Check DNS, Urls + Redirects, Certificates and Content of your Website

0 in Queue, 0 of max. 4 Checks (07:08:21)
Why should you only use Prefix - Cookies? |
Hall of Fame - A+ and A

 

Shortcuts: 1. IP-Addresses | 2. DNSSEC | 3. Name Servers | 4. SOA-Entries | 5. Screenshots | 6. Url-Checks | 7. Comments | 8. Connections | 9. Certificates | 10. CT-Logs | 11. Html-Content | 12. Html-Parsing | 13. NameServer-IPAddresses | 14. CAA | 15. TXT | 16. DomainServiceEntries | 17. Cipher Suites | 18. Portchecks |

 

Q

 

http sent over port 443

 

Checked:
08.07.2026 09:55:33

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
informatieconsultant.nl
A
185.95.14.117
Amsterdam/North Holland/The Netherlands (NL) - Hostnet B.V.
Hostname: webserver.informatieconsultant.nl
yes
2
0

AAAA

yes


www.informatieconsultant.nl
CNAME
informatieconsultant.nl
yes
1
0

A
185.95.14.117
Amsterdam/North Holland/The Netherlands (NL) - Hostnet B.V.
Hostname: webserver.informatieconsultant.nl
yes


*.informatieconsultant.nl
A
185.95.14.117
yes



AAAA

yes



CNAME

yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






• Status: Valid because published






4 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 54393, Flags 256






Public Key with Algorithm 8, KeyTag 57780, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.07.2026, 00:00:00 +, Signature-Inception: 01.07.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: nl

nl
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 17153, DigestType 2 and Digest xd/dyR51MlYqNfPCzTCCOJS+CPIBAfGr9FyKuXOfP0k=






1 RRSIG RR to validate DS RR found






RRSIG-Owner nl., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 21.07.2026, 05:00:00 +, Signature-Inception: 08.07.2026, 04:00:00 +, KeyTag 57780, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 467, Flags 256






Public Key with Algorithm 13, KeyTag 17153, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner nl., Algorithm: 13, 1 Labels, original TTL: 3600 sec, Signature-expiration: 31.07.2026, 17:31:31 +, Signature-Inception: 03.07.2026, 18:37:21 +, KeyTag 17153, Signer-Name: nl






• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 17153 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 17153, DigestType 2 and Digest "xd/dyR51MlYqNfPCzTCCOJS+CPIBAfGr9FyKuXOfP0k=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: informatieconsultant.nl

informatieconsultant.nl
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 49535, DigestType 2 and Digest mHjy6NhS75P1FDhKKJrsd8Rk0xOFYvahaLkHUdqbTlE=






1 RRSIG RR to validate DS RR found






RRSIG-Owner informatieconsultant.nl., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 25.07.2026, 15:22:10 +, Signature-Inception: 27.06.2026, 17:07:21 +, KeyTag 467, Signer-Name: nl






• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 467 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 44668, Flags 256






Public Key with Algorithm 8, KeyTag 49535, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner informatieconsultant.nl., Algorithm: 8, 2 Labels, original TTL: 600 sec, Signature-expiration: 16.07.2026, 00:00:00 +, Signature-Inception: 25.06.2026, 00:00:00 +, KeyTag 49535, Signer-Name: informatieconsultant.nl






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 49535 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 49535, DigestType 2 and Digest "mHjy6NhS75P1FDhKKJrsd8Rk0xOFYvahaLkHUdqbTlE=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone






RRSIG Type 1 validates the A - Result: 185.95.14.117
Validated: RRSIG-Owner informatieconsultant.nl., Algorithm: 8, 2 Labels, original TTL: 14400 sec, Signature-expiration: 16.07.2026, 00:00:00 +, Signature-Inception: 25.06.2026, 00:00:00 +, KeyTag 44668, Signer-Name: informatieconsultant.nl






RRSIG Type 16 validates the TXT - Result: MS=ms62419478 openai-domain-verification=dv-zoBGSN5GsQ9VniZTAhoUnnPz v=spf1 a mx a:mail.informatieconsultant.nl ip4:185.95.14.117 -all google-site-verification=baO5kD0zof5ddOu1i4KTo36G7Nld8te5LKVRJfjrigM
Validated: RRSIG-Owner informatieconsultant.nl., Algorithm: 8, 2 Labels, original TTL: 14400 sec, Signature-expiration: 16.07.2026, 00:00:00 +, Signature-Inception: 25.06.2026, 00:00:00 +, KeyTag 44668, Signer-Name: informatieconsultant.nl






CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "hiq7n0g1k0su326rro5thmc0kvotfup1" equal the hashed NSEC3-owner "hiq7n0g1k0su326rro5thmc0kvotfup1" and the hashed NextOwner "hiq7n0g1k0su326rro5thmc0kvotfup2". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner hiq7n0g1k0su326rro5thmc0kvotfup1.informatieconsultant.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 16.07.2026, 00:00:00 +, Signature-Inception: 25.06.2026, 00:00:00 +, KeyTag 44668, Signer-Name: informatieconsultant.nl






Status: Good. NoData-Proof required and found.






AAAA-Query sends a valid NSEC3 RR as result with the hashed query name "hiq7n0g1k0su326rro5thmc0kvotfup1" equal the hashed NSEC3-owner "hiq7n0g1k0su326rro5thmc0kvotfup1" and the hashed NextOwner "hiq7n0g1k0su326rro5thmc0kvotfup2". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner hiq7n0g1k0su326rro5thmc0kvotfup1.informatieconsultant.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 16.07.2026, 00:00:00 +, Signature-Inception: 25.06.2026, 00:00:00 +, KeyTag 44668, Signer-Name: informatieconsultant.nl






Status: Good. NoData-Proof required and found.






TLSA-Query (_443._tcp.informatieconsultant.nl) sends a valid NSEC3 RR as result with the hashed owner name "hiq7n0g1k0su326rro5thmc0kvotfup1" (unhashed: informatieconsultant.nl). So that's the Closest Encloser of the query name.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner hiq7n0g1k0su326rro5thmc0kvotfup1.informatieconsultant.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 16.07.2026, 00:00:00 +, Signature-Inception: 25.06.2026, 00:00:00 +, KeyTag 44668, Signer-Name: informatieconsultant.nl






Status: Good. NoData-Proof required and found.






TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "u2c45rivv16pfjjdcmfdbq0mu28tfe1v" (unhashed: _tcp.informatieconsultant.nl) with the owner "u2c45rivv16pfjjdcmfdbq0mu28tfe1u" and the NextOwner "u2c45rivv16pfjjdcmfdbq0mu28tfe20". So that NSEC3 confirms the not-existence of the Next Closer Name.
Bitmap: No Bitmap? Validated: RRSIG-Owner u2c45rivv16pfjjdcmfdbq0mu28tfe1u.informatieconsultant.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 16.07.2026, 00:00:00 +, Signature-Inception: 25.06.2026, 00:00:00 +, KeyTag 44668, Signer-Name: informatieconsultant.nl






Status: Good. NoData-Proof required and found.






TLSA-Query sends a valid NSEC3 RR as result with the hashed owner name "gch4uei53905fn3nngva6c5krvbr1p7t" (unhashed: *.informatieconsultant.nl) as the Wildcard-Expansion of the Closest Encloser of the query name "c9svslq4hlfrc9p31f5m50eiab91uhn7". So the Wildcard-Expansion of the Closest Encloser confirms that the query name is generated via wildcard expansion (NoError instead of NXDomain).
Bitmap: A, RRSIG Validated: RRSIG-Owner gch4uei53905fn3nngva6c5krvbr1p7t.informatieconsultant.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 16.07.2026, 00:00:00 +, Signature-Inception: 25.06.2026, 00:00:00 +, KeyTag 44668, Signer-Name: informatieconsultant.nl






Status: Good. NoData-Proof required and found.






CAA-Query sends a valid NSEC3 RR as result with the hashed query name "hiq7n0g1k0su326rro5thmc0kvotfup1" equal the hashed NSEC3-owner "hiq7n0g1k0su326rro5thmc0kvotfup1" and the hashed NextOwner "hiq7n0g1k0su326rro5thmc0kvotfup2". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner hiq7n0g1k0su326rro5thmc0kvotfup1.informatieconsultant.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 16.07.2026, 00:00:00 +, Signature-Inception: 25.06.2026, 00:00:00 +, KeyTag 44668, Signer-Name: informatieconsultant.nl






Status: Good. NoData-Proof required and found.



Zone: www.informatieconsultant.nl

www.informatieconsultant.nl
0 DS RR in the parent zone found






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "hiq7n0g1k0su326rro5thmc0kvotfup1" as Owner. That's the Hash of "informatieconsultant.nl" with the NextHashedOwnerName "hiq7n0g1k0su326rro5thmc0kvotfup2". So that domain name is the Closest Encloser of "www.informatieconsultant.nl". Opt-Out: False.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner hiq7n0g1k0su326rro5thmc0kvotfup1.informatieconsultant.nl., Algorithm: 8, 3 Labels, original TTL: 600 sec, Signature-expiration: 16.07.2026, 00:00:00 +, Signature-Inception: 25.06.2026, 00:00:00 +, KeyTag 44668, Signer-Name: informatieconsultant.nl






RRSIG Type 5 validates the CNAME - Result: informatieconsultant.nl
Validated: RRSIG-Owner www.informatieconsultant.nl., Algorithm: 8, 3 Labels, original TTL: 14400 sec, Signature-expiration: 16.07.2026, 00:00:00 +, Signature-Inception: 25.06.2026, 00:00:00 +, KeyTag 44668, Signer-Name: informatieconsultant.nl

 

3. Name Servers

DomainNameserverNS-IP
informatieconsultant.nl
•  ns01.hostnet.nl
195.206.121.13
Copenhagen/Capital Region/Denmark (DK) - One.com A/S		•

• 
2001:67c:28cc::13
Copenhagen/Capital Region/Denmark (DK) - One.com A/S		•

•  ns02.hostnet.nl / ns3.cst.dnspod2-cph7.one.com
185.10.11.13
Copenhagen/Capital Region/Denmark (DK) - One.com A/S		•

• 
2001:67c:3c0::13
Copenhagen/Capital Region/Denmark (DK) - One.com A/S		•
nl
•  ns1.dns.nl / i3d-de3-ns01-142770
•

•  ns3.dns.nl / tld-all-ffm1@53024
•

•  ns4.dns.nl / FRA2
•

 

4. SOA-Entries


Domain:nl
Zone-Name:nl
Primary:ns1.dns.nl
Mail:dns.sidn.nl
Serial:2026070815
Refresh:3600
Retry:600
Expire:1209600
TTL:600
num Entries:3


Domain:informatieconsultant.nl
Zone-Name:informatieconsultant.nl
Primary:ns01.hostnet.nl
Mail:hostmaster.hostnet.nl
Serial:2026070601
Refresh:14400
Retry:3600
Expire:1209600
TTL:600
num Entries:4


5. Screenshots

No Screenshot listed, because no url-check with https + http status 200-299, 400-599 + not-ACME-check found.

 

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://informatieconsultant.nl/
185.95.14.117 gzip used - 99 / 84 - -17.86 %
200

Html is minified: 100.00 %
0.057
H
Date: Wed, 08 Jul 2026 07:56:08 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
ETag: "54-6406c8b2ea700-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Last-Modified: Sun, 05 Oct 2025 17:19:56 GMT
Content-Encoding: gzip
Content-Length: 99
Content-Type: text/html

• http://www.informatieconsultant.nl/
185.95.14.117 gzip used - 99 / 84 - -17.86 %
200

Html is minified: 100.00 %
0.030
H
Date: Wed, 08 Jul 2026 07:56:08 GMT
Server: Apache
ETag: "54-6406c8b2ea700-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Last-Modified: Sun, 05 Oct 2025 17:19:56 GMT
Content-Encoding: gzip
Content-Length: 99
Content-Type: text/html

• https://informatieconsultant.nl/
185.95.14.117
-103


0.077
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Cannot determine the frame size or a corrupted frame was received

• https://www.informatieconsultant.nl/
185.95.14.117
-103


0.073
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Cannot determine the frame size or a corrupted frame was received

• http://informatieconsultant.nl:443/
185.95.14.117 gzip used - 3041 / 10701 - 71.58 %
200

Html is minified: 221.69 %
0.054
Q
Visible Content:
Date: Wed, 08 Jul 2026 07:56:08 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
ETag: "29cd-636c57e73781e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Last-Modified: Wed, 04 Jun 2025 21:15:18 GMT
Content-Encoding: gzip
Content-Length: 3041
Content-Type: text/html

• http://www.informatieconsultant.nl:443/
185.95.14.117 gzip used - 3041 / 10701 - 71.58 %
200

Html is minified: 221.69 %
0.030
Q
Visible Content:
Date: Wed, 08 Jul 2026 07:56:08 GMT
Server: Apache
ETag: "29cd-636c57e73781e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Last-Modified: Wed, 04 Jun 2025 21:15:18 GMT
Content-Encoding: gzip
Content-Length: 3041
Content-Type: text/html

• http://informatieconsultant.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
185.95.14.117
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		404

Html is minified: 102.31 %
Other inline scripts (∑/total): 0/0		0.030
A
Not Found
Visible Content:
Date: Wed, 08 Jul 2026 07:56:08 GMT
Server: Apache
Content-Length: 355
Content-Type: text/html; charset=iso-8859-1

• http://www.informatieconsultant.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
185.95.14.117
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		404

Html is minified: 102.31 %
Other inline scripts (∑/total): 0/0		0.040
A
Not Found
Visible Content:
Date: Wed, 08 Jul 2026 07:56:08 GMT
Server: Apache
Content-Length: 355
Content-Type: text/html; charset=iso-8859-1

• https://185.95.14.117/
185.95.14.117
-103


0.070
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Cannot determine the frame size or a corrupted frame was received

 

7. Comments


1. General Results, most used to calculate the result

Aname "informatieconsultant.nl" is domain, public suffix is ".nl", top-level-domain is ".nl", top-level-domain-type is "country-code", Country is Netherlands (the), tld-manager is "SIDN (Stichting Internet Domeinregistratie Nederland)", num .nl-domains preloaded: 6052 (complete: 276475)
AGood: All ip addresses are public addresses
Warning: Only one ip address found: informatieconsultant.nl has only one ip address.
Warning: Only one ip address found: www.informatieconsultant.nl has only one ip address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: informatieconsultant.nl has no ipv6 address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: www.informatieconsultant.nl has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):2 complete Content-Type - header (6 urls)
http://informatieconsultant.nl/ 185.95.14.117


Url with incomplete Content-Type - header - missing charset
http://informatieconsultant.nl:443/ 185.95.14.117


Url with incomplete Content-Type - header - missing charset
http://www.informatieconsultant.nl:443/ 185.95.14.117


Url with incomplete Content-Type - header - missing charset
http://www.informatieconsultant.nl/ 185.95.14.117


Url with incomplete Content-Type - header - missing charset
HFatal error: No https - result with http-status 200, no encryption
HFatal error: http result with http-status 200, no encryption. Add a redirect http ⇒ https, so every connection is secure. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop.
Nwww.informatieconsultant.nl:25


Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Ninformatieconsultant.nl:25


Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Ninformatieconsultant.nl:587


Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nwww.informatieconsultant.nl:587


Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nwww.informatieconsultant.nl:8080


Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Ninformatieconsultant.nl:8080


Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Qhttp://informatieconsultant.nl:443/ 185.95.14.117
200

Misconfiguration: http sent over port 443. Wrong port forwarding port 443 to port 80 or wrong vHost definition. If you use a virtual Host <VirtualHost ip-address:443>, try <VirtualHost *:443>.
Qhttp://www.informatieconsultant.nl:443/ 185.95.14.117
200

Misconfiguration: http sent over port 443. Wrong port forwarding port 443 to port 80 or wrong vHost definition. If you use a virtual Host <VirtualHost ip-address:443>, try <VirtualHost *:443>.
Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain informatieconsultant.nl, 1 ip addresses.
Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain www.informatieconsultant.nl, 1 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.informatieconsultant.nl

2. Header-Checks

U

No https result with http status 2** or 4** (standard-check) found, no header checked.

3. DNS- and NameServer - Checks

AInfo:: 7 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 7 Queries complete, 7 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Ok (4 - 8):: An average of 3.5 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 2 different Name Servers found: ns01.hostnet.nl, ns02.hostnet.nl, 2 Name Servers included in Delegation: ns01.hostnet.nl, ns02.hostnet.nl, 2 Name Servers included in 2 Zone definitions: ns01.hostnet.nl, ns02.hostnet.nl, 1 Name Servers listed in SOA.Primary: ns01.hostnet.nl.
AGood: Only one SOA.Primary Name Server found.: ns01.hostnet.nl.
AGood: SOA.Primary Name Server included in the delegation set.: ns01.hostnet.nl.
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
AGood: All name servers have ipv4- and ipv6-addresses.: 2 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: nl
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: hostnet.nl
Warning: All Name Servers from the same Country / IP location.: 2 Name Servers, 1 Countries: DK
AInfo: Ipv4-Subnet-list: 2 Name Servers, 2 different subnets (first Byte): 185., 195., 2 different subnets (first two Bytes): 185.10., 195.206., 2 different subnets (first three Bytes): 185.10.11., 195.206.121.
AExcellent: Every Name Server IPv4-address starts with an unique Byte.
AInfo: IPv6-Subnet-list: 2 Name Servers with IPv6, 1 different subnets (first block): 2001:, 1 different subnets (first two blocks): 2001:067c:, 2 different subnets (first three blocks): 2001:067c:03c0:, 2001:067c:28cc:, 2 different subnets (first four blocks): 2001:067c:03c0:0000:, 2001:067c:28cc:0000:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 4 good Nameserver
AGood: Nameserver supports Echo Capitalization: 4 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 4 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 3 good Nameserver
Nameserver doesn't pass all EDNS-Checks: ns01.hostnet.nl / 195.206.121.13: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: fatal timeout. COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
ADuration: 413407 milliseconds, 413.407 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
informatieconsultant.nl
185.95.14.117
25
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
informatieconsultant.nl
185.95.14.117
25
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=webserver.informatieconsultant.nl


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


informatieconsultant.nl
185.95.14.117
587
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

informatieconsultant.nl
185.95.14.117
587
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=webserver.informatieconsultant.nl


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


informatieconsultant.nl
185.95.14.117
8080
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

informatieconsultant.nl
185.95.14.117
8080
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
no http/2 via ALPN 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
 Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=webserver.informatieconsultant.nl


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


www.informatieconsultant.nl
185.95.14.117
25
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.informatieconsultant.nl
185.95.14.117
25
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=webserver.informatieconsultant.nl


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


www.informatieconsultant.nl
185.95.14.117
587
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.informatieconsultant.nl
185.95.14.117
587
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=webserver.informatieconsultant.nl


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


www.informatieconsultant.nl
185.95.14.117
8080
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.informatieconsultant.nl
185.95.14.117
8080
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
no http/2 via ALPN 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
 Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=webserver.informatieconsultant.nl


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US

 

9. Certificates

1.
1.
CN=webserver.informatieconsultant.nl
30.05.2026
28.08.2026
expires in 37 days		webserver.informatieconsultant.nl - 1 entry
1.
1.
CN=webserver.informatieconsultant.nl
30.05.2026

28.08.2026
expires in 37 days


webserver.informatieconsultant.nl - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:065EDB360AC5A1B854B58BC076E23BF6C426
Thumbprint:E54D12AD9E7B3D29F9D8D5D9122837DBCA160136
SHA256 / Certificate:eTM7RQYrAVFjddTKIzSFAOezwcS7qrkw96AIPtu8Lms=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):973a8b313150de42ec3ef2655dd3c290ae8bfba9ce64ed504567babfb6629810
SHA256 hex / Subject Public Key Information (SPKI):973a8b313150de42ec3ef2655dd3c290ae8bfba9ce64ed504567babfb6629810 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




2.
CN=webserver.informatieconsultant.nl
30.05.2026
28.08.2026
expires in 37 days		webserver.informatieconsultant.nl - 1 entry

2.
CN=webserver.informatieconsultant.nl
30.05.2026

28.08.2026
expires in 37 days


webserver.informatieconsultant.nl - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:065EDB360AC5A1B854B58BC076E23BF6C426
Thumbprint:E54D12AD9E7B3D29F9D8D5D9122837DBCA160136
SHA256 / Certificate:eTM7RQYrAVFjddTKIzSFAOezwcS7qrkw96AIPtu8Lms=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):973a8b313150de42ec3ef2655dd3c290ae8bfba9ce64ed504567babfb6629810
SHA256 hex / Subject Public Key Information (SPKI):973a8b313150de42ec3ef2655dd3c290ae8bfba9ce64ed504567babfb6629810 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=webserver.informatieconsultant.nl
30.05.2026
28.08.2026
expires in 37 days		webserver.informatieconsultant.nl - 1 entry

3.
CN=webserver.informatieconsultant.nl
30.05.2026

28.08.2026
expires in 37 days


webserver.informatieconsultant.nl - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:065EDB360AC5A1B854B58BC076E23BF6C426
Thumbprint:E54D12AD9E7B3D29F9D8D5D9122837DBCA160136
SHA256 / Certificate:eTM7RQYrAVFjddTKIzSFAOezwcS7qrkw96AIPtu8Lms=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):973a8b313150de42ec3ef2655dd3c290ae8bfba9ce64ed504567babfb6629810
SHA256 hex / Subject Public Key Information (SPKI):973a8b313150de42ec3ef2655dd3c290ae8bfba9ce64ed504567babfb6629810 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




4.
CN=webserver.informatieconsultant.nl
30.05.2026
28.08.2026
expires in 37 days		webserver.informatieconsultant.nl - 1 entry

4.
CN=webserver.informatieconsultant.nl
30.05.2026

28.08.2026
expires in 37 days


webserver.informatieconsultant.nl - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:065EDB360AC5A1B854B58BC076E23BF6C426
Thumbprint:E54D12AD9E7B3D29F9D8D5D9122837DBCA160136
SHA256 / Certificate:eTM7RQYrAVFjddTKIzSFAOezwcS7qrkw96AIPtu8Lms=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):973a8b313150de42ec3ef2655dd3c290ae8bfba9ce64ed504567babfb6629810
SHA256 hex / Subject Public Key Information (SPKI):973a8b313150de42ec3ef2655dd3c290ae8bfba9ce64ed504567babfb6629810 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




5.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 774 days

5.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 774 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




6.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 774 days

6.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 774 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




7.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 774 days

7.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 774 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




8.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 774 days

8.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 774 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




9.
CN=Root YE, O=ISRG, C=US
03.09.2025
03.09.2032
expires in 2235 days

9.
CN=Root YE, O=ISRG, C=US
03.09.2025

03.09.2032
expires in 2235 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:6F5E60E69C3A7469906619D56E4F499A
Thumbprint:40050D482E5AC1271EE1FE5D06F542A498145B0C
SHA256 / Certificate:LXtbQp+AwPCgMqAFH2lqD40LmJgOcfbyROrGNnvEyRc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




10.
CN=Root YE, O=ISRG, C=US
03.09.2025
03.09.2032
expires in 2235 days

10.
CN=Root YE, O=ISRG, C=US
03.09.2025

03.09.2032
expires in 2235 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:6F5E60E69C3A7469906619D56E4F499A
Thumbprint:40050D482E5AC1271EE1FE5D06F542A498145B0C
SHA256 / Certificate:LXtbQp+AwPCgMqAFH2lqD40LmJgOcfbyROrGNnvEyRc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




11.
CN=Root YE, O=ISRG, C=US
13.05.2026
03.09.2032
expires in 2235 days

11.
CN=Root YE, O=ISRG, C=US
13.05.2026

03.09.2032
expires in 2235 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:00872165FC34B6E5FBA8ADD5B3705FB53A
Thumbprint:F37620FC4B1CDDD2A3D74B1D5E8DB42E244CA006
SHA256 / Certificate:D8CQHMorrp6f27AtUNAvEJT3s2ZyCGmRueiXYm3EhfA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




12.
CN=Root YE, O=ISRG, C=US
13.05.2026
03.09.2032
expires in 2235 days

12.
CN=Root YE, O=ISRG, C=US
13.05.2026

03.09.2032
expires in 2235 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:00872165FC34B6E5FBA8ADD5B3705FB53A
Thumbprint:F37620FC4B1CDDD2A3D74B1D5E8DB42E244CA006
SHA256 / Certificate:D8CQHMorrp6f27AtUNAvEJT3s2ZyCGmRueiXYm3EhfA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




13.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
03.09.2025
03.09.2032
expires in 2235 days

13.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
03.09.2025

03.09.2032
expires in 2235 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:7F2AB707B5BDD93C9FD48B7C6029DB33
Thumbprint:B8FB05664499509659A0C8F081816C473824AD1D
SHA256 / Certificate:AL6u8oAnfjiZnTxgsnc26PIeeCw9S0RKw01GWnqyh8U=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




14.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020
17.09.2040
expires in 5171 days

14.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020

17.09.2040
expires in 5171 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:41D29DD172EAEEA780C12C6CE92F8752
Thumbprint:BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA256 / Certificate:aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





15.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020
17.09.2040
expires in 5171 days

15.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020

17.09.2040
expires in 5171 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:41D29DD172EAEEA780C12C6CE92F8752
Thumbprint:BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA256 / Certificate:aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





16.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
13.05.2026
03.09.2032
expires in 2235 days

16.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
13.05.2026

03.09.2032
expires in 2235 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:6C8F1DC727C7117F7BAF853AC980F9CD
Thumbprint:3C34E356C7FC17F5ACF04824BC587C6C623951A2
SHA256 / Certificate:7l96vWmBuwJVYyzY9JKDRRtLGIRNEgQLRO4A8HuP4sY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)



 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found

 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404

 

12. Html-Parsing via https://validator.w3.org/nu/


No https result http status 200 and Content-Type text/html or text/xml found, no Html-Parsing - Check

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns01.hostnet.nl, ns02.hostnet.nl

 

QNr.DomainTypeNS used
1
nl
NS
k.root-servers.net (2001:7fd::1)

Answer: ns1.dns.nl, ns3.dns.nl, ns4.dns.nl
2
ns01.hostnet.nl
NS
ns1.dns.nl (2001:678:2c:0:194:0:28:53)

Answer: ns01.authdns.hostnet.nl, ns02.authdns.hostnet.nl

Answer: ns01.authdns.hostnet.nl
195.206.121.11, 2001:67c:28cc::11

Answer: ns02.authdns.hostnet.nl
185.10.11.11, 2001:67c:3c0::11
3
ns02.hostnet.nl
NS
ns1.dns.nl (2001:678:2c:0:194:0:28:53)

Answer: ns01.authdns.hostnet.nl, ns02.authdns.hostnet.nl

Answer: ns01.authdns.hostnet.nl
195.206.121.11, 2001:67c:28cc::11

Answer: ns02.authdns.hostnet.nl
185.10.11.11, 2001:67c:3c0::11
4
ns01.hostnet.nl: 195.206.121.13
A
ns01.authdns.hostnet.nl (2001:67c:28cc::11)
5
ns01.hostnet.nl: 2001:67c:28cc::13
AAAA
ns01.authdns.hostnet.nl (2001:67c:28cc::11)
6
ns02.hostnet.nl: 185.10.11.13
A
ns01.authdns.hostnet.nl (2001:67c:28cc::11)
7
ns02.hostnet.nl: 2001:67c:3c0::13
AAAA
ns01.authdns.hostnet.nl (2001:67c:28cc::11)

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.informatieconsultant.nl



1
0
informatieconsultant.nl
0

no CAA entry found
1
0
nl
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
informatieconsultant.nl
google-site-verification=baO5kD0zof5ddOu1i4KTo36G7Nld8te5LKVRJfjrigM
ok
1
0
informatieconsultant.nl
MS=ms62419478
ok
1
0
informatieconsultant.nl
openai-domain-verification=dv-zoBGSN5GsQ9VniZTAhoUnnPz
ok
1
0
informatieconsultant.nl
v=spf1 a mx a:mail.informatieconsultant.nl ip4:185.95.14.117 -all
ok
1
0
www.informatieconsultant.nl
google-site-verification=baO5kD0zof5ddOu1i4KTo36G7Nld8te5LKVRJfjrigM
ok
1
0
www.informatieconsultant.nl
MS=ms62419478
ok
1
0
www.informatieconsultant.nl
openai-domain-verification=dv-zoBGSN5GsQ9VniZTAhoUnnPz
ok
1
0
www.informatieconsultant.nl
v=spf1 a mx a:mail.informatieconsultant.nl ip4:185.95.14.117 -all
ok
1
0
_acme-challenge.informatieconsultant.nl

missing entry or wrong length
1
0
_acme-challenge.www.informatieconsultant.nl

Name Error - The domain name does not exist
1
0
_acme-challenge.informatieconsultant.nl.informatieconsultant.nl

 perhaps wrong
1
0
_acme-challenge.www.informatieconsultant.nl.informatieconsultant.nl

 perhaps wrong
1
0
_acme-challenge.www.informatieconsultant.nl.www.informatieconsultant.nl

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

informatieconsultant.nl
10
mail.informatieconsultant.nl
01ok

A


185.95.14.117
01ok

CNAME


00ok
SPF
TXT
informatieconsultant.nl

v=spf1 a mx a:mail.informatieconsultant.nl ip4:185.95.14.117 -all
ok

A
informatieconsultant.nl

185.95.14.117
8192Duplicated ipv4 found.

MX
informatieconsultant.nl

mail.informatieconsultant.nl
ok

MX-A
mail.informatieconsultant.nl

185.95.14.117
8192Duplicated ipv4 found.

A
mail.informatieconsultant.nl

185.95.14.117
8192Duplicated ipv4 found.

TXT
informatieconsultant.nl

ip4:185.95.14.117
8192Duplicated ipv4 found.
_dmarc
TXT
_dmarc.informatieconsultant.nl

v=DMARC1; p=reject; rua=mailto:admin@informatieconsultant.nl
ok

				 
			

				 
			
17. Cipher Suites
Summary
DomainIPPortnum CipherstimeStd.ProtocolForward Secrecy
informatieconsultant.nl
185.95.14.117
25
7 Ciphers58.37 secSMTP
0 without, 7 FS
100.00 %
informatieconsultant.nl
185.95.14.117
587
7 Ciphers57.87 secSMTP (encrypted, submission)
0 without, 7 FS
100.00 %
informatieconsultant.nl
185.95.14.117
8080
3 Ciphers32.90 secOokla Speedtest (https)
0 without, 3 FS
100.00 %
www.informatieconsultant.nl
185.95.14.117
25
7 Ciphers58.48 secSMTP
0 without, 7 FS
100.00 %
www.informatieconsultant.nl
185.95.14.117
587
7 Ciphers58.17 secSMTP (encrypted, submission)
0 without, 7 FS
100.00 %
www.informatieconsultant.nl
185.95.14.117
8080
3 Ciphers33.46 secOokla Speedtest (https)
0 without, 3 FS
100.00 %
Complete

6
34 Ciphers
5.67 Ciphers/Check		299.26 sec49.88 sec/Check
0 without, 34 FS
100.00 %

Details
DomainIPPortCipher (OpenSsl / IANA)
informatieconsultant.nl
185.95.14.117
25
ECDHE-ECDSA-CHACHA20-POLY1305
 (Recommended)
TLSv1.2
0xCC,0xA9
 FS
7 Ciphers, 

58.37 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
 (Recommended)
TLSv1.2
0xC0,0x2C
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
 (Recommended)
TLSv1.2
0xC0,0x2B
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA384
 (Weak)
TLSv1.2
0xC0,0x24
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

ECDH
ECDSA
AES(256)
SHA384




ECDHE-ECDSA-AES128-SHA256
 (Weak)
TLSv1.2
0xC0,0x23
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

ECDH
ECDSA
AES(128)
SHA256




ECDHE-ECDSA-AES256-SHA
 (Weak)
TLSv1
0xC0,0x0A
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

ECDH
ECDSA
AES(256)
SHA1




ECDHE-ECDSA-AES128-SHA
 (Weak)
TLSv1
0xC0,0x09
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

ECDH
ECDSA
AES(128)
SHA1



587
ECDHE-ECDSA-CHACHA20-POLY1305
 (Recommended)
TLSv1.2
0xCC,0xA9
 FS
7 Ciphers, 

57.87 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
 (Recommended)
TLSv1.2
0xC0,0x2C
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
 (Recommended)
TLSv1.2
0xC0,0x2B
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA384
 (Weak)
TLSv1.2
0xC0,0x24
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

ECDH
ECDSA
AES(256)
SHA384




ECDHE-ECDSA-AES128-SHA256
 (Weak)
TLSv1.2
0xC0,0x23
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

ECDH
ECDSA
AES(128)
SHA256




ECDHE-ECDSA-AES256-SHA
 (Weak)
TLSv1
0xC0,0x0A
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

ECDH
ECDSA
AES(256)
SHA1




ECDHE-ECDSA-AES128-SHA
 (Weak)
TLSv1
0xC0,0x09
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

ECDH
ECDSA
AES(128)
SHA1



8080
ECDHE-ECDSA-CHACHA20-POLY1305
 (Recommended)
TLSv1.2
0xCC,0xA9
 FS
3 Ciphers, 

32.90 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
 (Recommended)
TLSv1.2
0xC0,0x2C
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
 (Recommended)
TLSv1.2
0xC0,0x2B
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD

www.informatieconsultant.nl
185.95.14.117
25
ECDHE-ECDSA-CHACHA20-POLY1305
 (Recommended)
TLSv1.2
0xCC,0xA9
 FS
7 Ciphers, 

58.48 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
 (Recommended)
TLSv1.2
0xC0,0x2C
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
 (Recommended)
TLSv1.2
0xC0,0x2B
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA384
 (Weak)
TLSv1.2
0xC0,0x24
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

ECDH
ECDSA
AES(256)
SHA384




ECDHE-ECDSA-AES128-SHA256
 (Weak)
TLSv1.2
0xC0,0x23
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

ECDH
ECDSA
AES(128)
SHA256




ECDHE-ECDSA-AES256-SHA
 (Weak)
TLSv1
0xC0,0x0A
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

ECDH
ECDSA
AES(256)
SHA1




ECDHE-ECDSA-AES128-SHA
 (Weak)
TLSv1
0xC0,0x09
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

ECDH
ECDSA
AES(128)
SHA1



587
ECDHE-ECDSA-CHACHA20-POLY1305
 (Recommended)
TLSv1.2
0xCC,0xA9
 FS
7 Ciphers, 

58.17 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
 (Recommended)
TLSv1.2
0xC0,0x2C
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
 (Recommended)
TLSv1.2
0xC0,0x2B
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA384
 (Weak)
TLSv1.2
0xC0,0x24
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

ECDH
ECDSA
AES(256)
SHA384




ECDHE-ECDSA-AES128-SHA256
 (Weak)
TLSv1.2
0xC0,0x23
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

ECDH
ECDSA
AES(128)
SHA256




ECDHE-ECDSA-AES256-SHA
 (Weak)
TLSv1
0xC0,0x0A
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

ECDH
ECDSA
AES(256)
SHA1




ECDHE-ECDSA-AES128-SHA
 (Weak)
TLSv1
0xC0,0x09
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

ECDH
ECDSA
AES(128)
SHA1



8080
ECDHE-ECDSA-CHACHA20-POLY1305
 (Recommended)
TLSv1.2
0xCC,0xA9
 FS
3 Ciphers, 

33.46 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
 (Recommended)
TLSv1.2
0xC0,0x2C
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
 (Recommended)
TLSv1.2
0xC0,0x2B
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD


				 
			
18. Portchecks
DomainIPPortDescriptionResultAnswer
informatieconsultant.nl
185.95.14.117
21
FTP
open
220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------  220-You are user number 1 of 50 allowed.  220-Local time is now 07:56. Server port: 21.  220-This is a private system - No anonymous login  220-IPv6 connections are also welcome on this server.  220 You will be disconnected after 15 minutes of inactivity.  

informatieconsultant.nl
185.95.14.117
21
FTP
open
220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------  220-You are user number 1 of 50 allowed.  220-Local time is now 07:56. Server port: 21.  220-This is a private system - No anonymous login  220-IPv6 connections are also welcome on this server.  220 You will be disconnected after 15 minutes of inactivity.  

informatieconsultant.nl
185.95.14.117
22
SSH
open
SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u10  

informatieconsultant.nl
185.95.14.117
22
SSH
open
SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u10  
Bad: SSH without DNS SSHFP Record found
informatieconsultant.nl
185.95.14.117
25
SMTP
open
220 webserver.informatieconsultant.nl ESMTP Postfix (Debian/GNU)  

				 
			
Answer EHLO: 250-webserver.informatieconsultant.nl  250-PIPELINING  250-SIZE  250-VRFY  250-ETRN  250-STARTTLS  250-AUTH PLAIN LOGIN  250-AUTH=PLAIN LOGIN  250-ENHANCEDSTATUSCODES  250-8BITMIME  250-DSN  250 CHUNKING  

				 
			
Answer AUTH LOGIN: 334 VXNlcm5hbWU6  
Mail certificate is invalid
informatieconsultant.nl
185.95.14.117
25
SMTP
open
220 webserver.informatieconsultant.nl ESMTP Postfix (Debian/GNU)  
Mail certificate is invalid

Answer EHLO: 250-webserver.informatieconsultant.nl  250-PIPELINING  250-SIZE  250-VRFY  250-ETRN  250-STARTTLS  250-AUTH PLAIN LOGIN  250-AUTH=PLAIN LOGIN  250-ENHANCEDSTATUSCODES  250-8BITMIME  250-DSN  250 CHUNKING  Good: STARTTLS found

Answer AUTH LOGIN: 334 VXNlcm5hbWU6  Bad: Unencrypted Login allowed



Mail From: openrelay-test@check-your-website.server-daten.de
RCPT TO: openrelay-result@check-your-website.server-daten.de		Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
informatieconsultant.nl
185.95.14.117
53
DNS
open


informatieconsultant.nl
185.95.14.117
53
DNS
open


informatieconsultant.nl
185.95.14.117
110
POP3
open
+OK Dovecot (Debian) ready.  

informatieconsultant.nl
185.95.14.117
110
POP3
open
+OK Dovecot (Debian) ready.  
This port ist unencrypted and deprecated. Don't use it.


informatieconsultant.nl
185.95.14.117
143
IMAP
open
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SPECIAL-USE XLIST LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.  

informatieconsultant.nl
185.95.14.117
143
IMAP
open
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SPECIAL-USE XLIST LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.  
This port ist unencrypted and deprecated. Don't use it.


informatieconsultant.nl
185.95.14.117
465
SMTP (encrypted)
open


informatieconsultant.nl
185.95.14.117
465
SMTP (encrypted)
open


informatieconsultant.nl
185.95.14.117
587
SMTP (encrypted, submission)
open
220 webserver.informatieconsultant.nl ESMTP Postfix (Debian/GNU)  

				 
			
Answer EHLO: 250-webserver.informatieconsultant.nl  250-PIPELINING  250-SIZE  250-VRFY  250-ETRN  250-STARTTLS  250-ENHANCEDSTATUSCODES  250-8BITMIME  250-DSN  250 CHUNKING  

				 
			
Answer AUTH LOGIN: (no AUTH option found)
Mail certificate is invalid
informatieconsultant.nl
185.95.14.117
587
SMTP (encrypted, submission)
open
220 webserver.informatieconsultant.nl ESMTP Postfix (Debian/GNU)  
Mail certificate is invalid

Answer EHLO: 250-webserver.informatieconsultant.nl  250-PIPELINING  250-SIZE  250-VRFY  250-ETRN  250-STARTTLS  250-ENHANCEDSTATUSCODES  250-8BITMIME  250-DSN  250 CHUNKING  Good: STARTTLS found


Excellent: No unencrypted login possible

Mail From: openrelay-test@check-your-website.server-daten.de
RCPT TO: openrelay-result@check-your-website.server-daten.de		Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
informatieconsultant.nl
185.95.14.117
993
IMAP (encrypted)
open


informatieconsultant.nl
185.95.14.117
993
IMAP (encrypted)
open


informatieconsultant.nl
185.95.14.117
995
POP3 (encrypted)
open


informatieconsultant.nl
185.95.14.117
995
POP3 (encrypted)
open


informatieconsultant.nl
185.95.14.117
1433
MS SQL



informatieconsultant.nl
185.95.14.117
1433
MS SQL



informatieconsultant.nl
185.95.14.117
2082
cPanel (http)



informatieconsultant.nl
185.95.14.117
2082
cPanel (http)



informatieconsultant.nl
185.95.14.117
2083
cPanel (https)



informatieconsultant.nl
185.95.14.117
2083
cPanel (https)



informatieconsultant.nl
185.95.14.117
2086
WHM (http)



informatieconsultant.nl
185.95.14.117
2086
WHM (http)



informatieconsultant.nl
185.95.14.117
2087
WHM (https)



informatieconsultant.nl
185.95.14.117
2087
WHM (https)



informatieconsultant.nl
185.95.14.117
2089
cPanel Licensing



informatieconsultant.nl
185.95.14.117
2089
cPanel Licensing



informatieconsultant.nl
185.95.14.117
2095
cPanel Webmail (http)



informatieconsultant.nl
185.95.14.117
2095
cPanel Webmail (http)



informatieconsultant.nl
185.95.14.117
2096
cPanel Webmail (https)



informatieconsultant.nl
185.95.14.117
2096
cPanel Webmail (https)



informatieconsultant.nl
185.95.14.117
2222
DirectAdmin (http)



informatieconsultant.nl
185.95.14.117
2222
DirectAdmin (http)



informatieconsultant.nl
185.95.14.117
2222
DirectAdmin (https)



informatieconsultant.nl
185.95.14.117
2222
DirectAdmin (https)



informatieconsultant.nl
185.95.14.117
3306
mySql
open


informatieconsultant.nl
185.95.14.117
3306
mySql
open


informatieconsultant.nl
185.95.14.117
5224
Plesk Licensing



informatieconsultant.nl
185.95.14.117
5224
Plesk Licensing



informatieconsultant.nl
185.95.14.117
5432
PostgreSQL



informatieconsultant.nl
185.95.14.117
5432
PostgreSQL



informatieconsultant.nl
185.95.14.117
8080
Ookla Speedtest (http)
open
http://185.95.14.117:8080/

Http-Status: 400
Bad Request

informatieconsultant.nl
185.95.14.117
8080
Ookla Speedtest (http)
open
http://185.95.14.117:8080/

Http-Status: 400
Bad Request

informatieconsultant.nl
185.95.14.117
8080
Ookla Speedtest (https)
open
https://185.95.14.117:8080/

Http-Status: 302
Certificate is invalid
Redirect: /login/
informatieconsultant.nl
185.95.14.117
8080
Ookla Speedtest (https)
open
https://185.95.14.117:8080/

Http-Status: 302
Certificate is invalid
Redirect: /login/
informatieconsultant.nl
185.95.14.117
8083
VestaCP http



informatieconsultant.nl
185.95.14.117
8083
VestaCP http



informatieconsultant.nl
185.95.14.117
8083
VestaCP https



informatieconsultant.nl
185.95.14.117
8083
VestaCP https



informatieconsultant.nl
185.95.14.117
8443
Plesk Administration (https)



informatieconsultant.nl
185.95.14.117
8443
Plesk Administration (https)



informatieconsultant.nl
185.95.14.117
8447
Plesk Installer + Updates



informatieconsultant.nl
185.95.14.117
8447
Plesk Installer + Updates



informatieconsultant.nl
185.95.14.117
8880
Plesk Administration (http)



informatieconsultant.nl
185.95.14.117
8880
Plesk Administration (http)



informatieconsultant.nl
185.95.14.117
10000
Webmin (http)



informatieconsultant.nl
185.95.14.117
10000
Webmin (http)



informatieconsultant.nl
185.95.14.117
10000
Webmin (https)



informatieconsultant.nl
185.95.14.117
10000
Webmin (https)



www.informatieconsultant.nl
185.95.14.117
21
FTP
open
220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------  220-You are user number 1 of 50 allowed.  220-Local time is now 07:56. Server port: 21.  220-This is a private system - No anonymous login  220-IPv6 connections are also welcome on this server.  220 You will be disconnected after 15 minutes of inactivity.  

www.informatieconsultant.nl
185.95.14.117
21
FTP
open
220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------  220-You are user number 1 of 50 allowed.  220-Local time is now 07:56. Server port: 21.  220-This is a private system - No anonymous login  220-IPv6 connections are also welcome on this server.  220 You will be disconnected after 15 minutes of inactivity.  

www.informatieconsultant.nl
185.95.14.117
22
SSH
open
SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u10  

www.informatieconsultant.nl
185.95.14.117
22
SSH
open
SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u10  
Bad: SSH without DNS SSHFP Record found
www.informatieconsultant.nl
185.95.14.117
25
SMTP
open
220 webserver.informatieconsultant.nl ESMTP Postfix (Debian/GNU)  

				 
			
Answer EHLO: 250-webserver.informatieconsultant.nl  250-PIPELINING  250-SIZE  250-VRFY  250-ETRN  250-STARTTLS  250-AUTH PLAIN LOGIN  250-AUTH=PLAIN LOGIN  250-ENHANCEDSTATUSCODES  250-8BITMIME  250-DSN  250 CHUNKING  

				 
			
Answer AUTH LOGIN: 334 VXNlcm5hbWU6  
Mail certificate is invalid
www.informatieconsultant.nl
185.95.14.117
25
SMTP
open
220 webserver.informatieconsultant.nl ESMTP Postfix (Debian/GNU)  
Mail certificate is invalid

Answer EHLO: 250-webserver.informatieconsultant.nl  250-PIPELINING  250-SIZE  250-VRFY  250-ETRN  250-STARTTLS  250-AUTH PLAIN LOGIN  250-AUTH=PLAIN LOGIN  250-ENHANCEDSTATUSCODES  250-8BITMIME  250-DSN  250 CHUNKING  Good: STARTTLS found

Answer AUTH LOGIN: 334 VXNlcm5hbWU6  Bad: Unencrypted Login allowed



Mail From: openrelay-test@check-your-website.server-daten.de
RCPT TO: openrelay-result@check-your-website.server-daten.de		Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
www.informatieconsultant.nl
185.95.14.117
53
DNS
open


www.informatieconsultant.nl
185.95.14.117
53
DNS
open


www.informatieconsultant.nl
185.95.14.117
110
POP3
open
+OK Dovecot (Debian) ready.  

www.informatieconsultant.nl
185.95.14.117
110
POP3
open
+OK Dovecot (Debian) ready.  
This port ist unencrypted and deprecated. Don't use it.


www.informatieconsultant.nl
185.95.14.117
143
IMAP
open
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SPECIAL-USE XLIST LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.  

www.informatieconsultant.nl
185.95.14.117
143
IMAP
open
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SPECIAL-USE XLIST LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot (Debian) ready.  
This port ist unencrypted and deprecated. Don't use it.


www.informatieconsultant.nl
185.95.14.117
465
SMTP (encrypted)
open


www.informatieconsultant.nl
185.95.14.117
465
SMTP (encrypted)
open


www.informatieconsultant.nl
185.95.14.117
587
SMTP (encrypted, submission)
open
220 webserver.informatieconsultant.nl ESMTP Postfix (Debian/GNU)  

				 
			
Answer EHLO: 250-webserver.informatieconsultant.nl  250-PIPELINING  250-SIZE  250-VRFY  250-ETRN  250-STARTTLS  250-ENHANCEDSTATUSCODES  250-8BITMIME  250-DSN  250 CHUNKING  

				 
			
Answer AUTH LOGIN: (no AUTH option found)
Mail certificate is invalid
www.informatieconsultant.nl
185.95.14.117
587
SMTP (encrypted, submission)
open
220 webserver.informatieconsultant.nl ESMTP Postfix (Debian/GNU)  
Mail certificate is invalid

Answer EHLO: 250-webserver.informatieconsultant.nl  250-PIPELINING  250-SIZE  250-VRFY  250-ETRN  250-STARTTLS  250-ENHANCEDSTATUSCODES  250-8BITMIME  250-DSN  250 CHUNKING  Good: STARTTLS found


Excellent: No unencrypted login possible

Mail From: openrelay-test@check-your-website.server-daten.de
RCPT TO: openrelay-result@check-your-website.server-daten.de		Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
www.informatieconsultant.nl
185.95.14.117
993
IMAP (encrypted)
open


www.informatieconsultant.nl
185.95.14.117
993
IMAP (encrypted)
open


www.informatieconsultant.nl
185.95.14.117
995
POP3 (encrypted)
open


www.informatieconsultant.nl
185.95.14.117
995
POP3 (encrypted)
open


www.informatieconsultant.nl
185.95.14.117
1433
MS SQL



www.informatieconsultant.nl
185.95.14.117
1433
MS SQL



www.informatieconsultant.nl
185.95.14.117
2082
cPanel (http)



www.informatieconsultant.nl
185.95.14.117
2082
cPanel (http)



www.informatieconsultant.nl
185.95.14.117
2083
cPanel (https)



www.informatieconsultant.nl
185.95.14.117
2083
cPanel (https)



www.informatieconsultant.nl
185.95.14.117
2086
WHM (http)



www.informatieconsultant.nl
185.95.14.117
2086
WHM (http)



www.informatieconsultant.nl
185.95.14.117
2087
WHM (https)



www.informatieconsultant.nl
185.95.14.117
2087
WHM (https)



www.informatieconsultant.nl
185.95.14.117
2089
cPanel Licensing



www.informatieconsultant.nl
185.95.14.117
2089
cPanel Licensing



www.informatieconsultant.nl
185.95.14.117
2095
cPanel Webmail (http)



www.informatieconsultant.nl
185.95.14.117
2095
cPanel Webmail (http)



www.informatieconsultant.nl
185.95.14.117
2096
cPanel Webmail (https)



www.informatieconsultant.nl
185.95.14.117
2096
cPanel Webmail (https)



www.informatieconsultant.nl
185.95.14.117
2222
DirectAdmin (http)



www.informatieconsultant.nl
185.95.14.117
2222
DirectAdmin (http)



www.informatieconsultant.nl
185.95.14.117
2222
DirectAdmin (https)



www.informatieconsultant.nl
185.95.14.117
2222
DirectAdmin (https)



www.informatieconsultant.nl
185.95.14.117
3306
mySql
open


www.informatieconsultant.nl
185.95.14.117
3306
mySql
open


www.informatieconsultant.nl
185.95.14.117
5224
Plesk Licensing



www.informatieconsultant.nl
185.95.14.117
5224
Plesk Licensing



www.informatieconsultant.nl
185.95.14.117
5432
PostgreSQL



www.informatieconsultant.nl
185.95.14.117
5432
PostgreSQL



www.informatieconsultant.nl
185.95.14.117
8080
Ookla Speedtest (http)
open
http://185.95.14.117:8080/

Http-Status: 400
Bad Request

www.informatieconsultant.nl
185.95.14.117
8080
Ookla Speedtest (http)
open
http://185.95.14.117:8080/

Http-Status: 400
Bad Request

www.informatieconsultant.nl
185.95.14.117
8080
Ookla Speedtest (https)
open
https://185.95.14.117:8080/

Http-Status: 302
Certificate is invalid
Redirect: /login/
www.informatieconsultant.nl
185.95.14.117
8080
Ookla Speedtest (https)
open
https://185.95.14.117:8080/

Http-Status: 302
Certificate is invalid
Redirect: /login/
www.informatieconsultant.nl
185.95.14.117
8083
VestaCP http



www.informatieconsultant.nl
185.95.14.117
8083
VestaCP http



www.informatieconsultant.nl
185.95.14.117
8083
VestaCP https



www.informatieconsultant.nl
185.95.14.117
8083
VestaCP https



www.informatieconsultant.nl
185.95.14.117
8443
Plesk Administration (https)



www.informatieconsultant.nl
185.95.14.117
8443
Plesk Administration (https)



www.informatieconsultant.nl
185.95.14.117
8447
Plesk Installer + Updates



www.informatieconsultant.nl
185.95.14.117
8447
Plesk Installer + Updates



www.informatieconsultant.nl
185.95.14.117
8880
Plesk Administration (http)



www.informatieconsultant.nl
185.95.14.117
8880
Plesk Administration (http)



www.informatieconsultant.nl
185.95.14.117
10000
Webmin (http)



www.informatieconsultant.nl
185.95.14.117
10000
Webmin (http)



www.informatieconsultant.nl
185.95.14.117
10000
Webmin (https)



www.informatieconsultant.nl
185.95.14.117
10000
Webmin (https)




				 
			

				 
			

Permalink: https://check-your-website.server-daten.de/?i=2fd86485-d4a6-44b8-9eb2-3713e4c07ba3

				 
			


Last Result: https://check-your-website.server-daten.de/?q=informatieconsultant.nl - 2026-07-08 09:55:33

				 
			
Do you like this page? Support this tool, add a link on your page:

				 
			
<a href="https://check-your-website.server-daten.de/?q=informatieconsultant.nl" target="_blank">Check this Site: informatieconsultant.nl</a>

				 
			

				 
			


Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

				 
			
QR-Code of this page - https://check-your-website.server-daten.de/?d=informatieconsultant.nl

				 
			

				 
			



Jürgen Auer • Friedenstr. 37 • 10249 Berlin • +49(0)30 420 200 60 • info@sql-und-xml.de • 
USt-IdNr.: DE221734518

				 
			


Errors, ideas, questions? Use the 
Contact form • A project using

Server-Daten - Web Database solutions