Shortcuts: 1. Basic DNS | 2. Url-Checks | 3. Comments | 4. Connections | 5. Certificates | 6. CT-Logs | 7. Html-Content | 8. CAA | 9. TXT |


C

More then one http status 200 as result

Checked:
13.05.2019 03:12:25


Older results

1. Basic DNS and Nameserver Checks

HostTIP-Addressis auth.∑ Queries∑ Timeout
joeshimkus.com
A
96.31.34.158
yes
1
0

AAAA

yes


www.joeshimkus.com
A
96.31.34.158
yes
1
0

AAAA

yes



Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2019, 00:00:00, Signature-Inception: 11.05.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
com
1 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 25.05.2019, 17:00:00, Signature-Inception: 12.05.2019, 16:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 3800, Flags 256

Public Key with Algorithm 8, KeyTag 30909, Flags 257 (SEP = Secure Entry Point)

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 27.05.2019, 18:25:33, Signature-Inception: 12.05.2019, 18:20:33, KeyTag 30909, Signer-Name: com

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest "4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
joeshimkus.com
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


www.joeshimkus.com
0 DS RR in the parent zone found


DomainNameserverNS-IP
www.joeshimkus.com
  ns1.discountasp.net / dnssec

joeshimkus.com
  ns1.discountasp.net / dnssec
72.20.51.253

  ns2.discountasp.net / ns2-dasp
216.177.89.10
com
  a.gtld-servers.net


  b.gtld-servers.net


  c.gtld-servers.net


  d.gtld-servers.net


  e.gtld-servers.net


  f.gtld-servers.net


  g.gtld-servers.net


  h.gtld-servers.net


  i.gtld-servers.net


  j.gtld-servers.net


  k.gtld-servers.net


  l.gtld-servers.net


  m.gtld-servers.net



SOA - records (beta)

Domain:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1557709917
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:3


Domain:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1557709932
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:10


Domain:joeshimkus.com
Primary:ns1.discountasp.net
Mail:hostmaster.discountasp.net
Serial:1557709751
Refresh:16384
Retry:2048
Expire:1048576
TTL:2560
num Entries:2


Domain:www.joeshimkus.com
Primary:ns1.discountasp.net
Mail:hostmaster.discountasp.net
Serial:1557709751
Refresh:16384
Retry:2048
Expire:1048576
TTL:2560
num Entries:1


2. Url-Checks


show header:
Domainname Http-StatusredirectSec.G
• http://joeshimkus.com/
96.31.34.158
301
https://joeshimkus.com/
0.343
A
Content-Type: text/html; charset=UTF-8
Location: https://joeshimkus.com/
Server: Microsoft-IIS/10.0
Date: Mon, 13 May 2019 01:13:14 GMT
Connection: close
Content-Length: 146

• http://www.joeshimkus.com/
96.31.34.158
301
https://www.joeshimkus.com/
0.340
A
Content-Type: text/html; charset=UTF-8
Location: https://www.joeshimkus.com/
Server: Microsoft-IIS/10.0
Date: Mon, 13 May 2019 01:13:14 GMT
Connection: close
Content-Length: 150

• https://joeshimkus.com/
96.31.34.158
200

1.653
B
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
Set-Cookie: ASP.NET_SessionId=mlpmlnysnbw4pfeqb2ahy34z; Path=/; Domain=joeshimkus.com; HttpOnly
X-AspNet-Version: 4.0.30319
Strict-Transport-Security: max-age=31536000
Date: Mon, 13 May 2019 01:13:15 GMT
Connection: close
Content-Length: 3555

• https://www.joeshimkus.com/
96.31.34.158
200

1.646
B
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
Set-Cookie: ASP.NET_SessionId=ipjxi1nsl4fy0xz2agz44kbg; Path=/; Domain=www.joeshimkus.com; HttpOnly
X-AspNet-Version: 4.0.30319
Strict-Transport-Security: max-age=31536000
Date: Mon, 13 May 2019 01:13:16 GMT
Connection: close
Content-Length: 3555

• http://joeshimkus.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
96.31.34.158
301
https://joeshimkus.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
0.350
A
Visible Content: Object Moved This document may be found here
Content-Type: text/html; charset=UTF-8
Location: https://joeshimkus.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: Microsoft-IIS/10.0
Date: Mon, 13 May 2019 01:13:18 GMT
Connection: close
Content-Length: 215

• http://www.joeshimkus.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
96.31.34.158
301
https://www.joeshimkus.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
0.343
A
Visible Content: Object Moved This document may be found here
Content-Type: text/html; charset=UTF-8
Location: https://www.joeshimkus.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: Microsoft-IIS/10.0
Date: Mon, 13 May 2019 01:13:18 GMT
Connection: close
Content-Length: 219

• https://joeshimkus.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

404

1.417
A
Not Found
Visible Content: HTTP Error 404.0 - Not Found The resource you are looking for has been removed, had its name changed, or is temporarily unavailable. Most likely causes: The directory or file specified does not exist on the Web server. The URL contains a typographical error. A custom filter or module, such as URLScan, restricts access to the file. Things you can try: Create the content on the Web server. Review the browser URL. Create a tracing rule to track failed requests for this HTTP status code and see which module is calling SetStatus. For more information about creating a tracing rule for failed requests, click here . Detailed Error Information: Module    IIS Web Core Notification    MapRequestHandler Handler    StaticFile Error Code    0x80070002 Requested URL    https://joeshimkus.com:443/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Physical Path    E:\web\joeshimkusc\htdocs\.well-known\acme-challenge\check-your-website-dot-server-daten-dot-de Logon Method    Anonymous Logon User    Anonymous More Information: This error means that the file or directory does not exist on the server. Create the file or directory and try the request again. View more information »
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
Strict-Transport-Security: max-age=31536000
Date: Mon, 13 May 2019 01:13:18 GMT
Connection: close
Content-Length: 4971

• https://www.joeshimkus.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

404

1.416
A
Not Found
Visible Content: HTTP Error 404.0 - Not Found The resource you are looking for has been removed, had its name changed, or is temporarily unavailable. Most likely causes: The directory or file specified does not exist on the Web server. The URL contains a typographical error. A custom filter or module, such as URLScan, restricts access to the file. Things you can try: Create the content on the Web server. Review the browser URL. Create a tracing rule to track failed requests for this HTTP status code and see which module is calling SetStatus. For more information about creating a tracing rule for failed requests, click here . Detailed Error Information: Module    IIS Web Core Notification    MapRequestHandler Handler    StaticFile Error Code    0x80070002 Requested URL    https://www.joeshimkus.com:443/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Physical Path    E:\web\joeshimkusc\htdocs\.well-known\acme-challenge\check-your-website-dot-server-daten-dot-de Logon Method    Anonymous Logon User    Anonymous More Information: This error means that the file or directory does not exist on the server. Create the file or directory and try the request again. View more information »
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
Strict-Transport-Security: max-age=31536000
Date: Mon, 13 May 2019 01:13:21 GMT
Connection: close
Content-Length: 4975

3. Comments

Aname "joeshimkus.com" is domain, public suffix is "com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services"
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
Agood: destination is https
Agood: every https has a Strict Transport Security Header
Agood: HSTS max-age is long enough, 31536000 seconds = 365 days
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
Ahttp://joeshimkus.com/ 96.31.34.158
301
https://joeshimkus.com/
correct redirect http - https with the same domain name
Ahttp://www.joeshimkus.com/ 96.31.34.158
301
https://www.joeshimkus.com/
correct redirect http - https with the same domain name
Bhttps://joeshimkus.com/ 96.31.34.158
200

Cookie sent via https, but not marked as secure
Bhttps://www.joeshimkus.com/ 96.31.34.158
200

Cookie sent via https, but not marked as secure
CError - more then one version with Http-Status 200
CError - no preferred version www or non-www
AGood: Nameserver supports TCP connections: 2 good Nameserver
AGood: Nameserver supports Echo Capitalization: 2 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
Nameserver doesn't pass all EDNS-Checks: ns1.discountasp.net / 72.20.51.253: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: ok (dnssec). COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
https://joeshimkus.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
1.417 seconds
Warning: 404 needs more then one second
https://www.joeshimkus.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
1.416 seconds
Warning: 404 needs more then one second
ADuration: 59927 milliseconds, 59.927 seconds


4. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
joeshimkus.com
96.31.34.158
443
ok
Tls12
DiffieHellman
2048
Aes256
256
Sha384
supported
ok
Chain (complete)
1CN=www.joeshimkus.com

2CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
www.joeshimkus.com
96.31.34.158
443
ok
Tls12
DiffieHellman
2048
Aes256
256
Sha384
supported
ok
Chain (complete)
1CN=www.joeshimkus.com

2CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US


5. Certificates

1.
1.
CN=www.joeshimkus.com
11.11.2018
11.11.2019
expires in 169 days
www.joeshimkus.com, joeshimkus.com - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:08FD951A0E52467F7F67D1112BEE745C
Thumbprint:FD1491DEED2EC147C5BAB7ED47621A8CE84234D2
SHA256 / Certificate:gN7W6kreULKIr98vlcl224b7Cu/mWdsXG7rqEEAJsnc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):30a652f8780285c24ce342d2cca8aebe4c7ff386040d8863636f56f3fdfd77aa
OCSP - Url:http://status.rapidssl.com
OCSP - must staple:no
Certificate Transparency:yes


2.
CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
06.11.2017
06.11.2027
expires in 3086 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:08A5A246CD4B5C8C83D702B4BBAB5349
Thumbprint:98C6A8DC887963BA3CF9C2731CBDD3F7DE05AC2D
SHA256 / Certificate:x5C0cShEfsC2DyK/y3ldccMm3ZEO4Sy7TMWoYZHrkbw=
SHA256 hex / Cert (DANE * 0 1):c790b47128447ec0b60f22bfcb795d71c326dd910ee12cbb4cc5a86191eb91bc
SHA256 hex / PublicKey (DANE * 1 1):9ca59cb18adcfb2e48f2f2dfd55181ca36edf879dab2397ef61f2534a272b681
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no


3.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006
10.11.2031
expires in 4551 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:083BE056904246B1A1756AC95991C74A
Thumbprint:A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
SHA256 / Certificate:Q0ig6URMeMsmXgWNXolEtNhPlmK9Jtslf4k0pEPHAWE=
SHA256 hex / Cert (DANE * 0 1):4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
SHA256 hex / PublicKey (DANE * 1 1):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no



6. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

Issuerlast 7 daysactivenum Certs
CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
624248410
CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2018-11-11 00:00:00
2019-11-11 12:00:00
joeshimkus.com, www.joeshimkus.com
2 entries



2. Source crt.sh - old and new certificates, sometimes very slow.

Issuerlast 7 daysactivenum Certs
CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
0
1
1
CN=RapidSSL CA, O="GeoTrust, Inc.", C=US
0
0
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
946977916
CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2018-11-10 23:00:00
2019-11-11 11:00:00
joeshimkus.com, www.joeshimkus.com
2 entries


4170759
CN=RapidSSL CA, O="GeoTrust, Inc.", C=US
2013-08-06 13:45:48
2014-08-09 07:20:28
Domain Control Validated - RapidSSL(R), GT64649586, joeshimkus.com, See www.rapidssl.com/resources/cps (c)13, www.joeshimkus.com
2 entries



7. Html-Content - Entries (BETA - mixed content and other checks)

No Html-Content entries found. Only checked if https + status 200/401/403/404


8. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.joeshimkus.com
0

no CAA entry found
1
0
joeshimkus.com
0

no CAA entry found
1
0
com
0

no CAA entry found
1
0


9. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
joeshimkus.com

ok
1
0
www.joeshimkus.com

ok
1
0
_acme-challenge.joeshimkus.com

missing entry or wrong length
1
0
_acme-challenge.www.joeshimkus.com

Name Error - The domain name does not exist
1
0
_acme-challenge.joeshimkus.com.joeshimkus.com

perhaps wrong
1
0
_acme-challenge.www.joeshimkus.com.joeshimkus.com

perhaps wrong
1
0
_acme-challenge.www.joeshimkus.com.www.joeshimkus.com

Name Error - The domain name does not exist
1
0



Permalink: https://check-your-website.server-daten.de/?i=58995589-115e-4c33-bc93-8bbd56bf1b2d


Last Result: https://check-your-website.server-daten.de/?q=joeshimkus.com - 2019-05-13 03:12:25