Check DNS, Urls + Redirects, Certificates and Content of your Website


 

 

A+

 

Top configuration, no warnings +Preload

 

Checked:
27.08.2026 21:38:20

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
laserpigeon.nz
A
35.85.90.134
Portland/Oregon/United States (US) - Amazon.com, Inc.
Hostname: ivantheterrible.laserpigeon.nz
yes
2
0

AAAA

yes


www.laserpigeon.nz
CNAME
laserpigeon.nz
yes
1
0

A
35.85.90.134
Portland/Oregon/United States (US) - Amazon.com, Inc.
Hostname: ivantheterrible.laserpigeon.nz
yes


*.laserpigeon.nz
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






• Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 57780, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: nz

nz
2 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 62081, DigestType 2 and Digest XipcB9rxj+AuJgmi9jAlAVn3UHwtDQjeaREAFRvi9UQ=






DS with Algorithm 8, KeyTag 38240, DigestType 2 and Digest c6nXg5hZWmzduy5pSJEGCEb4nR3wkMx49Zboe4BH1rk=






1 RRSIG RR to validate DS RR found






RRSIG-Owner nz., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 09.09.2026, 17:00:00 +, Signature-Inception: 27.08.2026, 16:00:00 +, KeyTag 57780, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone






4 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 5133, Flags 256






Public Key with Algorithm 8, KeyTag 23883, Flags 256






Public Key with Algorithm 8, KeyTag 38240, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 62081, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner nz., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 06.09.2026, 14:45:51 +, Signature-Inception: 23.08.2026, 04:14:41 +, KeyTag 62081, Signer-Name: nz






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 62081 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 62081, DigestType 2 and Digest "XipcB9rxj+AuJgmi9jAlAVn3UHwtDQjeaREAFRvi9UQ=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: laserpigeon.nz

laserpigeon.nz
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "eeiud3o75s64essql2s5d7hg03r5ejqi" between the hashed NSEC3-owner "eehsf5dtjhemtni1fvbiguhp793r0a5r" and the hashed NextOwner "eel2srh439df5qn9jqdqndj7e3dfc41t". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner eehsf5dtjhemtni1fvbiguhp793r0a5r.nz., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 02.09.2026, 05:34:29 +, Signature-Inception: 27.08.2026, 01:59:27 +, KeyTag 23883, Signer-Name: nz






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "og0ag3sotji48e678ob8os8tq9c31ak9" as Owner. That's the Hash of "nz" with the NextHashedOwnerName "ogr4v2i2r8nof34ek8de5chelf7sr99i". So that domain name is the Closest Encloser of "laserpigeon.nz". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner og0ag3sotji48e678ob8os8tq9c31ak9.nz., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 03.09.2026, 19:41:15 +, Signature-Inception: 26.08.2026, 15:29:40 +, KeyTag 23883, Signer-Name: nz






0 DNSKEY RR found









Zone: www.laserpigeon.nz

www.laserpigeon.nz
0 DS RR in the parent zone found

 

3. Name Servers

DomainNameserverNS-IP
laserpigeon.nz
•  ns1.metaname.net
49.50.242.204
Auckland/New Zealand (NZ) - VOYAGERNET
•

• 
2001:470:1f09:126e::1
Auckland/New Zealand (NZ) - Hurricane Electric LLC
•

•  ns2.metaname.net
103.11.126.252
Christchurch/Canterbury/New Zealand (NZ) - Solarix Networks Limited
•

• 
2001:470:67:c8::1
Auckland/New Zealand (NZ) - Hurricane Electric LLC
•

•  ns3.metaname.net
103.11.126.244
Christchurch/Canterbury/New Zealand (NZ) - Solarix Networks Limited
•

• 
2001:470:1f17:219::1
Auckland/New Zealand (NZ) - Hurricane Electric LLC
•
nz
•  loopback.dns.net.nz


•  ns1.dns.net.nz / ns1


•  ns2.dns.net.nz / ns2a
•

•  ns3.dns.net.nz / ns3a


•  ns4.dns.net.nz / ns4b
•

•  ns5.dns.net.nz / LHR3
•

•  ns6.dns.net.nz / FRA2
•

•  ns7.dns.net.nz / s2.dex
•

 

4. SOA-Entries


Domain:nz
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:nz
Zone-Name:nz
Primary:loopback.dns.net.nz
Mail:soa.nzrs.net.nz
Serial:2608271933
Refresh:900
Retry:300
Expire:604800
TTL:3600
num Entries:7


Domain:laserpigeon.nz
Zone-Name:laserpigeon.nz
Primary:ns1.metaname.net
Mail:hostmaster.metaname.net
Serial:2026031901
Refresh:10800
Retry:3600
Expire:1209600
TTL:3600
num Entries:6


5. Screenshots

Startaddress: https://www.laserpigeon.nz/, address used: https://www.laserpigeon.nz/, Screenshot created 2026-08-27 22:05:08 +00:0

 

Mobil (412px x 732px)

 

819 milliseconds

 

Screenshot mobile - https://www.laserpigeon.nz/
Mobil + Landscape (732px x 412px)

 

798 milliseconds

 

Screenshot mobile landscape - https://www.laserpigeon.nz/
Screen (1280px x 1680px)

 

858 milliseconds

 

Screenshot Desktop - https://www.laserpigeon.nz/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport397732
content Size3971393

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://laserpigeon.nz/
35.85.90.134
301
https://laserpigeon.nz/
Html is minified: 102.63 %
0.343
A
Date: Thu, 27 Aug 2026 19:40:34 GMT
Server: Apache/2.4.68,(Debian)
Location: https://laserpigeon.nz/
Content-Length: 351
Content-Type: text/html; charset=iso-8859-1

• http://www.laserpigeon.nz/
35.85.90.134
301
https://www.laserpigeon.nz/
Html is minified: 102.57 %
0.343
A
Date: Thu, 27 Aug 2026 19:40:34 GMT
Server: Apache/2.4.68,(Debian)
Location: https://www.laserpigeon.nz/
Content-Length: 359
Content-Type: text/html; charset=iso-8859-1

• https://laserpigeon.nz/
35.85.90.134
301
https://www.laserpigeon.nz/
Html is minified: 102.59 %
6.030
A
Date: Thu, 27 Aug 2026 19:40:35 GMT
Server: Apache/2.4.68,(Debian)
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Location: https://www.laserpigeon.nz/
Content-Length: 356
Content-Type: text/html; charset=iso-8859-1

• https://www.laserpigeon.nz/
35.85.90.134 gzip used - 991 / 1891 - 47.59 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
200

Html is minified: 106.24 %
Other inline scripts (∑/total): 0/0
5.997
A
Date: Thu, 27 Aug 2026 19:40:42 GMT
Server: Apache/2.4.68,(Debian)
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
ETag: "763-64d07761ec9df-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Last-Modified: Sun, 15 Mar 2026 03:11:42 GMT
Content-Encoding: gzip
Content-Length: 991
Content-Type: text/html

• http://laserpigeon.nz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
35.85.90.134
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
301
https://laserpigeon.nz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 102.19 %
Other inline scripts (∑/total): 0/0
0.330
A
Visible Content:
Date: Thu, 27 Aug 2026 19:40:50 GMT
Server: Apache/2.4.68,(Debian)
Location: https://laserpigeon.nz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Length: 420
Content-Type: text/html; charset=iso-8859-1

• http://www.laserpigeon.nz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
35.85.90.134
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
301
https://www.laserpigeon.nz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 102.15 %
Other inline scripts (∑/total): 0/0
0.173
A
Visible Content:
Date: Thu, 27 Aug 2026 19:40:52 GMT
Server: Apache/2.4.68,(Debian)
Location: https://www.laserpigeon.nz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Length: 428
Content-Type: text/html; charset=iso-8859-1

• https://laserpigeon.nz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
301
https://www.laserpigeon.nz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 102.16 %
Other inline scripts (∑/total): 0/0
5.327
A
Visible Content:
Date: Thu, 27 Aug 2026 19:41:02 GMT
Server: Apache/2.4.68,(Debian)
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Location: https://www.laserpigeon.nz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Length: 425
Content-Type: text/html; charset=iso-8859-1

• https://www.laserpigeon.nz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 102.88 %
Other inline scripts (∑/total): 0/0
5.327
A
Not Found
Visible Content:
Date: Thu, 27 Aug 2026 19:41:09 GMT
Server: Apache/2.4.68,(Debian)
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Length: 321
Content-Type: text/html; charset=iso-8859-1

• https://35.85.90.134/
35.85.90.134 gzip used - 235 / 304 - 22.70 %
Inline-JavaScript (∑/total): 1/46 Inline-CSS (∑/total): 0/0
200

Html is minified: 155.90 %
Other inline scripts (∑/total): 0/0
5.997
N
Certificate error: RemoteCertificateNameMismatch
Date: Thu, 27 Aug 2026 19:40:53 GMT
Server: Apache/2.4.68,(Debian)
ETag: "130-633bad6ec2dc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Last-Modified: Sun, 27 Apr 2025 04:17:03 GMT
Content-Encoding: gzip
Content-Length: 235
Content-Type: text/html

 

7. Comments


1. General Results, most used to calculate the result

Aname "laserpigeon.nz" is domain, public suffix is ".nz", top-level-domain is ".nz", top-level-domain-type is "country-code", Country is New Zealand, tld-manager is "InternetNZ", num .nz-domains preloaded: 728 (complete: 276475)
AGood: All ip addresses are public addresses
Warning: Only one ip address found: laserpigeon.nz has only one ip address.
Warning: Only one ip address found: www.laserpigeon.nz has only one ip address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: laserpigeon.nz has no ipv6 address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: www.laserpigeon.nz has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: www is preferred
AGood: No cookie sent via http.
AGood: HSTS has preload directive
AExcellent: Domain is in the Google-Preload-List
AExcellent: Domain is in the Mozilla/Firefox-Preload-List
AHSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):1 complete Content-Type - header (3 urls)
https://www.laserpigeon.nz/ 35.85.90.134


Url with incomplete Content-Type - header - missing charset
https://35.85.90.134/ 35.85.90.134


Url with incomplete Content-Type - header - missing charset
Ahttp://laserpigeon.nz/ 35.85.90.134
301
https://laserpigeon.nz/
Correct redirect http - https with the same domain name
Ahttp://www.laserpigeon.nz/ 35.85.90.134
301
https://www.laserpigeon.nz/
Correct redirect http - https with the same domain name
Nhttps://35.85.90.134/ 35.85.90.134
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
XFatal error: Nameserver doesn't support TCP connection: ns1.dns.net.nz: Timeout
XFatal error: Nameserver doesn't support TCP connection: ns3.dns.net.nz: Timeout
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain laserpigeon.nz, 1 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain www.laserpigeon.nz, 1 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.laserpigeon.nz

2. Header-Checks

Fwww.laserpigeon.nz 35.85.90.134
Content-Security-Policy
Critical: Missing Header:
Fwww.laserpigeon.nz 35.85.90.134
X-Content-Type-Options
Critical: Missing Header:
Fwww.laserpigeon.nz 35.85.90.134
Referrer-Policy
Critical: Missing Header:
Fwww.laserpigeon.nz 35.85.90.134
Permissions-Policy
Critical: Missing Header:
Bwww.laserpigeon.nz 35.85.90.134
Cross-Origin-Embedder-Policy
Info: Missing Header
Bwww.laserpigeon.nz 35.85.90.134
Cross-Origin-Opener-Policy
Info: Missing Header
Bwww.laserpigeon.nz 35.85.90.134
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks

AInfo:: 2 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 3 Name Servers.
AInfo:: 2 Queries complete, 2 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
AGood: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.ns1.metaname.net (2001:470:1f09:126e::1, 49.50.242.204), ns2.metaname.net (103.11.126.252, 2001:470:67:c8::1), ns3.metaname.net (103.11.126.244, 2001:470:1f17:219::1)
AGood (1 - 3.0):: An average of 0.7 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 3 different Name Servers found: ns1.metaname.net, ns2.metaname.net, ns3.metaname.net, 3 Name Servers included in Delegation: ns1.metaname.net, ns2.metaname.net, ns3.metaname.net, 3 Name Servers included in 1 Zone definitions: ns1.metaname.net, ns2.metaname.net, ns3.metaname.net, 1 Name Servers listed in SOA.Primary: ns1.metaname.net.
AGood: Only one SOA.Primary Name Server found.: ns1.metaname.net.
AGood: SOA.Primary Name Server included in the delegation set.: ns1.metaname.net.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: ns1.metaname.net, ns2.metaname.net, ns3.metaname.net
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 3 different Name Servers found
AGood: All name servers have ipv4- and ipv6-addresses.: 3 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 3 Name Servers, 1 Top Level Domain: net
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: metaname.net
Warning: All Name Servers from the same Country / IP location.: 3 Name Servers, 1 Countries: NZ
AInfo: Ipv4-Subnet-list: 3 Name Servers, 2 different subnets (first Byte): 103., 49., 2 different subnets (first two Bytes): 103.11., 49.50., 2 different subnets (first three Bytes): 103.11.126., 49.50.242.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 3 Name Servers with IPv6, 1 different subnets (first block): 2001:, 1 different subnets (first two blocks): 2001:0470:, 3 different subnets (first three blocks): 2001:0470:0067:, 2001:0470:1f09:, 2001:0470:1f17:, 3 different subnets (first four blocks): 2001:0470:0067:00c8:, 2001:0470:1f09:126e:, 2001:0470:1f17:0219:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 6 good Nameserver
AGood: Nameserver supports Echo Capitalization: 6 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 6 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 6 good Nameserver
Nameserver doesn't pass all EDNS-Checks: loopback.dns.net.nz: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns5.dns.net.nz: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found (LHR3). COOKIE: fatal timeout. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
https://35.85.90.134/ 35.85.90.134
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://35.85.90.134/ 35.85.90.134
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://www.laserpigeon.nz/ 35.85.90.134
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
https://35.85.90.134/ 35.85.90.134
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
AGood: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 1 external CSS / JavaScript files found
AGood: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 3 images (type image/png, image/jpg, image/jpeg, image/webp, image/gif) found without additional Compression. Not required because these images are already compressed
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 1 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 1 complete.
Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 3 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 3 complete.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 3 img-elements without alt-attribute, 0 img-elements with empty alt-attribute found.
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://www.laserpigeon.nz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
5.327 seconds
Warning: 404 needs more then one second
ADuration: 1612827 milliseconds, 1612.827 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
laserpigeon.nz
35.85.90.134
443
ok
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
laserpigeon.nz
35.85.90.134
443
ok
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=ivantheterrible.laserpigeon.nz


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


www.laserpigeon.nz
35.85.90.134
443
ok
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

www.laserpigeon.nz
35.85.90.134
443
ok
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=ivantheterrible.laserpigeon.nz


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


laserpigeon.nz
laserpigeon.nz
443
ok
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

laserpigeon.nz
laserpigeon.nz
443
ok
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=ivantheterrible.laserpigeon.nz


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


www.laserpigeon.nz
www.laserpigeon.nz
443
ok
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

www.laserpigeon.nz
www.laserpigeon.nz
443
ok
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=ivantheterrible.laserpigeon.nz


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


35.85.90.134
35.85.90.134
443
name does not match
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

35.85.90.134
35.85.90.134
443
name does not match
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=karaoke.laserpigeon.nz


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


laserpigeon.nz
35.85.90.134
25
ok
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

laserpigeon.nz
35.85.90.134
25
ok
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=ivantheterrible.laserpigeon.nz


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


laserpigeon.nz
35.85.90.134
587
ok
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

laserpigeon.nz
35.85.90.134
587
ok
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=ivantheterrible.laserpigeon.nz


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


www.laserpigeon.nz
35.85.90.134
25
ok
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

www.laserpigeon.nz
35.85.90.134
25
ok
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=ivantheterrible.laserpigeon.nz


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


www.laserpigeon.nz
35.85.90.134
587
ok
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

www.laserpigeon.nz
35.85.90.134
587
ok
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=ivantheterrible.laserpigeon.nz


2CN=YE2, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US

 

9. Certificates

1.
1.
CN=ivantheterrible.laserpigeon.nz
08.07.2026
06.10.2026 11:55:37
1 days expired
ivantheterrible.laserpigeon.nz, laserpigeon.nz, lucym.co.nz, www.laserpigeon.nz, www.lucym.co.nz - 5 entries
1.
1.
CN=ivantheterrible.laserpigeon.nz
08.07.2026

06.10.2026
1 days expired


ivantheterrible.laserpigeon.nz, laserpigeon.nz, lucym.co.nz, www.laserpigeon.nz, www.lucym.co.nz - 5 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:0558DC2CE812D5056241BC38DE88B1C2104B
Thumbprint:CC670C7B0A489DF2206D7B70DBFE59748613D618
SHA256 / Certificate:selrZqvXIFwp2KQneRVIv4pnyc6L0kejaKAKkJ3knpI=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):d75a80e3b8dc1d2e2fa2b0ed1d955a3fb2a3293f1bdd85cf8cd12b53d110fb1d
SHA256 hex / Subject Public Key Information (SPKI):d75a80e3b8dc1d2e2fa2b0ed1d955a3fb2a3293f1bdd85cf8cd12b53d110fb1d (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




2.
CN=ivantheterrible.laserpigeon.nz
08.07.2026
06.10.2026 11:55:37
1 days expired
ivantheterrible.laserpigeon.nz, laserpigeon.nz, lucym.co.nz, www.laserpigeon.nz, www.lucym.co.nz - 5 entries

2.
CN=ivantheterrible.laserpigeon.nz
08.07.2026

06.10.2026
1 days expired


ivantheterrible.laserpigeon.nz, laserpigeon.nz, lucym.co.nz, www.laserpigeon.nz, www.lucym.co.nz - 5 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:0558DC2CE812D5056241BC38DE88B1C2104B
Thumbprint:CC670C7B0A489DF2206D7B70DBFE59748613D618
SHA256 / Certificate:selrZqvXIFwp2KQneRVIv4pnyc6L0kejaKAKkJ3knpI=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):d75a80e3b8dc1d2e2fa2b0ed1d955a3fb2a3293f1bdd85cf8cd12b53d110fb1d
SHA256 hex / Subject Public Key Information (SPKI):d75a80e3b8dc1d2e2fa2b0ed1d955a3fb2a3293f1bdd85cf8cd12b53d110fb1d (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ivantheterrible.laserpigeon.nz
08.07.2026
06.10.2026 11:55:37
1 days expired
ivantheterrible.laserpigeon.nz, laserpigeon.nz, lucym.co.nz, www.laserpigeon.nz, www.lucym.co.nz - 5 entries

3.
CN=ivantheterrible.laserpigeon.nz
08.07.2026

06.10.2026
1 days expired


ivantheterrible.laserpigeon.nz, laserpigeon.nz, lucym.co.nz, www.laserpigeon.nz, www.lucym.co.nz - 5 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:0558DC2CE812D5056241BC38DE88B1C2104B
Thumbprint:CC670C7B0A489DF2206D7B70DBFE59748613D618
SHA256 / Certificate:selrZqvXIFwp2KQneRVIv4pnyc6L0kejaKAKkJ3knpI=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):d75a80e3b8dc1d2e2fa2b0ed1d955a3fb2a3293f1bdd85cf8cd12b53d110fb1d
SHA256 hex / Subject Public Key Information (SPKI):d75a80e3b8dc1d2e2fa2b0ed1d955a3fb2a3293f1bdd85cf8cd12b53d110fb1d (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




4.
CN=ivantheterrible.laserpigeon.nz
08.07.2026
06.10.2026 11:55:37
1 days expired
ivantheterrible.laserpigeon.nz, laserpigeon.nz, lucym.co.nz, www.laserpigeon.nz, www.lucym.co.nz - 5 entries

4.
CN=ivantheterrible.laserpigeon.nz
08.07.2026

06.10.2026
1 days expired


ivantheterrible.laserpigeon.nz, laserpigeon.nz, lucym.co.nz, www.laserpigeon.nz, www.lucym.co.nz - 5 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:0558DC2CE812D5056241BC38DE88B1C2104B
Thumbprint:CC670C7B0A489DF2206D7B70DBFE59748613D618
SHA256 / Certificate:selrZqvXIFwp2KQneRVIv4pnyc6L0kejaKAKkJ3knpI=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):d75a80e3b8dc1d2e2fa2b0ed1d955a3fb2a3293f1bdd85cf8cd12b53d110fb1d
SHA256 hex / Subject Public Key Information (SPKI):d75a80e3b8dc1d2e2fa2b0ed1d955a3fb2a3293f1bdd85cf8cd12b53d110fb1d (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




5.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 697 days


5.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 697 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




6.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 697 days


6.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 697 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




7.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 697 days


7.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 697 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




8.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 697 days


8.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 697 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




9.
CN=Root YE, O=ISRG, C=US
03.09.2025
03.09.2032
expires in 2158 days


9.
CN=Root YE, O=ISRG, C=US
03.09.2025

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:6F5E60E69C3A7469906619D56E4F499A
Thumbprint:40050D482E5AC1271EE1FE5D06F542A498145B0C
SHA256 / Certificate:LXtbQp+AwPCgMqAFH2lqD40LmJgOcfbyROrGNnvEyRc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




10.
CN=Root YE, O=ISRG, C=US
03.09.2025
03.09.2032
expires in 2158 days


10.
CN=Root YE, O=ISRG, C=US
03.09.2025

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:6F5E60E69C3A7469906619D56E4F499A
Thumbprint:40050D482E5AC1271EE1FE5D06F542A498145B0C
SHA256 / Certificate:LXtbQp+AwPCgMqAFH2lqD40LmJgOcfbyROrGNnvEyRc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




11.
CN=Root YE, O=ISRG, C=US
13.05.2026
03.09.2032
expires in 2158 days


11.
CN=Root YE, O=ISRG, C=US
13.05.2026

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:00872165FC34B6E5FBA8ADD5B3705FB53A
Thumbprint:F37620FC4B1CDDD2A3D74B1D5E8DB42E244CA006
SHA256 / Certificate:D8CQHMorrp6f27AtUNAvEJT3s2ZyCGmRueiXYm3EhfA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




12.
CN=Root YE, O=ISRG, C=US
13.05.2026
03.09.2032
expires in 2158 days


12.
CN=Root YE, O=ISRG, C=US
13.05.2026

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:00872165FC34B6E5FBA8ADD5B3705FB53A
Thumbprint:F37620FC4B1CDDD2A3D74B1D5E8DB42E244CA006
SHA256 / Certificate:D8CQHMorrp6f27AtUNAvEJT3s2ZyCGmRueiXYm3EhfA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




13.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
03.09.2025
03.09.2032
expires in 2158 days


13.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
03.09.2025

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:7F2AB707B5BDD93C9FD48B7C6029DB33
Thumbprint:B8FB05664499509659A0C8F081816C473824AD1D
SHA256 / Certificate:AL6u8oAnfjiZnTxgsnc26PIeeCw9S0RKw01GWnqyh8U=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




14.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020
17.09.2040
expires in 5094 days


14.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020

17.09.2040
expires in 5094 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:41D29DD172EAEEA780C12C6CE92F8752
Thumbprint:BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA256 / Certificate:aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





15.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020
17.09.2040
expires in 5094 days


15.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020

17.09.2040
expires in 5094 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:41D29DD172EAEEA780C12C6CE92F8752
Thumbprint:BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA256 / Certificate:aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





16.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
13.05.2026
03.09.2032
expires in 2158 days


16.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
13.05.2026

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:6C8F1DC727C7117F7BAF853AC980F9CD
Thumbprint:3C34E356C7FC17F5ACF04824BC587C6C623951A2
SHA256 / Certificate:7l96vWmBuwJVYyzY9JKDRRtLGIRNEgQLRO4A8HuP4sY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)



2.
1.
CN=karaoke.laserpigeon.nz
09.07.2026
07.10.2026 11:53:55
3 hours expired
karaoke.laserpigeon.nz - 1 entry
2.
1.
CN=karaoke.laserpigeon.nz
09.07.2026

07.10.2026
0 days expired


karaoke.laserpigeon.nz - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:050DB360799ACE4C9B5DD33F92A6D44E49EA
Thumbprint:D53D4D12757DD5DECFC6E0D0E167D7585CA9D5D8
SHA256 / Certificate:FfY9ktZLIIIPgvxqSof6V2NEMN4pWAW7rtx6s15qgp0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8588ca40b0514ecdcb0dadac350563b825c9fd7bd67350ab63810496d0739ec9
SHA256 hex / Subject Public Key Information (SPKI):8588ca40b0514ecdcb0dadac350563b825c9fd7bd67350ab63810496d0739ec9 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




2.
CN=karaoke.laserpigeon.nz
09.07.2026
07.10.2026 11:53:55
3 hours expired
karaoke.laserpigeon.nz - 1 entry

2.
CN=karaoke.laserpigeon.nz
09.07.2026

07.10.2026
0 days expired


karaoke.laserpigeon.nz - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:050DB360799ACE4C9B5DD33F92A6D44E49EA
Thumbprint:D53D4D12757DD5DECFC6E0D0E167D7585CA9D5D8
SHA256 / Certificate:FfY9ktZLIIIPgvxqSof6V2NEMN4pWAW7rtx6s15qgp0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8588ca40b0514ecdcb0dadac350563b825c9fd7bd67350ab63810496d0739ec9
SHA256 hex / Subject Public Key Information (SPKI):8588ca40b0514ecdcb0dadac350563b825c9fd7bd67350ab63810496d0739ec9 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=karaoke.laserpigeon.nz
09.07.2026
07.10.2026 11:53:55
3 hours expired
karaoke.laserpigeon.nz - 1 entry

3.
CN=karaoke.laserpigeon.nz
09.07.2026

07.10.2026
0 days expired


karaoke.laserpigeon.nz - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:050DB360799ACE4C9B5DD33F92A6D44E49EA
Thumbprint:D53D4D12757DD5DECFC6E0D0E167D7585CA9D5D8
SHA256 / Certificate:FfY9ktZLIIIPgvxqSof6V2NEMN4pWAW7rtx6s15qgp0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8588ca40b0514ecdcb0dadac350563b825c9fd7bd67350ab63810496d0739ec9
SHA256 hex / Subject Public Key Information (SPKI):8588ca40b0514ecdcb0dadac350563b825c9fd7bd67350ab63810496d0739ec9 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




4.
CN=karaoke.laserpigeon.nz
09.07.2026
07.10.2026 11:53:55
3 hours expired
karaoke.laserpigeon.nz - 1 entry

4.
CN=karaoke.laserpigeon.nz
09.07.2026

07.10.2026
0 days expired


karaoke.laserpigeon.nz - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:050DB360799ACE4C9B5DD33F92A6D44E49EA
Thumbprint:D53D4D12757DD5DECFC6E0D0E167D7585CA9D5D8
SHA256 / Certificate:FfY9ktZLIIIPgvxqSof6V2NEMN4pWAW7rtx6s15qgp0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8588ca40b0514ecdcb0dadac350563b825c9fd7bd67350ab63810496d0739ec9
SHA256 hex / Subject Public Key Information (SPKI):8588ca40b0514ecdcb0dadac350563b825c9fd7bd67350ab63810496d0739ec9 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




5.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 697 days


5.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 697 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




6.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 697 days


6.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 697 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




7.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 697 days


7.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 697 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




8.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 697 days


8.
CN=YE2, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 697 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:4DF3B15DD6C0784C507CD37B58E6F115
Thumbprint:F8158CA8A3A7C5DBD7842218F5D949CEC83ACDBA
SHA256 / Certificate:l2WN6MaN+pis4eUCimPVShqukRs+IUcQdsaFDNCMurQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b3fb5d00e994cddf2cc9a4eea9f806bc5727e83cc0e4299bf956f2d524fe5376
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




9.
CN=Root YE, O=ISRG, C=US
03.09.2025
03.09.2032
expires in 2158 days


9.
CN=Root YE, O=ISRG, C=US
03.09.2025

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:6F5E60E69C3A7469906619D56E4F499A
Thumbprint:40050D482E5AC1271EE1FE5D06F542A498145B0C
SHA256 / Certificate:LXtbQp+AwPCgMqAFH2lqD40LmJgOcfbyROrGNnvEyRc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




10.
CN=Root YE, O=ISRG, C=US
03.09.2025
03.09.2032
expires in 2158 days


10.
CN=Root YE, O=ISRG, C=US
03.09.2025

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:6F5E60E69C3A7469906619D56E4F499A
Thumbprint:40050D482E5AC1271EE1FE5D06F542A498145B0C
SHA256 / Certificate:LXtbQp+AwPCgMqAFH2lqD40LmJgOcfbyROrGNnvEyRc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




11.
CN=Root YE, O=ISRG, C=US
13.05.2026
03.09.2032
expires in 2158 days


11.
CN=Root YE, O=ISRG, C=US
13.05.2026

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:00872165FC34B6E5FBA8ADD5B3705FB53A
Thumbprint:F37620FC4B1CDDD2A3D74B1D5E8DB42E244CA006
SHA256 / Certificate:D8CQHMorrp6f27AtUNAvEJT3s2ZyCGmRueiXYm3EhfA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




12.
CN=Root YE, O=ISRG, C=US
13.05.2026
03.09.2032
expires in 2158 days


12.
CN=Root YE, O=ISRG, C=US
13.05.2026

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:00872165FC34B6E5FBA8ADD5B3705FB53A
Thumbprint:F37620FC4B1CDDD2A3D74B1D5E8DB42E244CA006
SHA256 / Certificate:D8CQHMorrp6f27AtUNAvEJT3s2ZyCGmRueiXYm3EhfA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




13.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020
17.09.2040
expires in 5094 days


13.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020

17.09.2040
expires in 5094 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:41D29DD172EAEEA780C12C6CE92F8752
Thumbprint:BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA256 / Certificate:aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





14.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020
17.09.2040
expires in 5094 days


14.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020

17.09.2040
expires in 5094 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:41D29DD172EAEEA780C12C6CE92F8752
Thumbprint:BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA256 / Certificate:aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





15.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
13.05.2026
03.09.2032
expires in 2158 days


15.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
13.05.2026

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:6C8F1DC727C7117F7BAF853AC980F9CD
Thumbprint:3C34E356C7FC17F5ACF04824BC587C6C623951A2
SHA256 / Certificate:7l96vWmBuwJVYyzY9JKDRRtLGIRNEgQLRO4A8HuP4sY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




16.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
03.09.2025
03.09.2032
expires in 2158 days


16.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
03.09.2025

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:7F2AB707B5BDD93C9FD48B7C6029DB33
Thumbprint:B8FB05664499509659A0C8F081816C473824AD1D
SHA256 / Certificate:AL6u8oAnfjiZnTxgsnc26PIeeCw9S0RKw01GWnqyh8U=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:



 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=YE2, O=Let's Encrypt, C=US
0
0
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
15750578707
leaf cert
CN=YE2, O=Let's Encrypt, C=US
2026-07-08 09:55:38
2026-10-06 09:55:37
ivantheterrible.laserpigeon.nz, laserpigeon.nz, lucym.co.nz, www.laserpigeon.nz, www.lucym.co.nz - 5 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://www.laserpigeon.nz/
35.85.90.134
a

9

0


0
0
0


img

3
39,326 Bytes
0
3
0
0
0
0


link
stylesheet
1
669 Bytes
0
1
0
0
0
0


meta
other
1

0


0
0
0

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsg∑Status
https://www.laserpigeon.nz/
35.85.90.134
a

/roundcube/


1
ok















a

contact.php


1
ok















a

https://fb.me/laser.pigeon


1
ok















a

https://instagram.com/laser.pigeon.productions


1
ok















a

https://karaoke.laserpigeon.nz


1
ok















a

lucy/Lucy_Gray_HSE_policy_June_2022.pdf


1
ok















a

lucy/LucyGray_RateCardApril2026.pdf


1
ok















a

recording-policy.html


1
ok















a

vpn/Lucym_internal_CA_root.crt


1
ok















img
src
images/facebook_logo.png
200

1
ok
no alt-Attributeimage/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 2020 Bytes






ETag: "7e4-619c6cfd00740"



img
src
images/instagram_logo.png
200

1
ok
no alt-Attributeimage/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 4745 Bytes






ETag: "1289-619c6cfd00740"



img
src
images/laser_pigeon_300px.png
200

1
ok
no alt-Attributeimage/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 32561 Bytes






ETag: "7f31-6350fe15cc980"



link
stylesheet
laserpigeon.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression (gzip): 669/1861 Bytes






ETag: "745-643ab5f0b79ad-gzip"

local SRI possible, possible hash-values:

 

sha256-eXXYsntBOoN/87LFutqSohjdGt2+7xew+4UCpUn/54o=
sha384-73VYRkcbBQz0rJ+NH9IImukRxbx/MXfaG1XTjC+T9dey9gWWSBlKt26heZBljq8u
sha512-tnACx26NTtTC/sYwhTPS5i4eUcVzJn3YBTAFcp+UF2vOgB+LYSQhsQV/BFrA/Pvv2az9OWoiC6Lcv/LYFJyICw==

 

<link rel="stylesheet" href="laserpigeon.css" crossorigin="anonymous" integrity="sha256-eXXYsntBOoN/87LFutqSohjdGt2+7xew+4UCpUn/54o=" />



meta
charset
UTF-8


1
ok














 

12. Html-Parsing via https://validator.w3.org/nu/

Url used (first standard-https-result with http status 200): https://www.laserpigeon.nz/

Summary

Good: No non-document-errors
3 errors
1 warnings

TypeMessagenum found
1.errorAn img element must have an alt attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.3
2.warningConsider adding a lang attribute to the html start tag to declare the language of this document.1

Details


TypeMessage + Sample
1errorAn img element must have an alt attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.

From line 10, column 3 to line 10, column 56

<body> <img class="logo" src="images/laser_pigeon_300px.png">
2errorAn img element must have an alt attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.

From line 23, column 41 to line 23, column 76

r.pigeon"><img src="images/facebook_logo.png"></a>
3errorAn img element must have an alt attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.

From line 24, column 61 to line 24, column 97

ductions"><img src="images/instagram_logo.png"></a>
4warningConsider adding a lang attribute to the html start tag to declare the language of this document.

From line 1, column 16 to line 2, column 6

TYPE html> <html> <hea

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns1.metaname.net, ns2.metaname.net, ns3.metaname.net

 

QNr.DomainTypeNS used
1
net
NS
m.root-servers.net (2001:dc3::35)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
ns1.metaname.net: 2001:470:1f09:126e::1, 49.50.242.204
NS
l.gtld-servers.net (2001:500:d937::30)

Answer: ns2.metaname.net
103.11.126.252, 2001:470:67:c8::1

Answer: ns3.metaname.net
103.11.126.244, 2001:470:1f17:219::1

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.laserpigeon.nz



1
0
laserpigeon.nz
0

no CAA entry found
1
0
nz
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
laserpigeon.nz
v=spf1 include:ivantheterrible.laserpigeon.nz -all
ok
1
0
www.laserpigeon.nz
v=spf1 include:ivantheterrible.laserpigeon.nz -all
ok
1
0
_acme-challenge.laserpigeon.nz

Name Error - The domain name does not exist
1
0
_acme-challenge.www.laserpigeon.nz

Name Error - The domain name does not exist
1
0
_acme-challenge.laserpigeon.nz.laserpigeon.nz

Name Error - The domain name does not exist
1
0
_acme-challenge.www.laserpigeon.nz.laserpigeon.nz

Name Error - The domain name does not exist
1
0
_acme-challenge.www.laserpigeon.nz.www.laserpigeon.nz

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

laserpigeon.nz
10
ivantheterrible.laserpigeon.nz
01ok

A


35.85.90.134
01ok

CNAME


00ok
SPF
TXT
laserpigeon.nz

v=spf1 include:ivantheterrible.laserpigeon.nz -all
ok

TXT
ivantheterrible.laserpigeon.nz

v=spf1 ip4:35.85.90.134 -all
ok
_dmarc
TXT
_dmarc.laserpigeon.nz

v=DMARC1; p=reject
ok

 

 

17. Cipher Suites

Summary
DomainIPPortnum CipherstimeStd.ProtocolForward Secrecy
laserpigeon.nz
35.85.90.134
25
7 Ciphers281.95 secSMTP
0 without, 7 FS
100.00 %
laserpigeon.nz
35.85.90.134
443
3 Ciphers89.95 sec
0 without, 3 FS
100.00 %
laserpigeon.nz
35.85.90.134
587
7 Ciphers283.76 secSMTP (encrypted, submission)
0 without, 7 FS
100.00 %
www.laserpigeon.nz
35.85.90.134
25
7 Ciphers283.03 secSMTP
0 without, 7 FS
100.00 %
www.laserpigeon.nz
35.85.90.134
443
3 Ciphers90.49 sec
0 without, 3 FS
100.00 %
www.laserpigeon.nz
35.85.90.134
587
7 Ciphers283.23 secSMTP (encrypted, submission)
0 without, 7 FS
100.00 %
Complete

6
34 Ciphers
5.67 Ciphers/Check
1312.41 sec218.73 sec/Check
0 without, 34 FS
100.00 %

Details
DomainIPPortCipher (OpenSsl / IANA)
laserpigeon.nz
35.85.90.134
25
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
7 Ciphers, 281.95 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-CCM
(Secure)
TLSv1.2
0xC0,0xAD
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CCM

ECDH
ECDSA
AESCCM(256)
AEAD




ECDHE-ECDSA-AES128-CCM
(Secure)
TLSv1.2
0xC0,0xAC
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CCM

ECDH
ECDSA
AESCCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x0A
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

ECDH
ECDSA
AES(256)
SHA1




ECDHE-ECDSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x09
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

ECDH
ECDSA
AES(128)
SHA1



443
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
3 Ciphers, 89.95 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD



587
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
7 Ciphers, 283.76 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-CCM
(Secure)
TLSv1.2
0xC0,0xAD
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CCM

ECDH
ECDSA
AESCCM(256)
AEAD




ECDHE-ECDSA-AES128-CCM
(Secure)
TLSv1.2
0xC0,0xAC
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CCM

ECDH
ECDSA
AESCCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x0A
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

ECDH
ECDSA
AES(256)
SHA1




ECDHE-ECDSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x09
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

ECDH
ECDSA
AES(128)
SHA1

www.laserpigeon.nz
35.85.90.134
25
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
7 Ciphers, 283.03 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-CCM
(Secure)
TLSv1.2
0xC0,0xAD
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CCM

ECDH
ECDSA
AESCCM(256)
AEAD




ECDHE-ECDSA-AES128-CCM
(Secure)
TLSv1.2
0xC0,0xAC
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CCM

ECDH
ECDSA
AESCCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x0A
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

ECDH
ECDSA
AES(256)
SHA1




ECDHE-ECDSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x09
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

ECDH
ECDSA
AES(128)
SHA1



443
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
3 Ciphers, 90.49 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD



587
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
7 Ciphers, 283.23 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-CCM
(Secure)
TLSv1.2
0xC0,0xAD
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CCM

ECDH
ECDSA
AESCCM(256)
AEAD




ECDHE-ECDSA-AES128-CCM
(Secure)
TLSv1.2
0xC0,0xAC
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CCM

ECDH
ECDSA
AESCCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x0A
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

ECDH
ECDSA
AES(256)
SHA1




ECDHE-ECDSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x09
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

ECDH
ECDSA
AES(128)
SHA1

 

18. Portchecks

DomainIPPortDescriptionResultAnswer
laserpigeon.nz
35.85.90.134
21
FTP



laserpigeon.nz
35.85.90.134
21
FTP



laserpigeon.nz
35.85.90.134
22
SSH



laserpigeon.nz
35.85.90.134
22
SSH



laserpigeon.nz
35.85.90.134
25
SMTP
open
220 ivantheterrible.laserpigeon.nz ESMTP Exim 4.96 Thu, 27 Aug 2026 19:41:35 +0000

 

Answer EHLO: 250-ivantheterrible.laserpigeon.nz Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP

 

Answer AUTH LOGIN: (no AUTH option found)
Mail certificate is valid
laserpigeon.nz
35.85.90.134
25
SMTP
open
220 ivantheterrible.laserpigeon.nz ESMTP Exim 4.96 Thu, 27 Aug 2026 19:41:35 +0000
Mail certificate is valid

Answer EHLO: 250-ivantheterrible.laserpigeon.nz Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP Good: STARTTLS found


Excellent: No unencrypted login possible

Mail From: openrelay-test@check-your-website.server-daten.de
RCPT TO: openrelay-result@check-your-website.server-daten.de
Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
laserpigeon.nz
35.85.90.134
53
DNS



laserpigeon.nz
35.85.90.134
53
DNS



laserpigeon.nz
35.85.90.134
110
POP3



laserpigeon.nz
35.85.90.134
110
POP3



laserpigeon.nz
35.85.90.134
143
IMAP



laserpigeon.nz
35.85.90.134
143
IMAP



laserpigeon.nz
35.85.90.134
465
SMTP (encrypted)



laserpigeon.nz
35.85.90.134
465
SMTP (encrypted)



laserpigeon.nz
35.85.90.134
587
SMTP (encrypted, submission)
open
220 ivantheterrible.laserpigeon.nz ESMTP Exim 4.96 Thu, 27 Aug 2026 19:41:35 +0000

 

Answer EHLO: 250-ivantheterrible.laserpigeon.nz Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP

 

Answer AUTH LOGIN: (no AUTH option found)
Mail certificate is valid
laserpigeon.nz
35.85.90.134
587
SMTP (encrypted, submission)
open
220 ivantheterrible.laserpigeon.nz ESMTP Exim 4.96 Thu, 27 Aug 2026 19:41:35 +0000
Mail certificate is valid

Answer EHLO: 250-ivantheterrible.laserpigeon.nz Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP Good: STARTTLS found


Excellent: No unencrypted login possible

Mail From: openrelay-test@check-your-website.server-daten.de
RCPT TO: openrelay-result@check-your-website.server-daten.de
Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
laserpigeon.nz
35.85.90.134
993
IMAP (encrypted)
open


laserpigeon.nz
35.85.90.134
993
IMAP (encrypted)
open


laserpigeon.nz
35.85.90.134
995
POP3 (encrypted)



laserpigeon.nz
35.85.90.134
995
POP3 (encrypted)



laserpigeon.nz
35.85.90.134
1433
MS SQL



laserpigeon.nz
35.85.90.134
1433
MS SQL



laserpigeon.nz
35.85.90.134
2082
cPanel (http)



laserpigeon.nz
35.85.90.134
2082
cPanel (http)



laserpigeon.nz
35.85.90.134
2083
cPanel (https)



laserpigeon.nz
35.85.90.134
2083
cPanel (https)



laserpigeon.nz
35.85.90.134
2086
WHM (http)



laserpigeon.nz
35.85.90.134
2086
WHM (http)



laserpigeon.nz
35.85.90.134
2087
WHM (https)



laserpigeon.nz
35.85.90.134
2087
WHM (https)



laserpigeon.nz
35.85.90.134
2089
cPanel Licensing



laserpigeon.nz
35.85.90.134
2089
cPanel Licensing



laserpigeon.nz
35.85.90.134
2095
cPanel Webmail (http)



laserpigeon.nz
35.85.90.134
2095
cPanel Webmail (http)



laserpigeon.nz
35.85.90.134
2096
cPanel Webmail (https)



laserpigeon.nz
35.85.90.134
2096
cPanel Webmail (https)



laserpigeon.nz
35.85.90.134
2222
DirectAdmin (http)



laserpigeon.nz
35.85.90.134
2222
DirectAdmin (http)



laserpigeon.nz
35.85.90.134
2222
DirectAdmin (https)



laserpigeon.nz
35.85.90.134
2222
DirectAdmin (https)



laserpigeon.nz
35.85.90.134
3306
mySql



laserpigeon.nz
35.85.90.134
3306
mySql



laserpigeon.nz
35.85.90.134
5224
Plesk Licensing



laserpigeon.nz
35.85.90.134
5224
Plesk Licensing



laserpigeon.nz
35.85.90.134
5432
PostgreSQL



laserpigeon.nz
35.85.90.134
5432
PostgreSQL



laserpigeon.nz
35.85.90.134
8080
Ookla Speedtest (http)



laserpigeon.nz
35.85.90.134
8080
Ookla Speedtest (http)



laserpigeon.nz
35.85.90.134
8080
Ookla Speedtest (https)



laserpigeon.nz
35.85.90.134
8080
Ookla Speedtest (https)



laserpigeon.nz
35.85.90.134
8083
VestaCP http



laserpigeon.nz
35.85.90.134
8083
VestaCP http



laserpigeon.nz
35.85.90.134
8083
VestaCP https



laserpigeon.nz
35.85.90.134
8083
VestaCP https



laserpigeon.nz
35.85.90.134
8443
Plesk Administration (https)



laserpigeon.nz
35.85.90.134
8443
Plesk Administration (https)



laserpigeon.nz
35.85.90.134
8447
Plesk Installer + Updates



laserpigeon.nz
35.85.90.134
8447
Plesk Installer + Updates



laserpigeon.nz
35.85.90.134
8880
Plesk Administration (http)



laserpigeon.nz
35.85.90.134
8880
Plesk Administration (http)



laserpigeon.nz
35.85.90.134
10000
Webmin (http)



laserpigeon.nz
35.85.90.134
10000
Webmin (http)



laserpigeon.nz
35.85.90.134
10000
Webmin (https)



laserpigeon.nz
35.85.90.134
10000
Webmin (https)



www.laserpigeon.nz
35.85.90.134
21
FTP



www.laserpigeon.nz
35.85.90.134
21
FTP



www.laserpigeon.nz
35.85.90.134
22
SSH



www.laserpigeon.nz
35.85.90.134
22
SSH



www.laserpigeon.nz
35.85.90.134
25
SMTP
open
220 ivantheterrible.laserpigeon.nz ESMTP Exim 4.96 Thu, 27 Aug 2026 19:42:07 +0000

 

Answer EHLO: 250-ivantheterrible.laserpigeon.nz Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP

 

Answer AUTH LOGIN: (no AUTH option found)
Mail certificate is valid
www.laserpigeon.nz
35.85.90.134
25
SMTP
open
220 ivantheterrible.laserpigeon.nz ESMTP Exim 4.96 Thu, 27 Aug 2026 19:42:07 +0000
Mail certificate is valid

Answer EHLO: 250-ivantheterrible.laserpigeon.nz Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP Good: STARTTLS found


Excellent: No unencrypted login possible

Mail From: openrelay-test@check-your-website.server-daten.de
RCPT TO: openrelay-result@check-your-website.server-daten.de
Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
www.laserpigeon.nz
35.85.90.134
53
DNS



www.laserpigeon.nz
35.85.90.134
53
DNS



www.laserpigeon.nz
35.85.90.134
110
POP3



www.laserpigeon.nz
35.85.90.134
110
POP3



www.laserpigeon.nz
35.85.90.134
143
IMAP



www.laserpigeon.nz
35.85.90.134
143
IMAP



www.laserpigeon.nz
35.85.90.134
465
SMTP (encrypted)



www.laserpigeon.nz
35.85.90.134
465
SMTP (encrypted)



www.laserpigeon.nz
35.85.90.134
587
SMTP (encrypted, submission)
open
220 ivantheterrible.laserpigeon.nz ESMTP Exim 4.96 Thu, 27 Aug 2026 19:42:07 +0000

 

Answer EHLO: 250-ivantheterrible.laserpigeon.nz Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP

 

Answer AUTH LOGIN: (no AUTH option found)
Mail certificate is valid
www.laserpigeon.nz
35.85.90.134
587
SMTP (encrypted, submission)
open
220 ivantheterrible.laserpigeon.nz ESMTP Exim 4.96 Thu, 27 Aug 2026 19:42:07 +0000
Mail certificate is valid

Answer EHLO: 250-ivantheterrible.laserpigeon.nz Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP Good: STARTTLS found


Excellent: No unencrypted login possible

Mail From: openrelay-test@check-your-website.server-daten.de
RCPT TO: openrelay-result@check-your-website.server-daten.de
Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
www.laserpigeon.nz
35.85.90.134
993
IMAP (encrypted)
open


www.laserpigeon.nz
35.85.90.134
993
IMAP (encrypted)
open


www.laserpigeon.nz
35.85.90.134
995
POP3 (encrypted)



www.laserpigeon.nz
35.85.90.134
995
POP3 (encrypted)



www.laserpigeon.nz
35.85.90.134
1433
MS SQL



www.laserpigeon.nz
35.85.90.134
1433
MS SQL



www.laserpigeon.nz
35.85.90.134
2082
cPanel (http)



www.laserpigeon.nz
35.85.90.134
2082
cPanel (http)



www.laserpigeon.nz
35.85.90.134
2083
cPanel (https)



www.laserpigeon.nz
35.85.90.134
2083
cPanel (https)



www.laserpigeon.nz
35.85.90.134
2086
WHM (http)



www.laserpigeon.nz
35.85.90.134
2086
WHM (http)



www.laserpigeon.nz
35.85.90.134
2087
WHM (https)



www.laserpigeon.nz
35.85.90.134
2087
WHM (https)



www.laserpigeon.nz
35.85.90.134
2089
cPanel Licensing



www.laserpigeon.nz
35.85.90.134
2089
cPanel Licensing



www.laserpigeon.nz
35.85.90.134
2095
cPanel Webmail (http)



www.laserpigeon.nz
35.85.90.134
2095
cPanel Webmail (http)



www.laserpigeon.nz
35.85.90.134
2096
cPanel Webmail (https)



www.laserpigeon.nz
35.85.90.134
2096
cPanel Webmail (https)



www.laserpigeon.nz
35.85.90.134
2222
DirectAdmin (http)



www.laserpigeon.nz
35.85.90.134
2222
DirectAdmin (http)



www.laserpigeon.nz
35.85.90.134
2222
DirectAdmin (https)



www.laserpigeon.nz
35.85.90.134
2222
DirectAdmin (https)



www.laserpigeon.nz
35.85.90.134
3306
mySql



www.laserpigeon.nz
35.85.90.134
3306
mySql



www.laserpigeon.nz
35.85.90.134
5224
Plesk Licensing



www.laserpigeon.nz
35.85.90.134
5224
Plesk Licensing



www.laserpigeon.nz
35.85.90.134
5432
PostgreSQL



www.laserpigeon.nz
35.85.90.134
5432
PostgreSQL



www.laserpigeon.nz
35.85.90.134
8080
Ookla Speedtest (http)



www.laserpigeon.nz
35.85.90.134
8080
Ookla Speedtest (http)



www.laserpigeon.nz
35.85.90.134
8080
Ookla Speedtest (https)



www.laserpigeon.nz
35.85.90.134
8080
Ookla Speedtest (https)



www.laserpigeon.nz
35.85.90.134
8083
VestaCP http



www.laserpigeon.nz
35.85.90.134
8083
VestaCP http



www.laserpigeon.nz
35.85.90.134
8083
VestaCP https



www.laserpigeon.nz
35.85.90.134
8083
VestaCP https



www.laserpigeon.nz
35.85.90.134
8443
Plesk Administration (https)



www.laserpigeon.nz
35.85.90.134
8443
Plesk Administration (https)



www.laserpigeon.nz
35.85.90.134
8447
Plesk Installer + Updates



www.laserpigeon.nz
35.85.90.134
8447
Plesk Installer + Updates



www.laserpigeon.nz
35.85.90.134
8880
Plesk Administration (http)



www.laserpigeon.nz
35.85.90.134
8880
Plesk Administration (http)



www.laserpigeon.nz
35.85.90.134
10000
Webmin (http)



www.laserpigeon.nz
35.85.90.134
10000
Webmin (http)



www.laserpigeon.nz
35.85.90.134
10000
Webmin (https)



www.laserpigeon.nz
35.85.90.134
10000
Webmin (https)



 

 

Permalink: https://check-your-website.server-daten.de/?i=d984d428-7d66-478e-95d7-75880ee3f909

 

Last Result: https://check-your-website.server-daten.de/?q=laserpigeon.nz - 2026-08-27 21:38:20

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=laserpigeon.nz" target="_blank">Check this Site: laserpigeon.nz</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=laserpigeon.nz