlink
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

• https://demetrashop.it/
80.211.189.236
200

0.773
N
Certificate error: RemoteCertificateNameMismatch
Date: Fri, 10 May 2019 10:28:48 GMT
Server: Apache/2.4.25 (Debian)
Last-Modified: Fri, 10 May 2019 10:20:02 GMT
ETag: "745-58885e8d92cbf"
Accept-Ranges: bytes
Content-Length: 1861
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

• https://www.demetrashop.it/
80.211.189.236
200

0.550
N
Certificate error: RemoteCertificateNameMismatch
Date: Fri, 10 May 2019 10:28:49 GMT
Server: Apache/2.4.25 (Debian)
Last-Modified: Fri, 10 May 2019 10:20:02 GMT
ETag: "745-58885e8d92cbf"
Accept-Ranges: bytes
Content-Length: 1861
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

• http://demetrashop.it/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
80.211.189.236
404

0.107
A
Not Found
Visible Content: ERROR 404 - Not Found! The following error occurred: The requested URL was not found on this server. Please check the URL or contact the webmaster. Powered by ISPConfig
Date: Fri, 10 May 2019 10:28:50 GMT
Server: Apache/2.4.25 (Debian)
Last-Modified: Wed, 17 Apr 2019 13:12:01 GMT
ETag: "70e-586b9a1978949"
Accept-Ranges: bytes
Content-Length: 1806
Connection: close
Content-Type: text/html

• http://www.demetrashop.it/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
80.211.189.236
404

0.094
A
Not Found
Visible Content: ERROR 404 - Not Found! The following error occurred: The requested URL was not found on this server. Please check the URL or contact the webmaster. Powered by ISPConfig
Date: Fri, 10 May 2019 10:28:50 GMT
Server: Apache/2.4.25 (Debian)
Last-Modified: Wed, 17 Apr 2019 13:12:01 GMT
ETag: "70e-586b9a1978949"
Accept-Ranges: bytes
Content-Length: 1806
Connection: close
Content-Type: text/html

3. Comments

Aname "demetrashop.it" is domain, public suffix is "it", top-level-domain-type is "country-code", Country is Italy, tld-manager is "IIT - CNR"
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):1 complete Content-Type - header (5 urls)
https://demetrashop.it/ 80.211.189.236


Url with incomplete Content-Type - header - missing charset
https://www.demetrashop.it/ 80.211.189.236


Url with incomplete Content-Type - header - missing charset
http://demetrashop.it/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 80.211.189.236


Url with incomplete Content-Type - header - missing charset
http://www.demetrashop.it/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 80.211.189.236


Url with incomplete Content-Type - header - missing charset
Bhttps://demetrashop.it/ 80.211.189.236
200

Missing HSTS-Header
Bhttps://www.demetrashop.it/ 80.211.189.236
200

Missing HSTS-Header
CError - more then one version with Http-Status 200
CError - no preferred version www or non-www
Dhttp://demetrashop.it/ 80.211.189.236
301
http://www.demetrashop.it/
wrong redirect one version http to other version http - first redirect to https without new dns query
Hfatal error: http result with http-status 200, no encryption
Nhttps://demetrashop.it/ 80.211.189.236
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://www.demetrashop.it/ 80.211.189.236
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
AGood: Nameserver supports TCP connections: 2 good Nameserver
AGood: Nameserver supports Echo Capitalization: 2 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 6 good Nameserver
Nameserver doesn't pass all EDNS-Checks: dns1.regdom.it: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok (dns1.regdom.it). COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns1.regdom.it / 194.69.192.4: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok (dns1.regdom.it). COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns2.regdom.it / 92.243.15.25: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok (dns2rd). COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
ADuration: 48217 milliseconds, 48.217 seconds


4. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
demetrashop.it
80.211.189.236
443
name does not match
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
Chain (complete)
1CN=agomodel.it

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
www.demetrashop.it
80.211.189.236
443
name does not match
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
Chain (complete)
1CN=agomodel.it

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


5. Certificates

1.
1.
CN=agomodel.it
10.05.2019
08.08.2019
expires in 74 days
agomodel.it, www.agomodel.it - 2 entries

KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0368BC1C4C0110107E963DA60D45BA5FFFCF
Thumbprint:5FE6540A06F1FCD09917254BDC46E8D94EF9C5E9
SHA256 / Certificate:Am3oYJcAhjpr7P3RZsXdibWoMH+LGHilAyQzJS4lV7s=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):4b6fa75c8e47355f97cbe8c77e79cca66d0fe2500442cbc945d969e51ad350be
OCSP - Url:http://ocsp.int-x3.letsencrypt.org
OCSP - must staple:no
Certificate Transparency:yes


2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
17.03.2016
17.03.2021
expires in 661 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0A0141420000015385736A0B85ECA708
Thumbprint:E6A3B45B062D509B3382282D196EFE97D5956CCB
SHA256 / Certificate:JYR9Zo608E/dQLErawdAxWfafQJDCOtsLJb+QdneIY0=
SHA256 hex / Cert (DANE * 0 1):25847d668eb4f04fdd40b12b6b0740c567da7d024308eb6c2c96fe41d9de218d
SHA256 hex / PublicKey (DANE * 1 1):60b87575447dcba2a36b7d11ac09fb24a9db406fee12d2cc90180517616e8a18
OCSP - Url:http://isrg.trustid.ocsp.identrust.com
OCSP - must staple:no
Certificate Transparency:no


3.
CN=DST Root CA X3, O=Digital Signature Trust Co.
30.09.2000
30.09.2021
expires in 858 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:44AFB080D6A327BA893039862EF8406B
Thumbprint:DAC9024F54D8F6DF94935FB1732638CA6AD77C13
SHA256 / Certificate:BocmAzGnJAPZCfEF5pvPDTLhvSST/8bZIG0RvNZ3Bzk=
SHA256 hex / Cert (DANE * 0 1):0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739
SHA256 hex / PublicKey (DANE * 1 1):563b3caf8cfef34c2335caf560a7a95906e8488462eb75ac59784830df9e5b2b
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no



6. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
7
7

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
896875911
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-06 08:18:55
2019-08-04 08:18:55
demetrashop.it, www.demetrashop.it
2 entries


892639681
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-03 13:43:55
2019-08-01 13:43:55
demetrashop.it, www.demetrashop.it
2 entries


892636628
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-03 13:40:58
2019-08-01 13:40:58
demetrashop.it, www.demetrashop.it
2 entries


892628572
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-03 13:33:55
2019-08-01 13:33:55
demetrashop.it, www.demetrashop.it
2 entries


892619424
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-03 13:24:01
2019-08-01 13:24:01
demetrashop.it, www.demetrashop.it
2 entries


892290946
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-03 08:35:00
2019-08-01 08:35:00
demetrashop.it
1 entries


827596299
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-24 10:41:00
2019-06-22 10:41:00
demetrashop.it, www.demetrashop.it
2 entries



2. Source crt.sh - old and new certificates, sometimes very slow.

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
7
10

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1445000967
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-06 08:18:55
2019-08-04 08:18:55
demetrashop.it, www.demetrashop.it
2 entries


1447046306
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-03 13:43:55
2019-08-01 13:43:55
demetrashop.it, www.demetrashop.it
2 entries


1447038711
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-03 13:40:58
2019-08-01 13:40:58
demetrashop.it, www.demetrashop.it
2 entries


1446997538
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-03 13:33:55
2019-08-01 13:33:55
demetrashop.it, www.demetrashop.it
2 entries


1446948712
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-03 13:24:01
2019-08-01 13:24:01
demetrashop.it, www.demetrashop.it
2 entries


1445554686
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-03 08:35:00
2019-08-01 08:35:00
demetrashop.it
1 entries


1320312476
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-24 10:41:00
2019-06-22 10:41:00
demetrashop.it, www.demetrashop.it
2 entries


1137379183
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-01-23 10:36:18
2019-04-23 10:36:18
demetrashop.it, www.demetrashop.it
2 entries


972690005
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-11-24 10:59:49
2019-02-22 10:59:49
demetrashop.it, www.demetrashop.it
2 entries


848477017
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-09-25 08:40:16
2018-12-24 08:40:16
demetrashop.it, www.demetrashop.it
2 entries



7. Html-Content - Entries (BETA - mixed content and other checks)

Summary

Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://demetrashop.it/
80.211.189.236
a

1

0







link
other
1
7,358 Bytes
0







meta
other
2

0






https://www.demetrashop.it/
80.211.189.236
a

1

0







link
other
1
7,358 Bytes
0







meta
other
2

0






Details

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://demetrashop.it/
80.211.189.236
a

http://www.ispconfig.org


1
ok



link
shortcut icon
/favicon.ico
200
7358 Bytes

1
ok



meta
Content-Type
text/html; charset=utf-8


1
ok



meta
robots
noindex


1
ok


https://www.demetrashop.it/
80.211.189.236
a

http://www.ispconfig.org


1
ok



link
shortcut icon
/favicon.ico
200
7358 Bytes

1
ok



meta
Content-Type
text/html; charset=utf-8


1
ok



meta
robots
noindex


1
ok



8. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.demetrashop.it
0

no CAA entry found
1
0
demetrashop.it
0

no CAA entry found
1
0
it
0

no CAA entry found
1
0


9. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
demetrashop.it

ok
1
0
www.demetrashop.it

ok
1
0
_acme-challenge.demetrashop.it

Name Error - The domain name does not exist
1
0
_acme-challenge.www.demetrashop.it

Name Error - The domain name does not exist
1
0
_acme-challenge.demetrashop.it.demetrashop.it

Name Error - The domain name does not exist
1
0
_acme-challenge.www.demetrashop.it.demetrashop.it

Name Error - The domain name does not exist
1
0
_acme-challenge.www.demetrashop.it.www.demetrashop.it

Name Error - The domain name does not exist
1
0



Permalink: https://check-your-website.server-daten.de/?i=1c888b9f-3c88-466a-b807-01b2ddfed5f4


Last Result: https://check-your-website.server-daten.de/?q=demetrashop.it - 2019-05-10 12:28:15