Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

Http as Destination - no encryption

Checked:
30.08.2026 14:51:42

Older results

No older results found

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
fastly.linuxmint.io	CNAME	t.sni.global.fastly.net	yes	1	0
	A	151.101.7.52 Berlin/State of Berlin/Germany (DE) - Fastly, Inc. No Hostname found	yes
www.fastly.linuxmint.io		Name Error	yes	1	0
*.linuxmint.io	A	68.235.52.43	yes
	AAAA		yes
	CNAME		yes
*.fastly.linuxmint.io	A	68.235.52.43	yes
	AAAA		yes
	CNAME		yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 57780, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2026, 00:00:00 +, Signature-Inception: 30.08.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: io
io	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 57355, DigestType 2 and Digest laV8O6t4SdvN33xyracaiBRrFBEQMYylvmcgV+hlw+I=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner io., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2026, 05:00:00 +, Signature-Inception: 30.08.2026, 04:00:00 +, KeyTag 57780, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 43371, Flags 256


	Public Key with Algorithm 8, KeyTag 46863, Flags 256


	Public Key with Algorithm 8, KeyTag 57355, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner io., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 15.09.2026, 15:39:30 +, Signature-Inception: 25.08.2026, 14:39:30 +, KeyTag 57355, Signer-Name: io


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57355 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 57355, DigestType 2 and Digest "laV8O6t4SdvN33xyracaiBRrFBEQMYylvmcgV+hlw+I=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: linuxmint.io
linuxmint.io	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "kgmbi13t3828oh891mno41bfsi393hia" between the hashed NSEC3-owner "kgm6rtgab93ooecft3t4pbmvtlvtjshk" and the hashed NextOwner "kgmk2ok88jbnldqk3f4e2mdb25jdmgcu". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner kgm6rtgab93ooecft3t4pbmvtlvtjshk.io., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 15.09.2026, 15:39:30 +, Signature-Inception: 25.08.2026, 14:39:30 +, KeyTag 46863, Signer-Name: io


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "52ko96budrr3nmfkc8cbka2vfqnm5jps" as Owner. That's the Hash of "io" with the NextHashedOwnerName "52krgi087urg5259ptghlaikorb6o0nr". So that domain name is the Closest Encloser of "linuxmint.io". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner 52ko96budrr3nmfkc8cbka2vfqnm5jps.io., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 20.09.2026, 12:43:20 +, Signature-Inception: 30.08.2026, 11:43:20 +, KeyTag 46863, Signer-Name: io


	0 DNSKEY RR found




Zone: fastly.linuxmint.io
fastly.linuxmint.io	0 DS RR in the parent zone found

Zone: www.fastly.linuxmint.io
www.fastly.linuxmint.io	0 DS RR in the parent zone found

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	3 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 57780, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2026, 00:00:00 +, Signature-Inception: 30.08.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: net
net	1 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 37331, DigestType 2 and Digest LwvsLW95370dCP0ho6+S0OOaS57x4/QRH/8oJJDaRTs=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2026, 05:00:00 +, Signature-Inception: 30.08.2026, 04:00:00 +, KeyTag 57780, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 7272, Flags 256


	Public Key with Algorithm 13, KeyTag 37331, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner net., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 09.09.2026, 14:10:35 +, Signature-Inception: 25.08.2026, 14:05:35 +, KeyTag 37331, Signer-Name: net


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 37331 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 37331, DigestType 2 and Digest "LwvsLW95370dCP0ho6+S0OOaS57x4/QRH/8oJJDaRTs=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: fastly.net
fastly.net	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "ap27gbv43gq0pd0p7pujmpgv3q2t7q3o" between the hashed NSEC3-owner "ap22ie95pjt6ocm87u9k7g0ee9btj554" and the hashed NextOwner "ap2ap02rgisns1itfs5ngc3p41d41kpd". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner ap22ie95pjt6ocm87u9k7g0ee9btj554.net., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 04.09.2026, 03:40:09 +, Signature-Inception: 28.08.2026, 02:30:09 +, KeyTag 7272, Signer-Name: net


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "a1rt98bs5qgc9nfi51s9hci47uljg6jh" as Owner. That's the Hash of "net" with the NextHashedOwnerName "a1rtlnpgulogn7b9a62shje1u3ttp8dr". So that domain name is the Closest Encloser of "fastly.net". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner a1rt98bs5qgc9nfi51s9hci47uljg6jh.net., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 03.09.2026, 03:43:22 +, Signature-Inception: 27.08.2026, 02:33:22 +, KeyTag 7272, Signer-Name: net


	0 DNSKEY RR found




Zone: global.fastly.net
global.fastly.net	0 DS RR in the parent zone found


	0 DNSKEY RR found




Zone: sni.global.fastly.net
sni.global.fastly.net	0 DS RR in the parent zone found


	0 DNSKEY RR found




Zone: t.sni.global.fastly.net
t.sni.global.fastly.net	0 DS RR in the parent zone found


	0 DNSKEY RR found

3. Name Servers

Domain	Nameserver	NS-IP
www.fastly.linuxmint.io	• ryleigh.ns.cloudflare.com
linuxmint.io	• ryleigh.ns.cloudflare.com / 67m127	108.162.194.198 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	162.159.38.198 Ashburn/Virginia/United States (US) - Cloudflare, Inc.	•
	•	172.64.34.198 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	2606:4700:50::a29f:26c6 Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	•
	•	2803:f800:50::6ca2:c2c6 San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.	•
	•	2a06:98c1:50::ac40:22c6 London/England/United Kingdom (GB) - CloudFLARENET-EU	•
	• simon.ns.cloudflare.com / 67m195	108.162.193.232 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	172.64.33.232 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	173.245.59.232 Toronto/Ontario/Canada (CA) - Cloudflare, Inc.	•
	•	2606:4700:58::adf5:3be8 Montreal/Quebec/Canada (CA) - Cloudflare, Inc.	•
	•	2803:f800:50::6ca2:c1e8 San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.	•
	•	2a06:98c1:50::ac40:21e8 London/England/United Kingdom (GB) - CloudFLARENET-EU	•
io	• a0.nic.io / fra1.micro.hosts.meta.redstone.afilias-nst.info-1740000113		•
	• a2.nic.io / FRA4		•
	• b0.nic.io / app29.lax1.hosts.meta.redstone.afilias-nst.info-1633102198		•
	• c0.nic.io / app20.lax1.hosts.meta.redstone.afilias-nst.info-1633102198		•

t.sni.global.fastly.net	• ns1.fastly.net / cache-ber1080052	23.235.32.32 Montreal/Quebec/Canada (CA) - Fastly, Inc.	•
	•	2a04:4e47::32 Washington/District of Columbia/United States (US) - Fastly, Inc.	•
sni.global.fastly.net	• ns1.fastly.net / cache-ber1080041	23.235.32.32 Montreal/Quebec/Canada (CA) - Fastly, Inc.	•
	•	2a04:4e47::32 Washington/District of Columbia/United States (US) - Fastly, Inc.	•
global.fastly.net	• ns1.fastly.net / cache-ber1080047	23.235.32.32 Montreal/Quebec/Canada (CA) - Fastly, Inc.	•
	•	2a04:4e47::32 Washington/District of Columbia/United States (US) - Fastly, Inc.	•
fastly.net	• ns1.fastly.net / cache-ber1080026	23.235.32.32 Montreal/Quebec/Canada (CA) - Fastly, Inc.	•
	•	2a04:4e47::32 Washington/District of Columbia/United States (US) - Fastly, Inc.	•
	• ns2.fastly.net / cache-ber1080049	104.156.80.32 San Francisco/California/United States (US) - Fastly, Inc.	•
	•	2a04:4e47:1::32 Washington/District of Columbia/United States (US) - Fastly, Inc.	•
	• ns3.fastly.net / cache-ber1080029	23.235.36.32 Montreal/Quebec/Canada (CA) - Fastly, Inc.	•
	•	2a04:4e47:2::32 Washington/District of Columbia/United States (US) - Fastly, Inc.	•
	• ns4.fastly.net / cache-ber1080055	104.156.84.32 Montreal/Quebec/Canada (CA) - Fastly, Inc.	•
	•	2a04:4e47:3::32 Washington/District of Columbia/United States (US) - Fastly, Inc.	•
net	• a.gtld-servers.net / nnn1-defra-5		•
	• b.gtld-servers.net / nnn1-elwaw4		•
	• c.gtld-servers.net / nnn1-par6		•
	• d.gtld-servers.net / nnn1-par6		•
	• e.gtld-servers.net / nnn1-defra-5		•
	• f.gtld-servers.net / nnn1-defra-4		•
	• g.gtld-servers.net / nnn1-defra-4		•
	• h.gtld-servers.net / nnn1-defra-4		•
	• i.gtld-servers.net / nnn1-defra-4		•
	• j.gtld-servers.net / nnn1-frmrs-2		•
	• k.gtld-servers.net / nnn1-frmrs-2		•
	• l.gtld-servers.net / nnn1-frmrs-2		•
	• m.gtld-servers.net / nnn1-frmrs-2		•

4. SOA-Entries

Domain:	io
Zone-Name:	io
Primary:	a0.nic.io
Mail:	hostmaster.donuts.email
Serial:	1788093639
Refresh:	7200
Retry:	900
Expire:	1209600
TTL:	3600
num Entries:	4

Domain:	linuxmint.io
Zone-Name:	linuxmint.io
Primary:	ryleigh.ns.cloudflare.com
Mail:	dns.cloudflare.com
Serial:	2411865368
Refresh:	10000
Retry:	2400
Expire:	604800
TTL:	1800
num Entries:	12

Domain:	www.fastly.linuxmint.io
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1


Domain:	net
Zone-Name:	net
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1788094295
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	900
num Entries:	6

Domain:	net
Zone-Name:	net
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1788094310
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	900
num Entries:	7

Domain:	fastly.net
Zone-Name:	fastly.net
Primary:	ns1.fastly.net
Mail:	hostmaster.fastly.com
Serial:	2017052201
Refresh:	3600
Retry:	600
Expire:	604800
TTL:	30
num Entries:	8

Domain:	global.fastly.net
Zone-Name:	fastly.net
Primary:	ns1.fastly.net
Mail:	hostmaster.fastly.com
Serial:	2017052201
Refresh:	3600
Retry:	600
Expire:	604800
TTL:	30
num Entries:	2

Domain:	sni.global.fastly.net
Zone-Name:	fastly.net
Primary:	ns1.fastly.net
Mail:	hostmaster.fastly.com
Serial:	2017052201
Refresh:	3600
Retry:	600
Expire:	604800
TTL:	30
num Entries:	2

Domain:	t.sni.global.fastly.net
Zone-Name:	fastly.net
Primary:	ns1.fastly.net
Mail:	hostmaster.fastly.com
Serial:	2017052201
Refresh:	3600
Retry:	600
Expire:	604800
TTL:	30
num Entries:	2

5. Screenshots

Startaddress: https://fastly.linuxmint.io/, address used: https://fastly.linuxmint.io/, Screenshot created 2026-08-30 14:54:16 +00:0

Mobil (412px x 732px)

788 milliseconds

Screenshot mobile - https://fastly.linuxmint.io/

Mobil + Landscape (732px x 412px)

791 milliseconds

Screenshot mobile landscape - https://fastly.linuxmint.io/

Screen (1280px x 1680px)

863 milliseconds

Screenshot Desktop - https://fastly.linuxmint.io/

Mobile- and other Chrome-Checks

	width	height
visual Viewport	397	732
content Size	397	2308

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://fastly.linuxmint.io/ 151.101.7.52 No Compression used - 5459 / 22583 - 24.17 % possible	200	Html is minified: 135.18 %	0.016	H
Connection: keep-alive
Server: Lighttpd
Via: 1.1 varnish,1.1 varnish
Accept-Ranges: bytes
Age: 40991
Date: Sun, 30 Aug 2026 12:53:17 GMT
X-Served-By: cache-chi-kmdw8640077-CHI, cache-ber1080034-BER
X-Cache: HIT, HIT
X-Cache-Hits: 5, 0
X-Timer: S1788094398.530841,VS0,VE1
Content-Length: 22583
Content-Type: text/html; charset=UTF-8

• https://fastly.linuxmint.io/ 151.101.7.52 No Compression used - 5459 / 22583 - 24.17 % possible Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 135.18 % Other inline scripts (∑/total): 0/0	1.843	B
Connection: keep-alive
Server: Lighttpd
Via: 1.1 varnish,1.1 varnish
Accept-Ranges: bytes
Date: Sun, 30 Aug 2026 12:53:17 GMT
Age: 40991
X-Served-By: cache-chi-kmdw8640077-CHI, cache-ber1080039-BER
X-Cache: HIT, HIT
X-Cache-Hits: 5, 1
X-Timer: S1788094398.632698,VS0,VE0
Content-Length: 22583
Content-Type: text/html; charset=UTF-8

• http://fastly.linuxmint.io/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 151.101.7.52 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 108.60 % Other inline scripts (∑/total): 0/0	0.250	A
Not Found
Visible Content:
Connection: keep-alive
Server: Lighttpd
Via: 1.1 varnish,1.1 varnish
Accept-Ranges: bytes
Age: 0
Date: Sun, 30 Aug 2026 12:53:22 GMT
X-Served-By: cache-chi-kigq8000172-CHI, cache-ber1080034-BER
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1788094403.580891,VS0,VE227
Content-Length: 341
Content-Type: text/html

• https://151.101.7.52/ 151.101.7.52	421	Html is minified: 102.11 %	1.827	N
Misdirected Request
Certificate error: RemoteCertificateNameMismatch
Connection: keep-alive
X-Served-By: cache-ber1080038
Content-Length: 291
Content-Type: text/plain; charset=utf-8

7. Comments

	1. General Results, most used to calculate the result
A	name "fastly.linuxmint.io" is subdomain, public suffix is ".io", top-level-domain is ".io", top-level-domain-type is "country-code", Country is British Indian Ocean Territory (the), tld-manager is "IO Top Level Domain Registry", num .io-domains preloaded: 2787 (complete: 276475)
A	Good: All ip addresses are public addresses
	Warning: Only one ip address found: fastly.linuxmint.io has only one ip address.
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: fastly.linuxmint.io has no ipv6 address.
A	Good: No asked Authoritative Name Server had a timeout
A	DNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
A	Good: one preferred version: non-www is preferred
A	Good: No cookie sent via http.
	HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):2 complete Content-Type - header (3 urls)
	http://fastly.linuxmint.io/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 151.101.7.52		Url with incomplete Content-Type - header - missing charset
B	https://fastly.linuxmint.io/ 151.101.7.52	200	Missing HSTS-Header
H	Fatal error: http result with http-status 200, no encryption. Add a redirect http ⇒ https, so every connection is secure. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop.
M	https://151.101.7.52/ 151.101.7.52	421	Misconfiguration - main pages should never send http status 400 - 499
N	https://151.101.7.52/ 151.101.7.52	421	Error - Certificate isn't trusted, RemoteCertificateNameMismatch
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain fastly.linuxmint.io, 1 ip addresses.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.fastly.linuxmint.io
	2. Header-Checks
F	fastly.linuxmint.io 151.101.7.52	Content-Security-Policy	Critical: Missing Header:
F	fastly.linuxmint.io 151.101.7.52	X-Content-Type-Options	Critical: Missing Header:
F	fastly.linuxmint.io 151.101.7.52	Referrer-Policy	Critical: Missing Header:
F	fastly.linuxmint.io 151.101.7.52	Permissions-Policy	Critical: Missing Header:
B	fastly.linuxmint.io 151.101.7.52	Cross-Origin-Embedder-Policy	Info: Missing Header
B	fastly.linuxmint.io 151.101.7.52	Cross-Origin-Opener-Policy	Info: Missing Header
B	fastly.linuxmint.io 151.101.7.52	Cross-Origin-Resource-Policy	Info: Missing Header
	3. DNS- and NameServer - Checks
A	Info:: 7 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
A	Info:: 7 Queries complete, 7 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
	Ok (4 - 8):: An average of 3.5 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 2 different Name Servers found: ryleigh.ns.cloudflare.com, simon.ns.cloudflare.com, 2 Name Servers included in Delegation: ryleigh.ns.cloudflare.com, simon.ns.cloudflare.com, 2 Name Servers included in 1 Zone definitions: ryleigh.ns.cloudflare.com, simon.ns.cloudflare.com, 1 Name Servers listed in SOA.Primary: ryleigh.ns.cloudflare.com.
A	Good: Only one SOA.Primary Name Server found.: ryleigh.ns.cloudflare.com.
A	Good: SOA.Primary Name Server included in the delegation set.: ryleigh.ns.cloudflare.com.
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Info: Ipv4-Subnet-list: 6 Name Servers, 4 different subnets (first Byte): 108., 162., 172., 173., 4 different subnets (first two Bytes): 108.162., 162.159., 172.64., 173.245., 6 different subnets (first three Bytes): 108.162.193., 108.162.194., 162.159.38., 172.64.33., 172.64.34., 173.245.59.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Info: IPv6-Subnet-list: 6 Name Servers with IPv6, 3 different subnets (first block): 2606:, 2803:, 2a06:, 3 different subnets (first two blocks): 2606:4700:, 2803:f800:, 2a06:98c1:, 4 different subnets (first three blocks): 2606:4700:0050:, 2606:4700:0058:, 2803:f800:0050:, 2a06:98c1:0050:, 4 different subnets (first four blocks): 2606:4700:0050:0000:, 2606:4700:0058:0000:, 2803:f800:0050:0000:, 2a06:98c1:0050:0000:
A	Good: Name Server IPv6 addresses from different subnets found.
A	Good: Nameserver supports TCP connections: 12 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 12 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 12 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 12 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: a0.nic.io: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (fra1.micro.hosts.meta.redstone.afilias-nst.info-1740000113). COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ryleigh.ns.cloudflare.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
A	Good: All SOA have the same Serial Number
A	Good: CAA entries found, creating certificate is limited: certainly.com is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: globalsign.com is allowed to create certificates
A	Good: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
	Warning: Unknown CAA found: certainly.com isn't defined. Unknown entry. May be wrong written, may be not longer valid. May be a missing entry in this tool.
	4. Content- and Performance-critical Checks
A	Good: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	https://fastly.linuxmint.io/ 151.101.7.52	200	Warning: https result with status 200 and size greater then 1024 Bytes without Compression found. Add Compression support (gzip, deflate, br - these are checked) so the html content is compressed.
A	Good: No https + http status 200 with inline CSS / JavaScript found
	https://fastly.linuxmint.io/ 151.101.7.52	200	Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
	https://fastly.linuxmint.io/ 151.101.7.52	200	Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 7 script elements without defer/async.
	Warning: Svg-Images greater 1024 Bytes without internal compression are found. Svg is an Xml-Application, so Compression is required to reduce the size of the file. 2 images (type image/svg+xml, image/x-icon, image/vnd.microsoft.icon) found without compression.
	Warning: CSS / JavaScript found without Compression. Compress these ressources, gzip, deflate, br are checked. 16 external CSS / JavaScript files without Compression found - 1 with Compression, 17 complete
	Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 16 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 1 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 17 complete.
	Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 2 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 2 complete.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
	Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 2 img-elements without alt-attribute, 0 img-elements with empty alt-attribute found.
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Duration: 158930 milliseconds, 158.930 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

fastly.linuxmint.io

151.101.7.52

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

fastly.linuxmint.io

151.101.7.52

443

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=fastly.linuxmint.io
	2	CN=YR1, O=Let's Encrypt, C=US
	3	CN=Root YR, O=ISRG, C=US

151.101.7.52

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

151.101.7.52

443

name does not match

Tls12

ECDH Ephermal

255

Aes128

128

Sha256

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain (complete)	1	CN=t.sni-820-default.ssl.fastly.net
	2	CN=Certainly Intermediate R1, O=Certainly, C=US

9. Certificates

CN=fastly.linuxmint.io

16.07.2026

14.10.2026
expires in 39 days

fastly.linuxmint.io - 1 entry

CN=fastly.linuxmint.io

16.07.2026

14.10.2026
expires in 39 days

fastly.linuxmint.io - 1 entry

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	05617402E31E8F2C74BF7838004CD628CA16
Thumbprint:	2344414EC2CD5E7402DA9CF539E23267A180B926
SHA256 / Certificate:	uh+/XCwKEj8aFN2Fsw8UBrISObJqGQ+QfP9+komuqAw=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	abb98744cd100b69cf3048ee3d6cecc974490e855f4dca99af4f0c8cf3fd0ec1
SHA256 hex / Subject Public Key Information (SPKI):	abb98744cd100b69cf3048ee3d6cecc974490e855f4dca99af4f0c8cf3fd0ec1 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=fastly.linuxmint.io

16.07.2026

14.10.2026
expires in 39 days

fastly.linuxmint.io - 1 entry

CN=fastly.linuxmint.io

16.07.2026

14.10.2026
expires in 39 days

fastly.linuxmint.io - 1 entry

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	05617402E31E8F2C74BF7838004CD628CA16
Thumbprint:	2344414EC2CD5E7402DA9CF539E23267A180B926
SHA256 / Certificate:	uh+/XCwKEj8aFN2Fsw8UBrISObJqGQ+QfP9+komuqAw=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	abb98744cd100b69cf3048ee3d6cecc974490e855f4dca99af4f0c8cf3fd0ec1
SHA256 hex / Subject Public Key Information (SPKI):	abb98744cd100b69cf3048ee3d6cecc974490e855f4dca99af4f0c8cf3fd0ec1 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=YR1, O=Let's Encrypt, C=US

03.09.2025

03.09.2028
expires in 729 days

CN=YR1, O=Let's Encrypt, C=US

03.09.2025

03.09.2028
expires in 729 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00A20253F15F2691C05DC1CE13B9BCCA4E
Thumbprint:	CBCFD09CE3CD22D99D94E58F92E9898FBEE51A5E
SHA256 / Certificate:	E5SWNNmc1v1qqAvANP76zOsZaf7vmGWGcT7NuwV1jT8=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	2e8307068b6db620e4a39d068b5dee5d6ef5788cbb2c0b6d23ead84fcc17178c
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=YR1, O=Let's Encrypt, C=US

03.09.2025

03.09.2028
expires in 729 days

CN=YR1, O=Let's Encrypt, C=US

03.09.2025

03.09.2028
expires in 729 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00A20253F15F2691C05DC1CE13B9BCCA4E
Thumbprint:	CBCFD09CE3CD22D99D94E58F92E9898FBEE51A5E
SHA256 / Certificate:	E5SWNNmc1v1qqAvANP76zOsZaf7vmGWGcT7NuwV1jT8=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	2e8307068b6db620e4a39d068b5dee5d6ef5788cbb2c0b6d23ead84fcc17178c
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=Root YR, O=ISRG, C=US

03.09.2025

03.09.2032
expires in 2190 days

CN=Root YR, O=ISRG, C=US

03.09.2025

03.09.2032
expires in 2190 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00FAA6275DC258431D9766EC3045EF24AC
Thumbprint:	18F47BAE342367CBBF120681E6721D6AADC386C7
SHA256 / Certificate:	JwxktroarpSwdW6D2NsHMvW1NLzcVF1E4zTV3U0Q/sA=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	7e4e8838a8add6295de7ae3b047d3aba3488ab95db0a0aa56d897a00d8618bcf
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=Root YR, O=ISRG, C=US

13.05.2026

03.09.2032
expires in 2190 days

CN=Root YR, O=ISRG, C=US

13.05.2026

03.09.2032
expires in 2190 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00F24B6D17F9D9AD7CB1C9FEA78782699F
Thumbprint:	AB9D0263244DD0326EB67015705A667E79CFE998
SHA256 / Certificate:	ByY50LFA1b/64WrZw/bMYIYEBiH1HuYabUaokVwHz3Y=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	7e4e8838a8add6295de7ae3b047d3aba3488ab95db0a0aa56d897a00d8618bcf
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3194 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3194 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3194 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3194 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=t.sni-820-default.ssl.fastly.net

30.08.2026

29.09.2026
expires in 24 days

t.sni-820-default.ssl.fastly.net - 1 entry

CN=t.sni-820-default.ssl.fastly.net

30.08.2026

29.09.2026
expires in 24 days

t.sni-820-default.ssl.fastly.net - 1 entry

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	78DEFC5F5EF88F539B907A8BA9BBA6E6CF8E
Thumbprint:	2783833229D2D3A7CF5A95E2B5B44BE592BE7943
SHA256 / Certificate:	Fqgt9QKkHmeSBEc8m2cREnmHHzWsuqjiaEhPdBYkwxs=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	cd050aecbe719888682bfa58a75f1a2e3c099052feefd1df1e5dd3bd38c48f83
SHA256 hex / Subject Public Key Information (SPKI):	cd050aecbe719888682bfa58a75f1a2e3c099052feefd1df1e5dd3bd38c48f83 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=Certainly Intermediate R1, O=Certainly, C=US

22.06.2022

22.06.2032
expires in 2117 days

CN=Certainly Intermediate R1, O=Certainly, C=US

22.06.2022

22.06.2032
expires in 2117 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	11831CDE4CB573E5
Thumbprint:	FEDEA3AA3B69BF9B84DB1FBE46855AF990EDBDB1
SHA256 / Certificate:	/sQeMsp1wpWmJA+mOdOr47+1yxMdZpDiMxoXa+0uW9I=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	a16eec98284c251727cd339b17b2be1f322745e00f4f107f2f587a7994e6c3d4
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

01.09.2009

01.01.2038
expires in 4136 days

CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

01.09.2009

01.01.2038
expires in 4136 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00
Thumbprint:	B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E
SHA256 / Certificate:	LOHLC/nS+eECmT++IVFSw7LdDKveHGjlMZuDkVTbt/U=
SHA256 hex / Cert (DANE * 0 1):	2ce1cb0bf9d2f9e102993fbe215152c3b2dd0cabde1c68e5319b839154dbb7f5
SHA256 hex / PublicKey (DANE * 1 1):	808d68b3fab4884a5f971ace7d10550d7a95a163774f3ec36afffb213fbe4c74
SHA256 hex / Subject Public Key Information (SPKI):	808d68b3fab4884a5f971ace7d10550d7a95a163774f3ec36afffb213fbe4c74
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuer				last 7 days	active	num Certs
CN=YR1, O=Let's Encrypt, C=US				0	1	1

CertSpotter-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
15891244168 leaf cert	CN=YR1, O=Let's Encrypt, C=US	2026-07-16 01:47:44	2026-10-14 01:47:43	fastly.linuxmint.io - 1 entries

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://fastly.linuxmint.io/ 151.101.7.52	a		75		0			0	0	0
	form		1	2,079,176 Bytes	0	1	0	0	0	0
	img		2	13,864 Bytes	0	2	0	0	0	0
	link	stylesheet	10	607,400 Bytes	0	9	1	1	0	0	-1
	link	other	1	9,662 Bytes	0	1	0	0	0	0
	meta	other	7		0			0	0	0
	script		7	295,971 Bytes	0	7	0	0	0	0

Details (currently limited to 500 rows - some problems with spam users)

Domainname	Html-Element	name/equiv/ property/rel	href/src/content	HttpStatus	∑
https://fastly.linuxmint.io/ 151.101.7.52	a		#			5	ok
							ok


	a		./list.php?release=alfa			1	ok
							ok


	a		./list.php?release=gigi			1	ok
							ok


	a		./list.php?release=vanessa			1	ok
							ok


	a		./list.php?release=vera			1	ok
							ok


	a		./list.php?release=victoria			1	ok
							ok


	a		./list.php?release=virginia			1	ok
							ok


	a		./list.php?release=wilma			1	ok
							ok


	a		./list.php?release=xia			1	ok
							ok


	a		./list.php?release=zara			1	ok
							ok


	a		./list.php?release=zena			1	ok
							ok


	a		./list-src.php?release=alfa			1	ok
							ok


	a		./list-src.php?release=gigi			1	ok
							ok


	a		./list-src.php?release=vanessa			1	ok
							ok


	a		./list-src.php?release=vera			1	ok
							ok


	a		./list-src.php?release=victoria			1	ok
							ok


	a		./list-src.php?release=virginia			1	ok
							ok


	a		./list-src.php?release=wilma			1	ok
							ok


	a		./list-src.php?release=xia			1	ok
							ok


	a		./list-src.php?release=zara			1	ok
							ok


	a		./list-src.php?release=zena			1	ok
							ok


	a		/			3	ok
							ok


	a		http://packages.linuxmint.com			1	ok
							ok


	a		https://blog.linuxmint.com			1	ok
							ok


	a		https://blog.linuxmint.com/?feed=rss2			1	ok
							ok


	a		https://community.linuxmint.com			1	ok
							ok


	a		https://discord.gg/mint			1	ok
							ok


	a		https://forums.linuxmint.com			2	ok
							ok


	a		https://github.com/linuxmint			1	ok
							ok


	a		https://kiwiirc.com/client/irc.spotchat.org/#linuxmint-help			2	ok
							ok


	a		https://linuxmint-installation-guide.readthedocs.io/en/latest/			2	ok
							ok


	a		https://linuxmint-user-guide.readthedocs.io/en/latest/			1	ok
							ok


	a		https://packages.ubuntu.com			1	ok
							ok


	a		https://twitter.com/linux_mint			2	ok
							ok


	a		https://www.facebook.com/pages/Linux-Mint/185238108180410			2	ok
							ok


	a		https://www.github.com/linuxmint			2	ok
							ok


	a		https://www.linuxmint.com/			1	ok
							ok


	a		https://www.linuxmint.com/about.php			2	ok
							ok


	a		https://www.linuxmint.com/contactus.php			1	ok
							ok


	a		https://www.linuxmint.com/documentation.php			1	ok
							ok


	a		https://www.linuxmint.com/donors.php			3	ok
							ok


	a		https://www.linuxmint.com/download.php			2	ok
							ok


	a		https://www.linuxmint.com/download_all.php			1	ok
							ok


	a		https://www.linuxmint.com/download_lmde.php			1	ok
							ok


	a		https://www.linuxmint.com/faq.php			2	ok
							ok


	a		https://www.linuxmint.com/getinvolved.php			2	ok
							ok


	a		https://www.linuxmint.com/links.php			1	ok
							ok


	a		https://www.linuxmint.com/mirrors.php			1	ok
							ok


	a		https://www.linuxmint.com/partners.php			1	ok
							ok


	a		https://www.linuxmint.com/privacy.php			2	ok
							ok


	a		https://www.linuxmint.com/screenshots.php			1	ok
							ok


	a		https://www.linuxmint.com/sponsors.php			1	ok
							ok


	a		https://www.linuxmint.com/store.php			1	ok
							ok


	a		https://www.linuxmint.com/teams.php			1	ok
							ok


	a		https://www.reddit.com/r/linuxmint/			1	ok
							ok


	a		mailto:root@linuxmint.com			1	ok
							ok


	form	get	./search.php		200	1	ok
				text/html; charset=UTF-8 missing X-Content-Type-Options nosniff			ok
				2079176 Bytes

	img	src	web/img/logo.svg		200	1	ok
	no alt-Attribute			image/svg+xml missing X-Content-Type-Options nosniff			ok
	No Cache-Control header			No Compression - 7071 Bytes
	ETag: "3797191471"

	img	src	web/img/logo-mono.svg		200	1	ok
	no alt-Attribute			image/svg+xml missing X-Content-Type-Options nosniff			ok
	No Cache-Control header			No Compression - 6793 Bytes
	ETag: "1338297174"

	link	shortcut icon	web/img/favicon.ico		200	1	ok
				image/vnd.microsoft.icon missing X-Content-Type-Options nosniff			ok
	No Cache-Control header			No Compression - 9662 Bytes
	ETag: "4048437814"

	link	stylesheet	https://fonts.googleapis.com/css?family=Poppins:300,400,500,600,700,800,900%7CPlayfair+Display:400,400i,700,700i%7CRoboto:400,400i,500,700		200	1	ok
				text/css; charset=utf-8 X-Content-Type-Options nosniff found			ok
				Compression (gzip): 2359/35887 Bytes
	Server-Header Access-Control-Allow-Origin: *			Cross-Origin Resource Sharing (CORS) supported
	missing crossorigin=anonymous\|use-credentials and integrity - attribute, possible hash-values: sha256-XOmpSLQU9NkFSE2ihp7ypPVvpPDuWCNVNMZxVujSGjQ= sha384-9llshfg4wqoyXbO+2xXnSG5iKHtDFDWC//zCIlClAReunGwhHsf+Ay9hpxzSF13G sha512-Qx6A58D7lgtX8l2Adgm6zjB5FnObvY6dLsp5zwfwfbQkS0vvul21HxauHTXuYQJjgEER+bo4DWFXmn81gX9adw== <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Poppins:300,400,500,600,700,800,900%7CPlayfair+Display:400,400i,700,700i%7CRoboto:400,400i,500,700" crossorigin="anonymous" integrity="sha256-XOmpSLQU9NkFSE2ihp7ypPVvpPDuWCNVNMZxVujSGjQ=" />

	link	stylesheet	web/css/cryptofont/cryptofont.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 48593 Bytes
	ETag: "3744323736"
	local SRI possible, possible hash-values: sha256-2hlLfAHCs49r4T9B92Us0jH9vpDFf89awnp2lSVh/M0= sha384-hPx9hAv9qMvv3Yt8TyzU4HQJEOWTWiZBeSotBwK86p9rDKgSVOVdjW8k4laUa4SA sha512-Z7SivAMNIKBxiI6bY3cTLxALqMBnE4ksHrEmutbUetZvCjggiwTtxrzMbSEAAFXxfvFuXWkUWRp8a6s4MYjwYQ== <link rel="stylesheet" href="web/css/cryptofont/cryptofont.css" crossorigin="anonymous" integrity="sha256-2hlLfAHCs49r4T9B92Us0jH9vpDFf89awnp2lSVh/M0=" />

	link	stylesheet	web/css/grid-gallery.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 2414 Bytes
	ETag: "3091646799"
	local SRI possible, possible hash-values: sha256-LsivKMCCkhXMigUSbxjRfw7AvNDGbgN1brWVFr2knS4= sha384-THXYyvc1EZ/a57GsS88FI3KSZFpdY2WihXXe26sYaAZULsqHHKAvQRKHxzZsLDFk sha512-rhY019TddUndbZcW1vyE7M5lWP+EcyHIPi4uM8QvDkHfbdtNme2mnil7oaiRThbByuUxJEYwd6aHubPkWRPQxQ== <link rel="stylesheet" href="web/css/grid-gallery.css" crossorigin="anonymous" integrity="sha256-LsivKMCCkhXMigUSbxjRfw7AvNDGbgN1brWVFr2knS4=" />

	link	stylesheet	web/css/mint.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 4512 Bytes
	ETag: "2543723648"
	local SRI possible, possible hash-values: sha256-LPlfAZH3WP2SB3UdXGZehzQeoX/qdAA5fZIGxc5tUk0= sha384-vcV/V26N813pocZVVLQsrA17K3gkp0UZRI5kjRv8gGcIh3LN+N/IFIwNuVS4NjJ6 sha512-28uocXxzewlGBd5Zm+DyLqsmCORqQDeOgCvq3iutC40xuW/Rg1JuxW08b0tTxMCeDARJZQWOmxUml6yNOLyv5g== <link rel="stylesheet" href="web/css/mint.css" crossorigin="anonymous" integrity="sha256-LPlfAZH3WP2SB3UdXGZehzQeoX/qdAA5fZIGxc5tUk0=" />

	link	stylesheet	web/fontawesome/css/all.min.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 102641 Bytes
	ETag: "1635032277"
	local SRI possible, possible hash-values: sha256-wiz7ZSCn/btzhjKDQBms9Hx4sSeUYsDrTLg7roPstac= sha384-t1nt8BQoYMLFN5p42tRAtuAAFQaCQODekUVeKKZrEnEyp4H2R0RHFz0KWpmj7i8g sha512-DTOQO9RWCH3ppGqcWaEA1BIZOC6xxalwEsw9c2QQeAIftl+Vegovlnee1c9QX4TctnWMn13TZye+giMm8e2LwA== <link rel="stylesheet" href="web/fontawesome/css/all.min.css" crossorigin="anonymous" integrity="sha256-wiz7ZSCn/btzhjKDQBms9Hx4sSeUYsDrTLg7roPstac=" />

	link	stylesheet	web/wizixo/template/assets/css/style.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 354942 Bytes
	ETag: "1309515000"
	local SRI possible, possible hash-values: sha256-sreIFvLBnA77q6mC7q0gB7/dLogt7SeUFyZxBsGyhiY= sha384-kCXbO/UDxQG/WKR5338R43LqMSU9UvjMZGndPLPq25mliboOboK7+DwYFkeabfCj sha512-jpUbjKZUKpZZUTen/OaFsyO7f1tGXbNKZcwxY+95i8/p8D85aTvUGXR8Bjb5qQwz0ANilEyHjDM1Zq8de0k/iQ== <link rel="stylesheet" href="web/wizixo/template/assets/css/style.css" crossorigin="anonymous" integrity="sha256-sreIFvLBnA77q6mC7q0gB7/dLogt7SeUFyZxBsGyhiY=" />

	link	stylesheet	web/wizixo/template/assets/vendor/animate/animate.min.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 57995 Bytes
	ETag: "2617723691"
	local SRI possible, possible hash-values: sha256-jAQW9lYIdX8PrI2vVF8uWrlKbjS0XahPnO5mHL1aMiY= sha384-fn6PD5186z0r5heUNNc8c01XCdoU39v85ifKlf2WwYC6qQGzc32AI89GB9r5Vy3/ sha512-vy2Whe4R0BBVhbPwQAL2NLaWiZc2vxWoB0ApOSXfRAUr2tddyUrfwhZ9XnOPOoThCrW0NpF2DGRGe32IsZN9eQ== <link rel="stylesheet" href="web/wizixo/template/assets/vendor/animate/animate.min.css" crossorigin="anonymous" integrity="sha256-jAQW9lYIdX8PrI2vVF8uWrlKbjS0XahPnO5mHL1aMiY=" />

	link	stylesheet	web/wizixo/template/assets/vendor/fancybox/css/jquery.fancybox.min.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 14143 Bytes
	ETag: "2197054978"
	local SRI possible, possible hash-values: sha256-cWVaOoDw7eapAR4at9WERzwpAmwJ9QDL6b75nalscP4= sha384-uDQxBtnTESbDJ/knFKqeLyGCS7QNSUBIlQ3nPzw/31hcurhWa0i9g7o48rUmZynx sha512-Vw2DP0mig7qfmLWuSormYvPA4B8QiIFl1JKp/K/ikFvH6nlkIwnxKKxT9JvVYML+cEUqsrwU3G0Sk5oVCNSyaw== <link rel="stylesheet" href="web/wizixo/template/assets/vendor/fancybox/css/jquery.fancybox.min.css" crossorigin="anonymous" integrity="sha256-cWVaOoDw7eapAR4at9WERzwpAmwJ9QDL6b75nalscP4=" />

	link	stylesheet	web/wizixo/template/assets/vendor/owlcarousel/css/owl.carousel.min.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 3351 Bytes
	ETag: "2875898091"
	local SRI possible, possible hash-values: sha256-UhQQ4fxEeABh4JrcmAJ1+16id/1dnlOEVCFOxDef9Lw= sha384-kcNNzf7wI8//ZkNUaDd5JwxLoFaBgkj9Z4O4NwtuX9Lkmsz0HoITOxJsGkYxDuyG sha512-tS3S5qG0BlhnQROyJXvNjeEM4UpMXHrQfTGmbQ1gKmelCxlSEBUaxhRBj/EFTzpbP4RVSrpEikbmdJobCvhE3g== <link rel="stylesheet" href="web/wizixo/template/assets/vendor/owlcarousel/css/owl.carousel.min.css" crossorigin="anonymous" integrity="sha256-UhQQ4fxEeABh4JrcmAJ1+16id/1dnlOEVCFOxDef9Lw=" />

	link	stylesheet	web/wizixo/template/assets/vendor/themify-icons/css/themify-icons.css		200	1	ok
				text/css; charset=utf-8 missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 16450 Bytes
	ETag: "3973658151"
	local SRI possible, possible hash-values: sha256-CKCvnwNRYXK7PY0x7rtkUQ8ee6hIgcnZn5gJoouUN08= sha384-81P0RTi8iCZFEuoXWM6J0QAkHW7g84I1eVHfpWPUBpGDH/5KvsZRylS3KFlzh7at sha512-1GeJnNl2Q6MqWaVphxSPokVUtfoiDaBrjViG6MSPas5Pw4ficmPxg8OAhLa9EYU+7I9hfev1AqMJvll738yMsw== <link rel="stylesheet" href="web/wizixo/template/assets/vendor/themify-icons/css/themify-icons.css" crossorigin="anonymous" integrity="sha256-CKCvnwNRYXK7PY0x7rtkUQ8ee6hIgcnZn5gJoouUN08=" />

	meta	charset	utf-8			1	ok
							ok


	meta	X-UA-Compatible	IE=edge			1	ok
							ok


	meta	author	Linux Mint			1	ok
							ok


	meta	description	Linux Mint is an elegant, easy to use, up to date and comfortable desktop operating system.			1	ok
							ok


	meta	keywords	Linux Mint, Free, Operating system, FOSS, Linux, easy to use			1	ok
							ok


	meta	robots	all			1	ok
							ok


	meta	viewport	width=device-width, initial-scale=1			1	ok
							ok


	script	src	web/wizixo/template/assets/js/functions.js		200	1	ok
	Missing defer / async attribute.			text/javascript missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 14451 Bytes
	ETag: "2293360471"
	local SRI possible, possible hash-values: sha256-YtmobzsWx2S3uNoKtik3kDG50bJSdhzTypC+quwOOk4= sha384-8navXYSgyIH/8Ywbd3esMhAxfmdvxzRiZKoJ2rzEtO6VYQRpLDBB5UI0m9cS4CMW sha512-zxmUFK2OtnvgKvdm79yB4NYZUyvRooqJAUkGVnRrNpAMN+OXZqJA4SE+hTjxRM5rjXJvuyw+GjIBADPNS1hEig== <script src="web/wizixo/template/assets/js/functions.js" crossorigin="anonymous" integrity="sha256-YtmobzsWx2S3uNoKtik3kDG50bJSdhzTypC+quwOOk4=" />

	script	src	web/wizixo/template/assets/vendor/bootstrap/dist/js/bootstrap.min.js		200	1	ok
	Missing defer / async attribute.			text/javascript missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 63467 Bytes
	ETag: "3017800262"
	local SRI possible, possible hash-values: sha256-7dA7lq5P94hkBsWdff7qobYkp9ope/L5LQy2t/ljPLo= sha384-+YQ4JLhjyBLPDQt//I+STsc9iw4uQqACwlvpslubQzn4u2UU2UFM80nGisd026JF sha512-XKa9Hemdy1Ui3KSGgJdgMyYlUg1gM+QhL6cnlyTe2qzMCYm4nAZ1PsVerQzTTXzonUR+dmswHqgJPuwCq1MaAg== <script src="web/wizixo/template/assets/vendor/bootstrap/dist/js/bootstrap.min.js" crossorigin="anonymous" integrity="sha256-7dA7lq5P94hkBsWdff7qobYkp9ope/L5LQy2t/ljPLo=" />

	script	src	web/wizixo/template/assets/vendor/fancybox/js/jquery.fancybox.min.js		200	1	ok
	Missing defer / async attribute.			text/javascript missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 61636 Bytes
	ETag: "1951248465"
	local SRI possible, possible hash-values: sha256-Cueyz60mJGZgU7Az2RtiAlMiYzZ9RcT33Vwn3j4LUPo= sha384-zUCI8uQA4LFNz59frzPOE4GJ8OkgZss2Aa646j7pkgvXtmhL7pzbxPpzIYKwSogk sha512-15ILfD6pRgsfXlX5s0a7JKEbcJVYz0G3ut12UiysVmvA7goi351a5ownrpxYzuVZh5GtXvMzFeyy/8/jZaWjWA== <script src="web/wizixo/template/assets/vendor/fancybox/js/jquery.fancybox.min.js" crossorigin="anonymous" integrity="sha256-Cueyz60mJGZgU7Az2RtiAlMiYzZ9RcT33Vwn3j4LUPo=" />

	script	src	web/wizixo/template/assets/vendor/jquery/jquery.min.js		200	1	ok
	Missing defer / async attribute.			text/javascript missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 89475 Bytes
	ETag: "1776861030"
	local SRI possible, possible hash-values: sha256-YVCjXA9IbEbK3w4jDiqhWcfCPs+7VhG2TuPyX8v/NB8= sha384-EtrsdC1GCE72M2BzY9H0dEi9tl3ECDLWemXnvhUa+KQpxrwkEvSpVrUqUnHAshoL sha512-pV9V1WiZq0QO8MrheyjVzI9bl2bR6bwaisa4k3aSS0dsGrDDJUl+tdRK9B9Ov47qI22Ho2kCJEuKPspUmUuHEQ== <script src="web/wizixo/template/assets/vendor/jquery/jquery.min.js" crossorigin="anonymous" integrity="sha256-YVCjXA9IbEbK3w4jDiqhWcfCPs+7VhG2TuPyX8v/NB8=" />

	script	src	web/wizixo/template/assets/vendor/jquery-easing/jquery.easing.min.js		200	1	ok
	Missing defer / async attribute.			text/javascript missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 2302 Bytes
	ETag: "4154294581"
	local SRI possible, possible hash-values: sha256-DsmK31k+vMAb7GCx9JTazUdSKr/vkDinFBAdg/ReFl0= sha384-NriL88fd+DnRdtpVtRHrhndPqFvqwTiswpcKeSmeOxOaEY2F5yiODSzo7bOVp2KX sha512-ka6LgQ3iyt3wOG4vacSyzNhoeIBP3/YjM3eT72Kg6n4+NDX5stf8DAhw3E3EBWFAEDmzD9gV3lP58uSVYo6RRQ== <script src="web/wizixo/template/assets/vendor/jquery-easing/jquery.easing.min.js" crossorigin="anonymous" integrity="sha256-DsmK31k+vMAb7GCx9JTazUdSKr/vkDinFBAdg/ReFl0=" />

	script	src	web/wizixo/template/assets/vendor/owlcarousel/js/owl.carousel.min.js		200	1	ok
	Missing defer / async attribute.			text/javascript missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 44342 Bytes
	ETag: "2078968704"
	local SRI possible, possible hash-values: sha256-pTxD+DSzIwmwhOqTFN+DB+nHjO4iAsbgfyFq5K5bcE0= sha384-l/y5WJTphApmSlx76Ev6k4G3zxu/+19CVvn9OTKI7gs4Yu5Hm8mjpdtdr5oyhnNo sha512-bPs7Ae6pVvhOSiIcyUClR7/q2OAsRiovw4vAkX+zJbw3ShAeeqezq50RIIcIURq7Oa20rW2n2q+fyXBNcU9lrw== <script src="web/wizixo/template/assets/vendor/owlcarousel/js/owl.carousel.min.js" crossorigin="anonymous" integrity="sha256-pTxD+DSzIwmwhOqTFN+DB+nHjO4iAsbgfyFq5K5bcE0=" />

	script	src	web/wizixo/template/assets/vendor/popper.js/umd/popper.min.js		200	1	ok
	Missing defer / async attribute.			text/javascript missing X-Content-Type-Options nosniff			ok
	No Cache-Control - header			Compression required: 20298 Bytes
	ETag: "3063622064"
	local SRI possible, possible hash-values: sha256-6TvF5nDHXYtLEg+cyHoMmoKaMh38cUNoHVF6aSppCaA= sha384-2wsBPEj7TkF0YqnVKhyndjLIYEvtUpUb8iA/09oriu+2Bvz5CznVKawJhIEydlCI sha512-u+RICQhHk0V30Wc4gIFN21ii/7O64Ak2EwBh77eYNG4Xk9fsQP/WD30ThP0OSVCup/MMKsfrjbJLxS10rMKbiw== <script src="web/wizixo/template/assets/vendor/popper.js/umd/popper.min.js" crossorigin="anonymous" integrity="sha256-6TvF5nDHXYtLEg+cyHoMmoKaMh38cUNoHVF6aSppCaA=" />

12. Html-Parsing via https://validator.w3.org/nu/

	Type	Message	num found
Url used (first standard-https-result with http status 200): https://fastly.linuxmint.io/

Summary
	Good: No non-document-errors
	18 errors
	3 warnings
1.	error	The `aria-labelledby` attribute must not be specified on any `div` element unless the element has a `role` value other than `caption`, `code`, `deletion`, `emphasis`, `generic`, `insertion`, `paragraph`, `presentation`, `strong`, `subscript`, or `superscript`.	4
2.	error	Duplicate ID `demosMenu`.	3
3.	error	An `img` element must have an `alt` attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.	2
4.	error	Unclosed element `div`.	2
5.	error	The `font` element is obsolete. Use CSS instead.	1
6.	error	End tag `i` violates nesting rules.	1
7.	error	No `font` element in scope but a `font` end tag seen.	1
8.	error	Stray end tag `i`.	1
9.	error	End tag `section` seen, but there were open elements.	1
10.	error	The heading `h6` (with computed level 6) follows the heading `h2` (with computed level 2), skipping 3 heading levels.	1
11.	error	Stray end tag `a`.	1
12.	warning	The first occurrence of ID `demosMenu` was here.	3
Details
	Type	Message + Sample
1	error	An `img` element must have an `alt` attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.
		From line 96, column 6 to line 96, column 52
		"/"> <img src="web/img/logo-mono.svg" width="200" /> <
2	error	The `aria-labelledby` attribute must not be specified on any `div` element unless the element has a `role` value other than `caption`, `code`, `deletion`, `emphasis`, `generic`, `insertion`, `paragraph`, `presentation`, `strong`, `subscript`, or `superscript`.
		From line 114, column 8 to line 114, column 76
		a> <div class="dropdown-menu pb-3 pb-lg-0" aria-labelledby="demosMenu" >
3	error	Duplicate ID `demosMenu`.
		From line 139, column 8 to line 139, column 140
		"> <a class="nav-link dropdown-toggle active" href="#" id="demosMenu" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">Projec
4	error	The `aria-labelledby` attribute must not be specified on any `div` element unless the element has a `role` value other than `caption`, `code`, `deletion`, `emphasis`, `generic`, `insertion`, `paragraph`, `presentation`, `strong`, `subscript`, or `superscript`.
		From line 140, column 8 to line 140, column 76
		a> <div class="dropdown-menu pb-3 pb-lg-0" aria-labelledby="demosMenu" >
5	error	Duplicate ID `demosMenu`.
		From line 166, column 8 to line 166, column 134
		"> <a class="nav-link dropdown-toggle " href="#" id="demosMenu" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">About<
6	error	The `aria-labelledby` attribute must not be specified on any `div` element unless the element has a `role` value other than `caption`, `code`, `deletion`, `emphasis`, `generic`, `insertion`, `paragraph`, `presentation`, `strong`, `subscript`, or `superscript`.
		From line 167, column 8 to line 167, column 76
		a> <div class="dropdown-menu pb-3 pb-lg-0" aria-labelledby="demosMenu" >
7	error	Duplicate ID `demosMenu`.
		From line 186, column 8 to line 186, column 134
		"> <a class="nav-link dropdown-toggle " href="#" id="demosMenu" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">Links<
8	error	The `aria-labelledby` attribute must not be specified on any `div` element unless the element has a `role` value other than `caption`, `code`, `deletion`, `emphasis`, `generic`, `insertion`, `paragraph`, `presentation`, `strong`, `subscript`, or `superscript`.
		From line 187, column 8 to line 187, column 76
		a> <div class="dropdown-menu pb-3 pb-lg-0" aria-labelledby="demosMenu" >
9	error	Unclosed element `div`.
		From line 245, column 5 to line 245, column 27
		y-5"> <div class="container">
10	error	Unclosed element `div`.
		From line 246, column 9 to line 246, column 25
		> <div class="row">
11	error	The `font` element is obsolete. Use CSS instead.
		From line 338, column 17 to line 338, column 37
		<i><font color="3c3c3c">chicag
12	error	End tag `i` violates nesting rules.
		From line 338, column 46 to line 338, column 49
		">chicago3</i></font
13	error	No `font` element in scope but a `font` end tag seen.
		From line 338, column 50 to line 338, column 56
		icago3</i></font>
14	error	Stray end tag `i`.
		From line 339, column 13 to line 339, column 16
		</i>
15	error	End tag `section` seen, but there were open elements.
		From line 343, column 1 to line 343, column 10
		</div> </section> <!-
16	error	An `img` element must have an `alt` attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.
		From line 356, column 8 to line 356, column 36
		"> <img src="web/img/logo.svg"/>
17	error	The heading `h6` (with computed level 6) follows the heading `h2` (with computed level 2), skipping 3 heading levels.
		From line 364, column 8 to line 364, column 11
		"> <h6>Quick
18	error	Stray end tag `a`.
		From line 407, column 231 to line 407, column 234
		countries.</a></div>
19	warning	The first occurrence of ID `demosMenu` was here.
		From line 113, column 8 to line 113, column 134
		"> <a class="nav-link dropdown-toggle " href="#" id="demosMenu" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">Downlo
20	warning	The first occurrence of ID `demosMenu` was here.
		From line 113, column 8 to line 113, column 134
		"> <a class="nav-link dropdown-toggle " href="#" id="demosMenu" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">Downlo
21	warning	The first occurrence of ID `demosMenu` was here.
		From line 113, column 8 to line 113, column 134
		"> <a class="nav-link dropdown-toggle " href="#" id="demosMenu" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">Downlo

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ryleigh.ns.cloudflare.com, simon.ns.cloudflare.com

QNr.	Domain	Type	NS used
1	com	NS	b.root-servers.net (2001:500:200::b)
	Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2	ryleigh.ns.cloudflare.com	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com
	Answer: ns3.cloudflare.com 162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2
	Answer: ns4.cloudflare.com 162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837
	Answer: ns5.cloudflare.com 162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937
	Answer: ns6.cloudflare.com 162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506
	Answer: ns7.cloudflare.com 162.159.4.8, 162.159.6.6, 2400:cb00:2049:1::a29f:408, 2400:cb00:2049:1::a29f:606
3	simon.ns.cloudflare.com	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com
	Answer: ns3.cloudflare.com 162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2
	Answer: ns4.cloudflare.com 162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837
	Answer: ns5.cloudflare.com 162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937
	Answer: ns6.cloudflare.com 162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506
	Answer: ns7.cloudflare.com 162.159.4.8, 162.159.6.6, 2400:cb00:2049:1::a29f:408, 2400:cb00:2049:1::a29f:606
4	ryleigh.ns.cloudflare.com: 108.162.194.198, 162.159.38.198, 172.64.34.198	A	ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
5	ryleigh.ns.cloudflare.com: 2606:4700:50::a29f:26c6, 2803:f800:50::6ca2:c2c6, 2a06:98c1:50::ac40:22c6	AAAA	ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
6	simon.ns.cloudflare.com: 108.162.193.232, 172.64.33.232, 173.245.59.232	A	ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
7	simon.ns.cloudflare.com: 2606:4700:58::adf5:3be8, 2803:f800:50::6ca2:c1e8, 2a06:98c1:50::ac40:21e8	AAAA	ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)

14. CAA - Entries

Domainname	flag	Name	Value	∑ Queries
t.sni.global.fastly.net	0		no CAA entry found	1
sni.global.fastly.net	0		no CAA entry found	1
fastly.linuxmint.io				1
global.fastly.net	0		no CAA entry found	1
linuxmint.io	0		no CAA entry found	1
fastly.net	5	issue	certainly.com;validationmethods=dns-01	1
	5	issue	globalsign.com	1
	5	issue	letsencrypt.org;validationmethods=dns-01	1
	5	iodef	mailto:security@fastly.com	1
net	0		no CAA entry found	1
io	0		no CAA entry found	1

15. TXT - Entries

Domainname	TXT Entry	Status	∑ Queries
linuxmint.io	v=spf1 include:spf.efwd.registrar-servers.com ~all	ok	1
fastly.linuxmint.io			1
_acme-challenge.fastly.linuxmint.io		Name Error - The domain name does not exist	1
_acme-challenge.t.sni.global.fastly.net		Name Error - The domain name does not exist	1
_acme-challenge.fastly.linuxmint.io.linuxmint.io		perhaps wrong	1
_acme-challenge.fastly.linuxmint.io.fastly.linuxmint.io		Name Error - The domain name does not exist	1
_acme-challenge.t.sni.global.fastly.net.t.sni.global.fastly.net		Name Error - The domain name does not exist	1

16. DomainService - Entries

Type		Domain	Pref	Value	DNS-error	num Answers	Status	Description
SPF	TXT	fastly.linuxmint.io					32768	TXT expected, but CNAME found. CNAME not allowed, only TXT queries are allowed. See RFC 7208, 4.4.

17. Cipher Suites

Summary
Domain	IP	Port	num Ciphers	time	Std.Protocol	Forward Secrecy
fastly.linuxmint.io	151.101.7.52	443	3 Ciphers	23.65 sec		0 without, 3 FS	100.00 %
Complete		1	3 Ciphers 3.00 Ciphers/Check	23.65 sec	23.65 sec/Check	0 without, 3 FS	100.00 %

Details
Domain	IP	Port	Cipher (OpenSsl / IANA)
fastly.linuxmint.io	151.101.7.52	443	ECDHE-RSA-CHACHA20-POLY1305		(Secure)	TLSv1.2	0xCC,0xA8	FS
3 Ciphers, 23.65 sec			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		RSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0xC0,0x30	FS
			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
			ECDH		RSA	AESGCM(256)	AEAD
			ECDHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0xC0,0x2F	FS
			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
			ECDH		RSA	AESGCM(128)	AEAD

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

Permalink: https://check-your-website.server-daten.de/?i=b40e86f9-c807-40a5-a5e2-87ca5487d8af

Last Result: https://check-your-website.server-daten.de/?q=fastly.linuxmint.io - 2026-08-30 14:51:42

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=fastly.linuxmint.io" target="_blank">Check this Site: fastly.linuxmint.io</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=fastly.linuxmint.io

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details (currently limited to 500 rows - some problems with spam users)

12. Html-Parsing via https://validator.w3.org/nu/

Summary

Details

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks