Check DNS, Urls + Redirects, Certificates and Content of your Website


 

 

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
letsencrypt.org
A
3.124.100.143
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
Hostname: ec2-3-124-100-143.eu-central-1.compute.amazonaws.com
yes
1
0

A
3.125.36.175
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
Hostname: ec2-3-125-36-175.eu-central-1.compute.amazonaws.com
yes
1
0

AAAA
2a05:d014:58f:6200::65
Frankfurt am Main/Hesse/Germany (DE) - Amazon.com, Inc.

yes



AAAA
2a05:d014:58f:6202::65
Frankfurt am Main/Hesse/Germany (DE) - Amazon.com, Inc.

yes


www.letsencrypt.org
CNAME
letsencrypt.netlify.com
yes
1
0

A
3.75.10.80
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
Hostname: ec2-3-75-10-80.eu-central-1.compute.amazonaws.com
yes



A
3.124.100.143
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
Hostname: ec2-3-124-100-143.eu-central-1.compute.amazonaws.com
yes



AAAA
2a05:d014:58f:6201::65
Frankfurt am Main/Hesse/Germany (DE) - Amazon.com, Inc.

yes



AAAA
2a05:d014:58f:6202::65
Frankfurt am Main/Hesse/Germany (DE) - Amazon.com, Inc.

yes


www.letsencrypt.org
A
3.125.36.175
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
No Hostname found
no


*.letsencrypt.org
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






4 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 46441, Flags 256






Public Key with Algorithm 8, KeyTag 53148, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.07.2025, 00:00:00 +, Signature-Inception: 01.07.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: org

org
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=






1 RRSIG RR to validate DS RR found






RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 15.07.2025, 05:00:00 +, Signature-Inception: 02.07.2025, 04:00:00 +, KeyTag 46441, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 46441 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 321, Flags 256






Public Key with Algorithm 8, KeyTag 8958, Flags 256






Public Key with Algorithm 8, KeyTag 26974, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 22.07.2025, 15:26:53 +, Signature-Inception: 01.07.2025, 14:26:53 +, KeyTag 26974, Signer-Name: org






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26974 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest "T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: letsencrypt.org

letsencrypt.org
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "p6tft5m0irqlsejks5jp7dvv7n6p6fji" between the hashed NSEC3-owner "p6tf1pkmp2952dasn90et9gnvrg5fvhi" and the hashed NextOwner "p6thccaej4k2p672k4cp0lg7fa25nn1n". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner p6tf1pkmp2952dasn90et9gnvrg5fvhi.org., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 22.07.2025, 15:26:53 +, Signature-Inception: 01.07.2025, 14:26:53 +, KeyTag 8958, Signer-Name: org






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "gdtpongmpok61u9lvnipqor8lra9l4t0" as Owner. That's the Hash of "org" with the NextHashedOwnerName "gdtv35rcvc3a33dq9alq59qe9qjib3ku". So that domain name is the Closest Encloser of "letsencrypt.org". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner gdtpongmpok61u9lvnipqor8lra9l4t0.org., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 23.07.2025, 08:50:37 +, Signature-Inception: 02.07.2025, 07:50:37 +, KeyTag 8958, Signer-Name: org






0 DNSKEY RR found









Zone: www.letsencrypt.org

www.letsencrypt.org
0 DS RR in the parent zone found



Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






4 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 46441, Flags 256






Public Key with Algorithm 8, KeyTag 53148, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.07.2025, 00:00:00 +, Signature-Inception: 01.07.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: com

com
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=






1 RRSIG RR to validate DS RR found






RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 15.07.2025, 05:00:00 +, Signature-Inception: 02.07.2025, 04:00:00 +, KeyTag 46441, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 46441 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 40097, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 16.07.2025, 14:02:35 +, Signature-Inception: 01.07.2025, 13:57:35 +, KeyTag 19718, Signer-Name: com






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest "isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: netlify.com

netlify.com
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "la5aphutgpjaph4c4q4ju0hq8scb5a3l" between the hashed NSEC3-owner "la5aj6k9ahgp403r95il9g2ob2gem09m" and the hashed NextOwner "la5aq77lhm8o7e6262pcvlej5t8t4547". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner la5aj6k9ahgp403r95il9g2ob2gem09m.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 08.07.2025, 02:01:36 +, Signature-Inception: 01.07.2025, 00:51:36 +, KeyTag 40097, Signer-Name: com






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q3udg8cekkae7rukpgct1dvssh8ll". So that domain name is the Closest Encloser of "netlify.com". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 06.07.2025, 03:46:06 +, Signature-Inception: 29.06.2025, 02:36:06 +, KeyTag 40097, Signer-Name: com






0 DNSKEY RR found









Zone: letsencrypt.netlify.com

letsencrypt.netlify.com
0 DS RR in the parent zone found






0 DNSKEY RR found







 

3. Name Servers

DomainNameserverNS-IP
letsencrypt.org
  owen.ns.cloudflare.com / 67m94
108.162.193.219
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
172.64.33.219
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
173.245.59.219
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
2606:4700:58::adf5:3bdb
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.


 
2803:f800:50::6ca2:c1db
San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.


 
2a06:98c1:50::ac40:21db
London/England/United Kingdom (GB) - Cloudflare, Inc.


  vera.ns.cloudflare.com / 67m33
108.162.192.147
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
172.64.32.147
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
173.245.58.147
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
2606:4700:50::adf5:3a93
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.


 
2803:f800:50::6ca2:c093
San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.


 
2a06:98c1:50::ac40:2093
London/England/United Kingdom (GB) - Cloudflare, Inc.

org
  a0.org.afilias-nst.info / app2.ams2.hosts.meta.redstone.afilias-nst.info-1615580861


  a2.org.afilias-nst.info / FRA4


  b0.org.afilias-nst.org / app13.ams2.hosts.meta.redstone.afilias-nst.info-1615580861


  b2.org.afilias-nst.org / FRA4


  c0.org.afilias-nst.info / app8.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861


  d0.org.afilias-nst.org / app2.ams2.hosts.meta.redstone.afilias-nst.info-1615580861


letsencrypt.netlify.com
  dns1.p04.nsone.net / ns1dns-mrs01-1269-5322-0
198.51.44.4
Toronto/Ohio/United States (US) - NSONE Inc


 
2620:4d:4000:6259:7:4:0:1
New York/United States (US) - NSONE Inc

netlify.com
  dns1.p04.nsone.net / ns1dns-mrs01-11129-5312-0
198.51.44.4
Toronto/Ohio/United States (US) - NSONE Inc


 
2620:4d:4000:6259:7:4:0:1
New York/United States (US) - NSONE Inc


  dns2.p04.nsone.net / ns1dns-fra03-025ca40e-9de2-4741-a25c-7bb54c759280-5345-0
198.51.45.4
Kimball/Nebraska/United States (US) - NSONE Inc


 
2a00:edc0:6259:7:4::2
Amsterdam/North Holland/The Netherlands (NL) - NS1


  dns3.p04.nsone.net / ns1dns-mrs01-1269-5308-0
198.51.44.68
Toronto/Ohio/United States (US) - NSONE Inc


 
2620:4d:4000:6259:7:4:0:3
New York/United States (US) - NSONE Inc


  dns4.p04.nsone.net / ns1dns-fra03-0d5d442d-7467-47e1-b1fc-9a9c9836d0c2-5325-0
198.51.45.68
Kimball/Nebraska/United States (US) - NSONE Inc


 
2a00:edc0:6259:7:4::4
Amsterdam/North Holland/The Netherlands (NL) - NS1


  ns01.netlifydns.com / ns1dns-ams99-0231310d-8af4-187e-e2b6-2894c7ab82a8-5300-42
45.54.30.1
Ashburn/Virginia/United States (US) - NetActuate, Inc


 
2607:f740:e630::1
Ashburn/Virginia/United States (US) - NetActuate, Inc


  ns02.netlifydns.com / ns1dns-ams99-0231310d-8af4-187e-e2b6-2894c7ab82a8-5301-42
45.54.30.65
Ashburn/Virginia/United States (US) - NetActuate, Inc


T 
2607:f740:e630:4::1
Ashburn/Virginia/United States (US) - NetActuate, Inc


  ns03.netlifydns.com / ns1dns-ams99-0231310d-8af4-187e-e2b6-2894c7ab82a8-5302-42
45.54.30.129
Ashburn/Virginia/United States (US) - NetActuate, Inc


 
2607:f740:e630:8::1
Ashburn/Virginia/United States (US) - NetActuate, Inc


  ns04.netlifydns.com / ns1dns-ams99-0231310d-8af4-187e-e2b6-2894c7ab82a8-5301-42
45.54.30.193
Ashburn/Virginia/United States (US) - NetActuate, Inc


 
2607:f740:e630:c::1
Ashburn/Virginia/United States (US) - NetActuate, Inc

com
  a.gtld-servers.net / nnn1-par6


  b.gtld-servers.net / nnn1-eltxl1


  c.gtld-servers.net / nnn1-par6


  d.gtld-servers.net / nnn1-par6


  e.gtld-servers.net / nnn1-par6


  f.gtld-servers.net / nnn1-defra-4


  g.gtld-servers.net / nnn1-defra-4


  h.gtld-servers.net / nnn1-defra-4


  i.gtld-servers.net / nnn1-defra-4


  j.gtld-servers.net / nnn1-frmrs-2


  k.gtld-servers.net / nnn1-frmrs-2


  l.gtld-servers.net / nnn1-frmrs-2


  m.gtld-servers.net / nnn1-frmrs-2

 

4. SOA-Entries


Domain:org
Zone-Name:org
Primary:a0.org.afilias-nst.info
Mail:hostmaster.donuts.email
Serial:1751445876
Refresh:7200
Retry:900
Expire:1209600
TTL:3600
num Entries:6


Domain:letsencrypt.org
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:letsencrypt.org
Zone-Name:letsencrypt.org
Primary:owen.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2376520052
Refresh:10000
Retry:2400
Expire:604800
TTL:1800
num Entries:11



Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1751446353
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:1


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1751446353
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:1


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1751446368
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:11


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1751446368
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:11


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1751446383
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:1


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1751446383
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:1


Domain:netlify.com
Zone-Name:netlify.com
Primary:dns1.p04.nsone.net
Mail:hostmaster.nsone.net
Serial:1664458603
Refresh:43200
Retry:7200
Expire:1209600
TTL:300
num Entries:16


Domain:letsencrypt.netlify.com
Zone-Name:netlify.com
Primary:dns1.p04.nsone.net
Mail:hostmaster.nsone.net
Serial:1664458603
Refresh:43200
Retry:7200
Expire:1209600
TTL:300
num Entries:2


5. Screenshots

Startaddress: https://letsencrypt.org/, address used: https://letsencrypt.org/, Screenshot created 2025-07-02 10:57:36 +00:0

 

Mobil (412px x 732px)

 

1170 milliseconds

 

Screenshot mobile - https://letsencrypt.org/
Mobil + Landscape (732px x 412px)

 

1160 milliseconds

 

Screenshot mobile landscape - https://letsencrypt.org/
Screen (1280px x 1680px)

 

1382 milliseconds

 

Screenshot Desktop - https://letsencrypt.org/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport396732
content Size3968647

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://letsencrypt.org/
3.124.100.143
301
https://letsencrypt.org/
Html is minified: 100.00 %
0.030
A
Date: Wed, 02 Jul 2025 08:55:15 GMT
Location: https://letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JZ55HVFFGN6PAPM5ZJ9TVXFW
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• http://letsencrypt.org/
3.125.36.175
301
https://letsencrypt.org/
Html is minified: 100.00 %
0.030
A
Date: Wed, 02 Jul 2025 08:55:15 GMT
Location: https://letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JZ55HVGSX8YZ0CV0D2B72P3Q
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• http://letsencrypt.org/
2a05:d014:58f:6200::65
301
https://letsencrypt.org/
Html is minified: 100.00 %
0.030
A
Date: Wed, 02 Jul 2025 08:55:15 GMT
Location: https://letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JZ55HVHX02KT0ZJ1GB7Y88MW
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• http://letsencrypt.org/
2a05:d014:58f:6202::65
301
https://letsencrypt.org/
Html is minified: 100.00 %
0.030
A
Date: Wed, 02 Jul 2025 08:55:15 GMT
Location: https://letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JZ55HVK5BV64ZEAEV1DZ8J10
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• http://www.letsencrypt.org/
3.75.10.80
301
https://www.letsencrypt.org/
Html is minified: 100.00 %
0.037
A
Date: Wed, 02 Jul 2025 08:55:15 GMT
Location: https://www.letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JZ55HVNPZ32QJAM2R2A41TGV
Content-Type: text/plain; charset=utf-8
Content-Length: 43

• http://www.letsencrypt.org/
3.124.100.143
301
https://www.letsencrypt.org/
Html is minified: 100.00 %
0.020
A
Date: Wed, 02 Jul 2025 08:55:15 GMT
Location: https://www.letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JZ55HVMCGZ8961J6D7K9SQYY
Content-Type: text/plain; charset=utf-8
Content-Length: 43

• http://www.letsencrypt.org/
3.125.36.175
301
https://www.letsencrypt.org/
Html is minified: 100.00 %
0.020
A
Date: Wed, 02 Jul 2025 08:55:15 GMT
Location: https://www.letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JZ55HVSBT38EHXWP4DWY16HD
Content-Type: text/plain; charset=utf-8
Content-Length: 43

• http://www.letsencrypt.org/
2a05:d014:58f:6201::65
301
https://www.letsencrypt.org/
Html is minified: 100.00 %
0.033
A
Date: Wed, 02 Jul 2025 08:55:15 GMT
Location: https://www.letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JZ55HVQ746A53674W5NTMK06
Content-Type: text/plain; charset=utf-8
Content-Length: 43

• http://www.letsencrypt.org/
2a05:d014:58f:6202::65
301
https://www.letsencrypt.org/
Html is minified: 100.00 %
0.017
A
Date: Wed, 02 Jul 2025 08:55:15 GMT
Location: https://www.letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JZ55HVR2REY44RTP3WG3HDHT
Content-Type: text/plain; charset=utf-8
Content-Length: 43

• https://www.letsencrypt.org/
3.75.10.80
301
https://letsencrypt.org/
Html is minified: 100.00 %
2.080
A
Date: Wed, 02 Jul 2025 08:55:40 GMT
Location: https://letsencrypt.org/
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01JZ55JKZG6XF7QH30C9XNTNNG
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• https://www.letsencrypt.org/
3.124.100.143
301
https://letsencrypt.org/
Html is minified: 100.00 %
2.086
A
Date: Wed, 02 Jul 2025 08:55:36 GMT
Location: https://letsencrypt.org/
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01JZ55JG2PDPX1JNJQP6KJG2BY
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• https://www.letsencrypt.org/
3.125.36.175
301
https://letsencrypt.org/
Html is minified: 100.00 %
2.040
A
Date: Wed, 02 Jul 2025 08:55:50 GMT
Location: https://letsencrypt.org/
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01JZ55JYD9K65XT59DZDX8FNE3
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• https://www.letsencrypt.org/
2a05:d014:58f:6201::65
301
https://letsencrypt.org/
Html is minified: 100.00 %
1.737
A
Date: Wed, 02 Jul 2025 08:55:43 GMT
Location: https://letsencrypt.org/
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01JZ55JQGSS3AN5MD1RGJX5P59
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• https://www.letsencrypt.org/
2a05:d014:58f:6202::65
301
https://letsencrypt.org/
Html is minified: 100.00 %
1.776
A
Date: Wed, 02 Jul 2025 08:55:47 GMT
Location: https://letsencrypt.org/
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01JZ55JTPKJZQQ93R24WH6F12X
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• https://letsencrypt.org/
3.124.100.143 br used - 9571 / 85224 - 88.77 %
Inline-JavaScript (∑/total): 2/1071 Inline-CSS (∑/total): 0/0
200

Html is minified: 148.04 %
Other inline scripts (∑/total): 0/0
2.177
I
Accept-Ranges: bytes
Age: 55537
Cache-Control: public, must-revalidate, max-age=0
Cache-Status: "Netlify Edge"; hit
Content-Security-Policy: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
Date: Wed, 02 Jul 2025 08:55:15 GMT
ETag: "db468f242136720fefa0be3d779ae24b-ssl-df"
Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
Referrer-Policy: no-referrer
Server: Netlify
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Nf-Request-Id: 01JZ55HVWT8BRN7HV91P7TVXW3
X-XSS-Protection: 1; mode=block
Content-Encoding: br
Content-Length: 9571
Content-Type: text/html; charset=UTF-8

• https://letsencrypt.org/
3.125.36.175 br used - 9514 / 85224 - 88.84 %
Inline-JavaScript (∑/total): 2/1071 Inline-CSS (∑/total): 0/0
200

Html is minified: 148.04 %
Other inline scripts (∑/total): 0/0
2.273
I
Accept-Ranges: bytes
Age: 55739
Cache-Control: public, must-revalidate, max-age=0
Cache-Status: "Netlify Edge"; hit
Content-Security-Policy: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
Date: Wed, 02 Jul 2025 08:55:20 GMT
ETag: "db468f242136720fefa0be3d779ae24b-ssl-df"
Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
Referrer-Policy: no-referrer
Server: Netlify
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Nf-Request-Id: 01JZ55J0K1NEW9N5FSB1NX7Q5Z
X-XSS-Protection: 1; mode=block
Content-Encoding: br
Content-Length: 9514
Content-Type: text/html; charset=UTF-8

• https://letsencrypt.org/
2a05:d014:58f:6200::65 br used - 9387 / 85224 - 88.99 %
Inline-JavaScript (∑/total): 2/1071 Inline-CSS (∑/total): 0/0
200

Html is minified: 148.04 %
Other inline scripts (∑/total): 0/0
1.853
I
Accept-Ranges: bytes
Age: 45901
Cache-Control: public, must-revalidate, max-age=0
Cache-Status: "Netlify Edge"; hit
Content-Security-Policy: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
Date: Wed, 02 Jul 2025 08:55:26 GMT
ETag: "db468f242136720fefa0be3d779ae24b-ssl-df"
Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
Referrer-Policy: no-referrer
Server: Netlify
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Nf-Request-Id: 01JZ55J6QBTAAETBDHGE2MTTTA
X-XSS-Protection: 1; mode=block
Content-Encoding: br
Content-Length: 9387
Content-Type: text/html; charset=UTF-8

• https://letsencrypt.org/
2a05:d014:58f:6202::65 br used - 9503 / 85224 - 88.85 %
Inline-JavaScript (∑/total): 2/1071 Inline-CSS (∑/total): 0/0
200

Html is minified: 148.04 %
Other inline scripts (∑/total): 0/0
1.800
I
Accept-Ranges: bytes
Age: 55745
Cache-Control: public, must-revalidate, max-age=0
Cache-Status: "Netlify Edge"; hit
Content-Security-Policy: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
Date: Wed, 02 Jul 2025 08:55:31 GMT
ETag: "db468f242136720fefa0be3d779ae24b-ssl-df"
Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
Referrer-Policy: no-referrer
Server: Netlify
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Nf-Request-Id: 01JZ55JB1WGQ1M2N85T2XFP91T
X-XSS-Protection: 1; mode=block
Content-Encoding: br
Content-Length: 9503
Content-Type: text/html; charset=UTF-8

• http://letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.124.100.143
404


0.150
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Wed, 02 Jul 2025 08:55:54 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55K1XP98ZQHTWP6CGXTGWT
Content-Length: 0

• http://letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.125.36.175
404


0.140
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Wed, 02 Jul 2025 08:55:55 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55K2XNRH3B8WR3RP5TT42H
Content-Length: 0

• http://letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a05:d014:58f:6200::65
404


0.140
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Wed, 02 Jul 2025 08:55:56 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55K3V96NKYWD9JSN6Z5HGW
Content-Length: 0

• http://letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a05:d014:58f:6202::65
404


0.140
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Wed, 02 Jul 2025 08:55:57 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55K4V6DC0B5Q73FA1ZK2HC
Content-Length: 0

• http://www.letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.75.10.80
404


0.150
A
Not Found
Visible Content:
Age: 1
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Wed, 02 Jul 2025 08:56:01 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55K85R0QHXHMZDSS8707AV
Content-Length: 0

• http://www.letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.124.100.143
404


0.200
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Wed, 02 Jul 2025 08:55:59 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55K6BQY15Z1VX3W4B841H2
Content-Length: 0

• http://www.letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.125.36.175
404


0.124
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Wed, 02 Jul 2025 08:56:04 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55KBK7GK0M4KX97C9PYJTG
Content-Length: 0

• http://www.letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a05:d014:58f:6201::65
404


0.140
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Wed, 02 Jul 2025 08:56:02 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55K9KWE3HV1780WTX575P1
Content-Length: 0

• http://www.letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a05:d014:58f:6202::65
404


0.170
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Wed, 02 Jul 2025 08:56:03 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55KAMNNPZCF41NW7VVHAWZ
Content-Length: 0

• https://3.75.10.80/
3.75.10.80
404


2.186
N
Not Found
Certificate error: RemoteCertificateNameMismatch
Date: Wed, 02 Jul 2025 08:56:25 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55M05C2ETWFPZ20NS0DTM4
Content-Length: 0

• https://3.125.36.175/
3.125.36.175
404


2.053
N
Not Found
Certificate error: RemoteCertificateNameMismatch
Date: Wed, 02 Jul 2025 08:56:11 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55KJSS8RJY7633DG75YQMZ
Content-Length: 0

• https://3.124.100.143/
3.124.100.143
404


2.646
N
Not Found
Certificate error: RemoteCertificateNameMismatch
Date: Wed, 02 Jul 2025 08:56:05 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55KCT822R62Z9M4C733VKK
Content-Length: 0

• https://[2a05:d014:058f:6200:0000:0000:0000:0065]/
2a05:d014:58f:6200::65
404


1.800
N
Not Found
Certificate error: RemoteCertificateNameMismatch
Date: Wed, 02 Jul 2025 08:56:16 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55KQ5VKZ8Y7VKMH1M9P070
Content-Length: 0

• https://[2a05:d014:058f:6201:0000:0000:0000:0065]/
2a05:d014:58f:6201::65
404


1.743
N
Not Found
Certificate error: RemoteCertificateNameMismatch
Date: Wed, 02 Jul 2025 08:56:30 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55M5AWNDR2YED17RPMTNTH
Content-Length: 0

• https://[2a05:d014:058f:6202:0000:0000:0000:0065]/
2a05:d014:58f:6202::65
404


1.720
N
Not Found
Certificate error: RemoteCertificateNameMismatch
Date: Wed, 02 Jul 2025 08:56:21 GMT
Server: Netlify
X-Nf-Request-Id: 01JZ55KW45NVEMFGQYC3NAA4TB
Content-Length: 0

 

7. Comments


1. General Results, most used to calculate the result

Aname "letsencrypt.org" is domain, public suffix is ".org", top-level-domain is ".org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)", num .org-domains preloaded: 10167 (complete: 271405)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: letsencrypt.org has 4 different ip addresses (authoritative).
AGood: Minimal 2 ip addresses per domain name found: www.letsencrypt.org has 4 different ip addresses (authoritative).
AGood: Ipv4 and Ipv6 addresses per domain name found: letsencrypt.org has 2 ipv4, 2 ipv6 addresses
AGood: Ipv4 and Ipv6 addresses per domain name found: www.letsencrypt.org has 2 ipv4, 2 ipv6 addresses
AGood: No asked Authoritative Name Server had a timeout
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: non-www is preferred
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
Ahttp://letsencrypt.org/ 3.124.100.143
301
https://letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://letsencrypt.org/ 3.125.36.175
301
https://letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://letsencrypt.org/ 2a05:d014:58f:6200::65
301
https://letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://letsencrypt.org/ 2a05:d014:58f:6202::65
301
https://letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://www.letsencrypt.org/ 3.75.10.80
301
https://www.letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://www.letsencrypt.org/ 3.124.100.143
301
https://www.letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://www.letsencrypt.org/ 3.125.36.175
301
https://www.letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://www.letsencrypt.org/ 2a05:d014:58f:6201::65
301
https://www.letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://www.letsencrypt.org/ 2a05:d014:58f:6202::65
301
https://www.letsencrypt.org/
Correct redirect http - https with the same domain name
Ihttps://letsencrypt.org/ 3.124.100.143
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://letsencrypt.org/ 3.125.36.175
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://letsencrypt.org/ 2a05:d014:58f:6200::65
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://letsencrypt.org/ 2a05:d014:58f:6202::65
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Mhttps://3.124.100.143/ 3.124.100.143
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://3.125.36.175/ 3.125.36.175
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://[2a05:d014:058f:6200:0000:0000:0000:0065]/ 2a05:d014:58f:6200::65
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://[2a05:d014:058f:6202:0000:0000:0000:0065]/ 2a05:d014:58f:6202::65
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://3.75.10.80/ 3.75.10.80
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://[2a05:d014:058f:6201:0000:0000:0000:0065]/ 2a05:d014:58f:6201::65
404

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://3.124.100.143/ 3.124.100.143
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://3.125.36.175/ 3.125.36.175
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://[2a05:d014:058f:6200:0000:0000:0000:0065]/ 2a05:d014:58f:6200::65
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://[2a05:d014:058f:6202:0000:0000:0000:0065]/ 2a05:d014:58f:6202::65
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://3.75.10.80/ 3.75.10.80
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://[2a05:d014:058f:6201:0000:0000:0000:0065]/ 2a05:d014:58f:6201::65
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain letsencrypt.org, 4 ip addresses.
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain www.letsencrypt.org, 4 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain letsencrypt.org, 4 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain www.letsencrypt.org, 4 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.letsencrypt.org

2. Header-Checks

Aletsencrypt.org 3.124.100.143
Content-Security-Policy
Ok: Header without syntax errors found: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
A

Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A

Good: default-src without 'unsafe-inline' or 'unsave-eval'.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A

Good: No object-src found, but the default-src used as fallback is defined and restricted.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
F

Critical: script-src with * or a scheme found. Never allow wildcard - sources.
F

Dangerous: script-src with data: schema found. The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A

Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: no-referrer
A
Permissions-Policy
Ok: Header without syntax errors found: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
A
X-Frame-Options
Ok: Header without syntax errors found: DENY
B

Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Aletsencrypt.org 3.125.36.175
Content-Security-Policy
Ok: Header without syntax errors found: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
A

Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A

Good: default-src without 'unsafe-inline' or 'unsave-eval'.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A

Good: No object-src found, but the default-src used as fallback is defined and restricted.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
F

Critical: script-src with * or a scheme found. Never allow wildcard - sources.
F

Dangerous: script-src with data: schema found. The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A

Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: no-referrer
A
Permissions-Policy
Ok: Header without syntax errors found: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
A
X-Frame-Options
Ok: Header without syntax errors found: DENY
B

Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Aletsencrypt.org 2a05:d014:58f:6200::65
Content-Security-Policy
Ok: Header without syntax errors found: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
A

Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A

Good: default-src without 'unsafe-inline' or 'unsave-eval'.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A

Good: No object-src found, but the default-src used as fallback is defined and restricted.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
F

Critical: script-src with * or a scheme found. Never allow wildcard - sources.
F

Dangerous: script-src with data: schema found. The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A

Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: no-referrer
A
Permissions-Policy
Ok: Header without syntax errors found: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
A
X-Frame-Options
Ok: Header without syntax errors found: DENY
B

Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Aletsencrypt.org 2a05:d014:58f:6202::65
Content-Security-Policy
Ok: Header without syntax errors found: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
A

Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A

Good: default-src without 'unsafe-inline' or 'unsave-eval'.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A

Good: No object-src found, but the default-src used as fallback is defined and restricted.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
F

Critical: script-src with * or a scheme found. Never allow wildcard - sources.
F

Dangerous: script-src with data: schema found. The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A

Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: no-referrer
A
Permissions-Policy
Ok: Header without syntax errors found: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
A
X-Frame-Options
Ok: Header without syntax errors found: DENY
B

Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Bletsencrypt.org 3.124.100.143
Cross-Origin-Embedder-Policy
Info: Missing Header
Bletsencrypt.org 3.124.100.143
Cross-Origin-Opener-Policy
Info: Missing Header
Bletsencrypt.org 3.124.100.143
Cross-Origin-Resource-Policy
Info: Missing Header
Bletsencrypt.org 3.125.36.175
Cross-Origin-Embedder-Policy
Info: Missing Header
Bletsencrypt.org 3.125.36.175
Cross-Origin-Opener-Policy
Info: Missing Header
Bletsencrypt.org 3.125.36.175
Cross-Origin-Resource-Policy
Info: Missing Header
Bletsencrypt.org 2a05:d014:58f:6200::65
Cross-Origin-Embedder-Policy
Info: Missing Header
Bletsencrypt.org 2a05:d014:58f:6200::65
Cross-Origin-Opener-Policy
Info: Missing Header
Bletsencrypt.org 2a05:d014:58f:6200::65
Cross-Origin-Resource-Policy
Info: Missing Header
Bletsencrypt.org 2a05:d014:58f:6202::65
Cross-Origin-Embedder-Policy
Info: Missing Header
Bletsencrypt.org 2a05:d014:58f:6202::65
Cross-Origin-Opener-Policy
Info: Missing Header
Bletsencrypt.org 2a05:d014:58f:6202::65
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks

AInfo:: 7 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 7 Queries complete, 7 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Ok (4 - 8):: An average of 3.5 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 2 different Name Servers found: owen.ns.cloudflare.com, vera.ns.cloudflare.com, 2 Name Servers included in Delegation: owen.ns.cloudflare.com, vera.ns.cloudflare.com, 2 Name Servers included in 1 Zone definitions: owen.ns.cloudflare.com, vera.ns.cloudflare.com, 1 Name Servers listed in SOA.Primary: owen.ns.cloudflare.com.
AGood: Only one SOA.Primary Name Server found.: owen.ns.cloudflare.com.
AGood: SOA.Primary Name Server included in the delegation set.: owen.ns.cloudflare.com.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: owen.ns.cloudflare.com, vera.ns.cloudflare.com
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: com
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: cloudflare.com
AGood: Name servers with different Country locations found: 2 Name Servers, 3 Countries: CA, CR, GB
AInfo: Ipv4-Subnet-list: 6 Name Servers, 3 different subnets (first Byte): 108., 172., 173., 3 different subnets (first two Bytes): 108.162., 172.64., 173.245., 6 different subnets (first three Bytes): 108.162.192., 108.162.193., 172.64.32., 172.64.33., 173.245.58., 173.245.59.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 6 Name Servers with IPv6, 3 different subnets (first block): 2606:, 2803:, 2a06:, 3 different subnets (first two blocks): 2606:4700:, 2803:f800:, 2a06:98c1:, 4 different subnets (first three blocks): 2606:4700:0050:, 2606:4700:0058:, 2803:f800:0050:, 2a06:98c1:0050:, 4 different subnets (first four blocks): 2606:4700:0050:0000:, 2606:4700:0058:0000:, 2803:f800:0050:0000:, 2a06:98c1:0050:0000:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 12 good Nameserver
AGood: Nameserver supports Echo Capitalization: 12 good Nameserver
XNameserver Timeout checking Echo Capitalization: ns02.netlifydns.com / 2607:f740:e630:4::1
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 12 good Nameserver
Nameserver doesn't pass all EDNS-Checks: b2.org.afilias-nst.org: OP100: ok. FLAGS: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found (FRA4). COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: owen.ns.cloudflare.com / 2606:4700:58::adf5:3bdb: OP100: ok. FLAGS: fatal timeout. V1: ok. V1OP100: ok. V1FLAGS: fatal timeout. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (67m85). COOKIE: ok. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: owen.ns.cloudflare.com / 2a06:98c1:50::ac40:21db: OP100: fatal timeout. FLAGS: ok. V1: ok. V1OP100: fatal timeout. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (67m109). COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: vera.ns.cloudflare.com / 2606:4700:50::adf5:3a93: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: fatal timeout. V1DNSSEC: ok. NSID: ok (67m84). COOKIE: ok. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: vera.ns.cloudflare.com / 2803:f800:50::6ca2:c093: OP100: ok. FLAGS: fatal timeout. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (67m115). COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: vera.ns.cloudflare.com / 2a06:98c1:50::ac40:2093: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: fatal timeout. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (67m117). COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
AGood: CAA entries found, creating certificate is limited: amazon.com is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: digicert.com is allowed to create certificates

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
https://letsencrypt.org/ 3.124.100.143
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://letsencrypt.org/ 3.125.36.175
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://letsencrypt.org/ 2a05:d014:58f:6200::65
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://letsencrypt.org/ 2a05:d014:58f:6202::65
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://letsencrypt.org/ 3.124.100.143
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://letsencrypt.org/ 3.125.36.175
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://letsencrypt.org/ 2a05:d014:58f:6200::65
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://letsencrypt.org/ 2a05:d014:58f:6202::65
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
https://letsencrypt.org/ 3.124.100.143
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 6 script elements without defer/async.
https://letsencrypt.org/ 3.125.36.175
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 6 script elements without defer/async.
https://letsencrypt.org/ 2a05:d014:58f:6200::65
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 6 script elements without defer/async.
https://letsencrypt.org/ 2a05:d014:58f:6202::65
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 6 script elements without defer/async.
AGood: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 24 external CSS / JavaScript files found
AGood: All svg-Images greater 1024 Bytes without internal compression are compressed. Svg is an Xml-Application, so Compression reduces the size of the file. 64 images (type image/svg+xml, image/x-icon, image/vnd.microsoft.icon) found with compression.
AGood: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 280 images (type image/png, image/jpg, image/jpeg, image/webp, image/gif) found without additional Compression. Not required because these images are already compressed
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 32 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 32 complete.
Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 344 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 344 complete.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AGood: Some img-elements have a valid alt-attribute.: 344 img-elements found, 324 img-elements with correct alt-attributes (defined, not an empty value).
Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 16 img-elements without alt-attribute, 4 img-elements with empty alt-attribute found.
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://3.124.100.143/ 3.124.100.143
404
2.646 seconds
Warning: 404 needs more then one second
https://3.125.36.175/ 3.125.36.175
404
2.053 seconds
Warning: 404 needs more then one second
https://[2a05:d014:058f:6200:0000:0000:0000:0065]/ 2a05:d014:58f:6200::65
404
1.800 seconds
Warning: 404 needs more then one second
https://[2a05:d014:058f:6202:0000:0000:0000:0065]/ 2a05:d014:58f:6202::65
404
1.720 seconds
Warning: 404 needs more then one second
https://3.75.10.80/ 3.75.10.80
404
2.186 seconds
Warning: 404 needs more then one second
https://[2a05:d014:058f:6201:0000:0000:0000:0065]/ 2a05:d014:58f:6201::65
404
1.743 seconds
Warning: 404 needs more then one second
ADuration: 315383 milliseconds, 315.383 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
letsencrypt.org
3.124.100.143
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
letsencrypt.org
3.124.100.143
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


letsencrypt.org
3.125.36.175
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

letsencrypt.org
3.125.36.175
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


letsencrypt.org
2a05:d014:58f:6200::65
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

letsencrypt.org
2a05:d014:58f:6200::65
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


letsencrypt.org
2a05:d014:58f:6202::65
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

letsencrypt.org
2a05:d014:58f:6202::65
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


www.letsencrypt.org
3.75.10.80
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.letsencrypt.org
3.75.10.80
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


www.letsencrypt.org
3.124.100.143
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.letsencrypt.org
3.124.100.143
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


www.letsencrypt.org
3.125.36.175
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.letsencrypt.org
3.125.36.175
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


www.letsencrypt.org
2a05:d014:58f:6201::65
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.letsencrypt.org
2a05:d014:58f:6201::65
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


www.letsencrypt.org
2a05:d014:58f:6202::65
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.letsencrypt.org
2a05:d014:58f:6202::65
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


3.75.10.80
3.75.10.80
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

3.75.10.80
3.75.10.80
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US


3.125.36.175
3.125.36.175
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

3.125.36.175
3.125.36.175
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US


3.124.100.143
3.124.100.143
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

3.124.100.143
3.124.100.143
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US


[2a05:d014:058f:6200:0000:0000:0000:0065]
2a05:d014:58f:6200::65
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

[2a05:d014:058f:6200:0000:0000:0000:0065]
2a05:d014:58f:6200::65
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US


[2a05:d014:058f:6201:0000:0000:0000:0065]
2a05:d014:58f:6201::65
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

[2a05:d014:058f:6201:0000:0000:0000:0065]
2a05:d014:58f:6201::65
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US


[2a05:d014:058f:6202:0000:0000:0000:0065]
2a05:d014:58f:6202::65
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

[2a05:d014:058f:6202:0000:0000:0000:0065]
2a05:d014:58f:6202::65
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

 

9. Certificates

1.
1.
CN=letsencrypt.org
05.06.2025
03.09.2025
expires in 54 days
lencr.org, letsencrypt.com, letsencrypt.org, www.lencr.org, www.letsencrypt.com, www.letsencrypt.org - 6 entries
1.
1.
CN=letsencrypt.org
05.06.2025

03.09.2025
expires in 54 days


lencr.org, letsencrypt.com, letsencrypt.org, www.lencr.org, www.letsencrypt.com, www.letsencrypt.org - 6 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:05685CE54EB6149DF536E287CACBE33936D0
Thumbprint:93CAC19CA48371BC699B0CF00D19085A21CAD294
SHA256 / Certificate:kSLy8cAclzWTkahtlhxOhN/1qnCkXQh3g2gs96QRI3U=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):dd4d388ff6c30eccca52f803774101fe4ccb006dfab8ef39fd7382e15d11dfe9
SHA256 hex / Subject Public Key Information (SPKI):dd4d388ff6c30eccca52f803774101fe4ccb006dfab8ef39fd7382e15d11dfe9 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=E6, O=Let's Encrypt, C=US
13.03.2024
13.03.2027
expires in 610 days


2.
CN=E6, O=Let's Encrypt, C=US
13.03.2024

13.03.2027
expires in 610 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:00B0573E9173972770DBB487CB3A452B38
Thumbprint:C94DC4831A901A9FEC0FB49B71BD49B5AAD4FAD0
SHA256 / Certificate:duniiKr8Djf0OQy/lGqtmX1cHJAbPOUT09j626viq4U=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):d016e1fe311948aca64f2de44ce86c9a51ca041df6103bb52a88eb3f761f57d7
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3615 days


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3615 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, S=California, C=US
31.01.2025
04.03.2026
expires in 236 days
*.netlify.app, netlify.app - 2 entries
2.
1.
CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, S=California, C=US
31.01.2025

04.03.2026
expires in 236 days


*.netlify.app, netlify.app - 2 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:SHA256 With RSA-Encryption
Serial Number:04E8761C314B519E75E93581A84A383A
Thumbprint:0428C9A3BC06509C6B0B67728227C63D991B5B71
SHA256 / Certificate:+jRqoBz1nMcwylUjE6E+DyGMOgu1zOVnCf5k7JdOjXU=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):0c5bf4acf22686578bcc8bdcb6f12eb016b9c27cd0ffe692ab25b5f32dba2feb
SHA256 hex / Subject Public Key Information (SPKI):0c5bf4acf22686578bcc8bdcb6f12eb016b9c27cd0ffe692ab25b5f32dba2feb (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
30.03.2021
30.03.2031
expires in 2088 days


2.
CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
30.03.2021

30.03.2031
expires in 2088 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0CF5BD062B5602F47AB8502C23CCF066
Thumbprint:1B511ABEAD59C6CE207077C0BF0E0043B1382612
SHA256 / Certificate:yAJfn8Zf38lbPKjMeGe5pYe1J3lzlXkXRj/IE9C2Jak=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):59e738e674221702af1edb87c5200c1a4b75f64fae3d2c3d265124c61bd83c79
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013
15.01.2038
expires in 4571 days


3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013

15.01.2038
expires in 4571 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:033AF1E6A711A9A0BB2864B11D09FAE5
Thumbprint:DF3C24F9BFD666761B268073FE06D1CC8D4F82A4
SHA256 / Certificate:yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18=
SHA256 hex / Cert (DANE * 0 1):cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA256 hex / PublicKey (DANE * 1 1):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=E6, O=Let's Encrypt, C=US
0
0
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
8864200117
leaf cert
CN=E6, O=Let's Encrypt, C=US
2024-12-07 14:44:05
2025-03-07 14:44:04
lencr.org, letsencrypt.com, letsencrypt.org, www.lencr.org, www.letsencrypt.com, www.letsencrypt.org - 6 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://letsencrypt.org/
3.124.100.143
a

151

0


0
0
0


iframe

1

0


0
0
0


img

86
991,372 Bytes
0
86
0
0
0
0


link
alternate
1

0


0
0
0


link
stylesheet
2
29,222 Bytes
0
2
0
0
0
1


meta
og
5
31,106 Bytes
0
2
0
0
0
0


meta
other
5

0


0
0
0


script

6
282,249 Bytes
6
6
0
0
0
4

https://letsencrypt.org/
3.125.36.175
a

151

0


0
0
0


iframe

1

0


0
0
0


img

86
991,188 Bytes
0
86
0
0
0
0


link
alternate
1

0


0
0
0


link
stylesheet
2
28,994 Bytes
0
2
0
0
0
1


meta
og
5
31,106 Bytes
0
2
0
0
0
0


meta
other
5

0


0
0
0


script

6
280,640 Bytes
6
6
0
0
0
4

https://letsencrypt.org/
2a05:d014:58f:6200::65
a

151

0


0
0
0


iframe

1

0


0
0
0


img

86
991,438 Bytes
0
86
0
0
0
0


link
alternate
1

0


0
0
0


link
stylesheet
2
29,353 Bytes
0
2
0
0
0
1


meta
og
5
31,106 Bytes
0
2
0
0
0
0


meta
other
5

0


0
0
0


script

6
282,487 Bytes
6
6
0
0
0
4

https://letsencrypt.org/
2a05:d014:58f:6202::65
a

151

0


0
0
0


iframe

1

0


0
0
0


img

86
991,282 Bytes
0
86
0
0
0
0


link
alternate
1

0


0
0
0


link
stylesheet
2
29,296 Bytes
0
2
0
0
0
1


meta
og
5
31,106 Bytes
0
2
0
0
0
0


meta
other
5

0


0
0
0


script

6
280,640 Bytes
6
6
0
0
0
4

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://letsencrypt.org/
3.124.100.143
a

#main-content


1
ok















a

/


2
ok















a

/2023/07/10/cross-sign-expiration/


1
ok















a

/2025/06/11/reflections-on-a-year-of-sunlight/


1
ok















a

/2025/06/26/expiration-notification-service-has-ended/


1
ok















a

/2025/07/01/issuing-our-first-ip-address-certificate/


1
ok















a

/about/


1
ok















a

/blog


1
ok















a

/blog/


1
ok















a

/ca/


1
ok















a

/contact/


1
ok















a

/cs/


1
ok















a

/da/


1
ok















a

/de/


1
ok















a

/docs


1
ok















a

/docs/


1
ok















a

/docs/client-options


1
ok















a

/docs/faq/


1
ok















a

/donate


1
ok















a

/donate/


3
ok















a

/el/


1
ok















a

/es/


1
ok















a

/fi/


1
ok















a

/fr/


1
ok















a

/getinvolved/


1
ok















a

/getting-started


2
ok















a

/he/


1
ok















a

/hu/


1
ok















a

/id/


1
ok















a

/it/


1
ok















a

/ja/


1
ok















a

/ko/


1
ok















a

/pl/


1
ok















a

/privacy/


1
ok















a

/pt-br/


1
ok















a

/repository/


1
ok















a

/ru/


1
ok















a

/si/


1
ok















a

/sponsor


3
ok















a

/sr/


1
ok















a

/stats


1
ok















a

/stats/


1
ok















a

/sv/


1
ok















a

/ta/


1
ok















a

/th/


1
ok















a

/tr/


1
ok















a

/uk/


1
ok















a

/vi/


1
ok















a

/zh-cn/


1
ok















a

/zh-tw/


1
ok















a

https://actonfamilygiving.org/


1
ok















a

https://automattic.com/


1
ok















a

https://aws.amazon.com/


1
ok















a

https://bitlaunch.io/


1
ok















a

https://cargo.site/


1
ok















a

https://community.letsencrypt.org/


2
ok















a

https://divviup.org


1
ok















a

https://dnsimple.com/letsencrypt


1
ok















a

https://domainname.shop/


1
ok















a

https://driving-tests.org/


1
ok















a

https://github.com/


1
ok















a

https://github.com/letsencrypt


1
ok















a

https://goteleport.com/


1
ok















a

https://ipinfo.io/


1
ok















a

https://ipv6.rs/


1
ok















a

https://keenetic.com/


1
ok















a

https://letsencrypt.status.io/


1
ok















a

https://memorysafety.org


1
ok















a

https://ngrok.com/


1
ok















a

https://rackspeed.de/


1
ok















a

https://serpapi.com/


1
ok















a

https://serverpilot.io/


1
ok















a

https://shiguredo.jp/


1
ok















a

https://showit.com/


1
ok















a

https://snipeitapp.com/


1
ok















a

https://tailscale.com/


1
ok















a

https://unraid.net/


1
ok















a

https://www.20i.com/


1
ok















a

https://www.3cx.com/


1
ok















a

https://www.4kdownload.com/-1uvr6/video-downloader


1
ok















a

https://www.abetterinternet.org


1
ok















a

https://www.abetterinternet.org/


1
ok















a

https://www.abetterinternet.org/about/


1
ok















a

https://www.abetterinternet.org/annual-reports/


2
ok















a

https://www.abetterinternet.org/careers/


1
ok















a

https://www.abetterinternet.org/documents/2024-ISRG-Annual-Report.pdf


1
ok















a

https://www.abetterinternet.org/sponsor/


1
ok















a

https://www.abetterinternet.org/sponsors/


1
ok















a

https://www.abetterinternet.org/terms-of-service


1
ok















a

https://www.abetterinternet.org/trademarks


1
ok















a

https://www.ads.com/


1
ok















a

https://www.akamai.com/


1
ok















a

https://www.cdmon.com/es/


1
ok















a

https://www.cdn77.com/


1
ok















a

https://www.cisco.com/


1
ok















a

https://www.clever-cloud.com/


1
ok















a

https://www.cloudns.net/


1
ok















a

https://www.confluent.io/


1
ok















a

https://www.cyon.ch/


1
ok















a

https://www.digitalocean.com/


1
ok















a

https://www.discourse.org/


1
ok















a

https://www.duda.co/


1
ok















a

https://www.duocircle.com/


1
ok















a

https://www.eff.org/


1
ok















a

https://www.entri.com/


1
ok















a

https://www.fastly.com/


1
ok















a

https://www.fordfoundation.org/


1
ok















a

https://www.google.com/chrome/


1
ok















a

https://www.greengeeks.com/


1
ok















a

https://www.haproxy.com/


1
ok















a

https://www.heroku.com/


1
ok















a

https://www.hostpapa.com/lets-encrypt-hosting?utm_source=letsencrypt.org&utm_medium=referral&utm_campaign=us-seo&utm_term=web-hosting&utm_content=180x108-logo


1
ok















a

https://www.hostpoint.ch/


1
ok















a

https://www.hoststar.ch/


1
ok















a

https://www.iban.com/


1
ok















a

https://www.ibm.com/


1
ok















a

https://www.icuk.net/


1
ok















a

https://www.identrust.com/


1
ok















a

https://www.infomaniak.ch/


1
ok















a

https://www.interserver.net/


1
ok















a

https://www.jimdo.com/


1
ok















a

https://www.linkedin.com/company/lets-encrypt/


1
ok















a

https://www.livesport.eu/


1
ok















a

https://www.mongodb.com/


1
ok















a

https://www.mozilla.org/


1
ok















a

https://www.nabucasa.com/


1
ok















a

https://www.netlify.com/


1
ok















a

https://www.nginx.com/


1
ok















a

https://www.one.com/


1
ok















a

https://www.ovh.com/


1
ok















a

https://www.planethoster.com/


1
ok















a

https://www.redhat.com/


1
ok















a

https://www.sakura.ad.jp/


1
ok















a

https://www.sap.com/


1
ok















a

https://www.securew2.com/


1
ok















a

https://www.shopify.com/


1
ok















a

https://www.siteground.com/


1
ok















a

https://www.smtp2go.com/


1
ok















a

https://www.squarespace.com/


1
ok















a

https://www.vultr.com


1
ok















a

https://www.wix.com/


1
ok















a

https://www.wpbeginner.com/


1
ok















a

https://www.zendesk.com/


1
ok















iframe
src
https://outreach.abetterinternet.org/l/1011011/2025-01-14/31v6r


1
ok















img
src
/images/Divvi-Up-Large-Full-Color-Logo.png
200

1
ok
alt: Divvi Up logoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 29750 Bytes






ETag: "bbe8ec1c090e43d046de85efb8f0b653-ssl"



img
src
/images/ISRG-Logo-Blue.svg
200

1
ok
alt: Internet Security Research Group (ISRG)image/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 2804/7275 Bytes






ETag: "e6c97ddcd48a0c9a794cd6c381e0eefa-ssl-df"



img
src
/images/language-icon128px-black.png
200

1
ok
no alt-Attributeimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4772 Bytes






ETag: "57b9e444068ff4dae949a29eb717e37d-ssl"



img
src
/images/le-logo-lockonly.svg
200

4
ok
no alt-Attributeimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1050/2502 Bytes






ETag: "be9c63432fb649372708a5b9336c8a90-ssl-df"



img
src
/images/letsencrypt-logo-horizontal.svg
200

1
ok
alt: Let's Encryptimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 4876/13457 Bytes






ETag: "5b03997347cdc7ec2df73881d1e2d8fe-ssl-df"



img
src
/images/Prossimo%20Horizontal%20Full%20Color.svg
200

1
ok
alt: Prossimo logoimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 2386/6385 Bytes






ETag: "5070654fdef496eec82eef4ecc395e3b-ssl-df"



img
src
/images/sponsors/small/20i-logo.svg
200

1
ok
alt: 20iimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 906/2159 Bytes






ETag: "50b21478d332de1fd2536ea511a37969-ssl-df"



img
src
/images/sponsors/small/3cx-logo.png
200

1
ok
alt: 3CXimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4624 Bytes






ETag: "84c375ec9a82c3e23a70088539acbd82-ssl"



img
src
/images/sponsors/small/4kdownload-logo.png
200

1
ok
alt: Video Downloaderimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 13965 Bytes






ETag: "97d696bdd6f835a3382e2d3c9ee8193a-ssl"



img
src
/images/sponsors/small/acton-family-giving-logo.png
200

1
ok
alt: Acton Family Givingimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 12067 Bytes






ETag: "f5ac1a86393f27d91df2b9e8f6654d8c-ssl"



img
src
/images/sponsors/small/ads-com-logo.png
200

1
ok
alt: Ads.comimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5226 Bytes






ETag: "eac54ec4cefb4a72f5d2ed48c1912b8f-ssl"



img
src
/images/sponsors/small/akamai-logo.png
200

1
ok
alt: Akamaiimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 12998 Bytes






ETag: "c29b63fdf20569eb2500e85f455e34da-ssl"



img
src
/images/sponsors/small/automattic-logo.png
200

1
ok
alt: Automatticimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5170 Bytes






ETag: "30ce5734fb76aaac38a7f788423565f2-ssl"



img
src
/images/sponsors/small/aws-logo-2.png
200

1
ok
alt: Amazon Web Servicesimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 38887 Bytes






ETag: "57f1c64ff528f688028940355eacbc58-ssl"



img
src
/images/sponsors/small/bitlaunch-logo.svg
200

1
ok
alt: BitLaunchimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1849/3799 Bytes






ETag: "2fca599c243f0d39acdef7aa2c800d8d-ssl-df"



img
src
/images/sponsors/small/cargo-logo.png
200

1
ok
alt: Cargoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6137 Bytes






ETag: "9382d4f14aef56fb03fa499c94bc6f8f-ssl"



img
src
/images/sponsors/small/cdmon-logo.png
200

1
ok
alt: cdmonimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4852 Bytes






ETag: "1a24bf075dbe9c8cd5eb38b2af33006f-ssl"



img
src
/images/sponsors/small/cdn77-logo.png
200

1
ok
alt: CDN77image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 37784 Bytes






ETag: "b45a87d67e3b06ad81bc37d3f8057756-ssl"



img
src
/images/sponsors/small/chrome-logo.png
200

1
ok
alt: Google Chromeimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 18010 Bytes






ETag: "ebb43e5b25aa2d89e5d8034e21b7dca1-ssl"



img
src
/images/sponsors/small/cisco-logo.png
200

1
ok
alt: Ciscoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 10999 Bytes






ETag: "174fe79eb23d9d1a91919057d25a68b3-ssl"



img
src
/images/sponsors/small/clevercloud-logo.png
200

1
ok
alt: Clever Cloudimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6530 Bytes






ETag: "f732137b7091c2c8afb8faa9900a3050-ssl"



img
src
/images/sponsors/small/cloudns-logo.png
200

1
ok
alt: ClouDNSimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 34835 Bytes






ETag: "621b61f1cc98ebc45d6429eb21b2af21-ssl"



img
src
/images/sponsors/small/confluent-logo.svg
200

1
ok
alt: Confluentimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1815/4506 Bytes






ETag: "f5e0ca182cd94541db1b89b493bef30f-ssl-df"



img
src
/images/sponsors/small/cyon-logo.png
200

1
ok
alt: Cyonimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5430 Bytes






ETag: "412f4e4b69b84d8fc2095c2e00b35138-ssl"



img
src
/images/sponsors/small/DigitalOcean_logo.svg
200

1
ok
alt: DigitalOceanimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 2122/5885 Bytes






ETag: "38f11598a8b510b7c5d74276b2a7d88e-ssl-df"



img
src
/images/sponsors/small/discourse-logo.png
200

1
ok
alt: Discourseimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7516 Bytes






ETag: "8f349e7e76ed47ea3bd6f42ac9b7d327-ssl"



img
src
/images/sponsors/small/dnsimple-logo.png
200

1
ok
alt: dnsimpleimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5587 Bytes






ETag: "91fe106b515151458aa2584de04bfad9-ssl"



img
src
/images/sponsors/small/domainnameshop-logo.png
200

1
ok
alt: DomainName.Shopimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4884 Bytes






ETag: "6f3ffc929954b9492d9c719d38659ccd-ssl"



img
src
/images/sponsors/small/driving-tests-logo.png
200

1
ok
alt: driving-tests.orgimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4269 Bytes






ETag: "8b0d96fa9602a8a970b68eadded6e5cd-ssl"



img
src
/images/sponsors/small/duda-logo.png
200

1
ok
alt: Dudaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8634 Bytes






ETag: "b47a3b7510d03ae1eee771ef3094dd47-ssl"



img
src
/images/sponsors/small/duocircle-logo.png
200

1
ok
alt: DuoCircleimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5824 Bytes






ETag: "cb62c0c79a2e958a74cad191da33e0ff-ssl"



img
src
/images/sponsors/small/eff-logo.png
200

1
ok
alt: Electronic Frontier Foundationimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 1817 Bytes






ETag: "b2d8d9d2fb220fa348d4ea4c40b5ed6e-ssl"



img
src
/images/sponsors/small/entri-logo.svg
200

1
ok
alt: Entriimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 898/2105 Bytes






ETag: "3f2ae4383b090a2f7c3ace5ec016568c-ssl-df"



img
src
/images/sponsors/small/fastly-logo.png
200

1
ok
alt: Fastlyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 10322 Bytes






ETag: "f8db0e128c5b4d1765b4b0628f347a24-ssl"



img
src
/images/sponsors/small/ford-foundation-logo.png
200

1
ok
alt: Ford Foundationimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7904 Bytes






ETag: "e259848a4eab6793f2c65668780a99c7-ssl"



img
src
/images/sponsors/small/github-logo.png
200

1
ok
alt: GitHubimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4758 Bytes






ETag: "44e97d0a55bebfd9e296787bb8353b6a-ssl"



img
src
/images/sponsors/small/greengeeks-logo.png
200

1
ok
alt: GreenGeeksimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6004 Bytes






ETag: "3ce5383542a5ccb0e66396b971571fa2-ssl"



img
src
/images/sponsors/small/haproxy-logo.png
200

1
ok
alt: HAProxyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8022 Bytes






ETag: "1dbf02b30c475d138d6293f1c565bd39-ssl"



img
src
/images/sponsors/small/heroku-logo.png
200

1
ok
alt: Herokuimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4228 Bytes






ETag: "ca04c772da36e7516adef7bd53f43292-ssl"



img
src
/images/sponsors/small/hostpapa-logo.png
200

1
ok
alt: HostPapaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 12205 Bytes






ETag: "72d94936e2205755cfd90cbd6bcfccfc-ssl"



img
src
/images/sponsors/small/hostpoint-logo.png
200

1
ok
alt: HostPointimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6700 Bytes






ETag: "f7eccaa098af81403f15010baa38640f-ssl"



img
src
/images/sponsors/small/hoststar-logo.png
200

1
ok
alt: Hoststarimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5956 Bytes






ETag: "1d211ccec0a92d91e5ec54c3f9c10d15-ssl"



img
src
/images/sponsors/small/iban-logo.png
200

1
ok
alt: IBANimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 38469 Bytes






ETag: "73942bc69d907caa0563923969f35c4e-ssl"



img
src
/images/sponsors/small/ibm-logo.png
200

1
ok
alt: IBMimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4218 Bytes






ETag: "b12138a1d3a45a1425ebfaae68327693-ssl"



img
src
/images/sponsors/small/icuk-logo-red.svg
200

1
ok
alt: ICUKimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1000/1859 Bytes






ETag: "1414a3507f4a392c2dbbb4f6df330ed0-ssl-df"



img
src
/images/sponsors/small/identrust-logo.png
200

1
ok
alt: IdenTrustimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5900 Bytes






ETag: "704648834df930c8e89519ab80679eef-ssl"



img
src
/images/sponsors/small/infomaniak-logo.png
200

1
ok
alt: Infomaniakimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7310 Bytes






ETag: "4e517bb21babd0ac0861fc2abb0c73bc-ssl"



img
src
/images/sponsors/small/interserver-logo.png
200

1
ok
alt: Interserverimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 78789 Bytes






ETag: "1f6d6c05c2a5d77ad36f21d193796803-ssl"



img
src
/images/sponsors/small/ipinfo-logo.png
200

1
ok
alt: IPInfoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7940 Bytes






ETag: "5c6307a8918718d33ad5eb7834293a44-ssl"



img
src
/images/sponsors/small/ipv6rs-logo.png
200

1
ok
alt: IPv6rsimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 96851 Bytes






ETag: "0f7814b772fc2ec954af8bad310ad992-ssl"



img
src
/images/sponsors/small/jimdo-logo.png
200

1
ok
alt: Jimdoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4137 Bytes






ETag: "b772e4c65b1ce44b9d21b65dcd24bca6-ssl"



img
src
/images/sponsors/small/keenetic-logo.png
200

1
ok
alt: Keeneticimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3039 Bytes






ETag: "c12548d9c35ae0c3bd79786e77f60335-ssl"



img
src
/images/sponsors/small/livesport-logo.png
200

1
ok
alt: Livesportimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4030 Bytes






ETag: "a6dff2b79c9ae9639ac481c1413dbf66-ssl"



img
src
/images/sponsors/small/mongodb-logo.png
200

1
ok
alt: MongoDBimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6184 Bytes






ETag: "d167bc1faf0c179a4af58255be417560-ssl"



img
src
/images/sponsors/small/mozilla-logo.png
200

1
ok
alt: Mozillaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6181 Bytes






ETag: "404d8aa23373503f7910f4bf018753d2-ssl"



img
src
/images/sponsors/small/nabu-casa-logo.png
200

1
ok
alt: Nabu Casaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4859 Bytes






ETag: "07fda58c1e0a604f633e307d71dc663f-ssl"



img
src
/images/sponsors/small/netlify-logo.png
200

1
ok
alt: Netlifyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8933 Bytes






ETag: "4a611ff2ae44faa654b3c282692495ab-ssl"



img
src
/images/sponsors/small/nginx-logo.png
200

1
ok
alt: NGINXimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5680 Bytes






ETag: "b448e3bd3ab505f3716ab6c2e55c4efe-ssl"



img
src
/images/sponsors/small/ngrok-logo.png
200

1
ok
alt: Ngrokimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 9814 Bytes






ETag: "883178b360c3dc701fcff235bfddad6f-ssl"



img
src
/images/sponsors/small/one-com-logo.png
200

1
ok
alt: one.comimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4644 Bytes






ETag: "3c983bc07c9948b939269126a92156b4-ssl"



img
src
/images/sponsors/small/ovh-logo.png
200

1
ok
alt: OVHimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5674 Bytes






ETag: "ef4bfe13b22efcd6cd9a0982cfb65412-ssl"



img
src
/images/sponsors/small/planethoster-logo.png
200

1
ok
alt: Hébergement webimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 15900 Bytes






ETag: "d87653a9e6dee215771383754e436a47-ssl"



img
src
/images/sponsors/small/rack-speed-logo.png
200

1
ok
alt: RACK::SPEEDimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5231 Bytes






ETag: "c05f0a4c80392bf1b672407521f3b48d-ssl"



img
src
/images/sponsors/small/redhat-logo.png
200

1
ok
alt: RedHatimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5786 Bytes






ETag: "e92859021bbe6b37d9b3329ba672ddfa-ssl"



img
src
/images/sponsors/small/sakura-logo.png
200

1
ok
alt: Sakura Internetimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5548 Bytes






ETag: "a29952eeba7260a96ddca25357a12d5d-ssl"



img
src
/images/sponsors/small/sap-logo.svg
200

1
ok
alt: SAPimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 880/1678 Bytes






ETag: "f232bc9de15755de6cddc18aa940c6fd-ssl-df"



img
src
/images/sponsors/small/securew2-logo.png
200

1
ok
alt: SecureW2image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 38144 Bytes






ETag: "f68dabf819d47332901937197af52da7-ssl"



img
src
/images/sponsors/small/SerpApi-black.png
200

1
ok
alt: SerpApiimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 15814 Bytes






ETag: "8994d382648451c3514ed520cbf94166-ssl"



img
src
/images/sponsors/small/serverpilot-logo.png
200

1
ok
alt: ServerPilotimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8325 Bytes






ETag: "544f9ec2ef2213b8897801ee90b1a888-ssl"



img
src
/images/sponsors/small/shiguredo-v2-logo.svg
200

1
ok
alt: Shiguredoimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 3878/9596 Bytes






ETag: "7546a288976965703364aead18e3684d-ssl-df"



img
src
/images/sponsors/small/shopify-logo.png
200

1
ok
alt: Shopifyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 12390 Bytes






ETag: "050bf25813797f2e2c790db66c13667b-ssl"



img
src
/images/sponsors/small/showit-logo.png
200

1
ok
alt: Showitimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 27455 Bytes






ETag: "5c99509b01abcbe41f8d0d477053f6ae-ssl"



img
src
/images/sponsors/small/siteground-logo.png
200

1
ok
alt: SiteGroundimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 14211 Bytes






ETag: "12ff1f5f64e727641d090966bb905126-ssl"



img
src
/images/sponsors/small/smtp2go-logo.png
200

1
ok
alt: SMTP2GOimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 91681 Bytes






ETag: "cef9bb0b69c121f54a8bad4ab5980a0a-ssl"



img
src
/images/sponsors/small/snipeit-logo.png
200

1
ok
alt: Snipe-ITimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 21235 Bytes






ETag: "ff120b727d3380da73afdc144e84c961-ssl"



img
src
/images/sponsors/small/squarespace-logo.png
200

1
ok
alt: Squarespaceimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7025 Bytes






ETag: "903d6cea5e46f02ea3edc1631e77af34-ssl"



img
src
/images/sponsors/small/tailscale-logo.svg
200

1
ok
alt: Tailscaleimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1510/4427 Bytes






ETag: "4bc49801ef28c8f9753ca8de59309bc9-ssl-df"



img
src
/images/sponsors/small/teleport-logo.png
200

1
ok
alt: Teleportimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4830 Bytes






ETag: "cc67da51f24dfdfd916d74db823746a8-ssl"



img
src
/images/sponsors/small/unraid-logo.png
200

1
ok
alt: Lime Technology (Unraid)image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4510 Bytes






ETag: "61341a1c7f0419d64c577febf68f0bd2-ssl"



img
src
/images/sponsors/small/vultr-logo.png
200

1
ok
alt: Vultrimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6401 Bytes






ETag: "89fe7ec012b5d206dea64f973676fdbd-ssl"



img
src
/images/sponsors/small/wix-logo.png
200

1
ok
alt: Wiximage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5499 Bytes






ETag: "ba884b3a3869d914470e6e1d5aeeead9-ssl"



img
src
/images/sponsors/small/wpbeginner-logo.png
200

1
ok
alt: WPBeginnerimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4856 Bytes






ETag: "44b0c07d54befe358d1f5f60d6218bc3-ssl"



img
src
/images/sponsors/small/zendesk-logo.png
200

1
ok
alt: Zendeskimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8089 Bytes






ETag: "83149c03483cf64985e3a700dddb5153-ssl"



link
alternate
/feed.xml


1
ok















link
stylesheet
/css/le-2025-theme-output.min.4885710fc114d55f3ab281d57a09e66dde790ef3d49f88b4b722d0f2618a128d.css
200

1
ok
text/css; charset=UTF-8
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 7233/47183 Bytes






ETag: "fcdc9175ac7c93103ab7865786385a66-ssl-df"

SRI found. Integrity:
sha256-SIVxD8EU1V86soHVegnmbd55DvPUn4i0tyLQ8mGKEo0=
crossorigin: no crossorigin defined
No SRI Parse error
valid



link
stylesheet
/fontawesome-free-6.5.2-web/css/all.min.css
200

1
ok
text/css; charset=UTF-8
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 21989/103009 Bytes






ETag: "05513efce9d88b8dfb8678fcaf50d95d-ssl-df"

local SRI possible, possible hash-values:

 

sha256-XOqroi11tY4EFQMR9ZYwZWKj5ZXiftSx36RRuC3anlA=
sha384-PPIZEGYM1v8zp5Py7UjFb79S58UeqCL9pYVnVPURKEqvioPROaVAJKKLzvH2rDnI
sha512-SnH5WK+bZxgPHs44uWIX+LLJAJ9/2PkPKZ5QiAj6Ta86w+fsb2TkcmfRyVX3pBnMFcV7oQPJkl9QevSCWr3W6A==

 

<link rel="stylesheet" href="/fontawesome-free-6.5.2-web/css/all.min.css" crossorigin="anonymous" integrity="sha256-XOqroi11tY4EFQMR9ZYwZWKj5ZXiftSx36RRuC3anlA=" />



meta
charset
utf-8


1
ok















meta
og:description
Let's Encrypt is a free, automated, and open Certificate Authority brought to you by the nonprofit Internet Security Research Group (ISRG). Read all about our nonprofit work this year in our 2024 Annual Report.


1
ok















meta
og:image
https://letsencrypt.org/images/LetsEncrypt-SocialShare.png
200

1
ok
image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 21513 Bytes






ETag: "f69a4a7f3bd0dcf77d474f54e605ef24-ssl"



meta
og:title
Let's Encrypt


1
ok















meta
og:type
website


1
ok















meta
og:url
https://letsencrypt.org/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





9593 Bytes






ETag: "db468f242136720fefa0be3d779ae24b-ssl-df"



meta
X-UA-Compatible
IE=edge


1
ok















meta
description
Let's Encrypt is a free, automated, and open Certificate Authority brought to you by the nonprofit Internet Security Research Group (ISRG). Read all about our nonprofit work this year in our 2024 Annual Report.


1
ok















meta
generator
Hugo 0.130.0


1
ok















meta
viewport
width=device-width, initial-scale=1


1
ok















script
src
/js/autoanchor.44783525c73cfeef565e5b8441cd42a848cb630d9f365def73edce4867e6f4c8.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
287 Bytes






ETag: "5125f76809c02eaf0dc74ea8d1c71f68-ssl"

SRI found. Integrity:
sha256-RHg1Jcc8/u9WXluEQc1CqEjLYw2fNl3vc+3OSGfm9Mg=
crossorigin: anonymous
No SRI Parse error
valid



script
src
/js/le-2025-theme.baca0a37d412391799a4e5f6d58968c12b948b4c91c053a3c025ab758ffb70bc.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1618/6942 Bytes






ETag: "1154e5602690c67a0d7a6511ab7ace75-ssl-df"

SRI found. Integrity:
sha256-usoKN9QSOReZpOX21YlowSuUi0yRwFOjwCWrdY/7cLw=
crossorigin: anonymous
No SRI Parse error
valid



script
src
/js/main.a572b61495f9d8fe4e5ec075082ddfe85e5a5ff501c15c499d3f2a4bed71afb6fe89e85f3202aa8fdeebcda97645416bfc75683c2d3471485b5668a6d5f98740.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1394/4576 Bytes






ETag: "0aad23b251916fbe4694d6df71c47a7d-ssl-df"

SRI found. Integrity:
sha512-pXK2FJX52P5OXsB1CC3f6F5aX/UBwVxJnT8qS+1xr7b+iehfMgKqj97rzal2RUFr/HVoPC00cUhbVmim1fmHQA==
crossorigin: no crossorigin defined
No SRI Parse error
valid



script
src
/js/number-animation.6b554e2ec749cfa6946097a152ad3d20af4be05e196028c1b5ce0e7f3133ce51.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
363 Bytes






ETag: "50e35c44ce987abeef85bc407fc909ba-ssl"

SRI found. Integrity:
sha256-a1VOLsdJz6aUYJehUq09IK9L4F4ZYCjBtc4OfzEzzlE=
crossorigin: anonymous
No SRI Parse error
valid



script
src
/js/plotly-min.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 275773/874002 Bytes






ETag: "0b7215e212ace40e70c6d50dd090d94f-ssl-df"

local SRI possible, possible hash-values:

 

sha256-oqZObAIaVKCx7CRhsPnmTQxwNCAerZAtG+tp/4V2Vqw=
sha384-LjcRSi75J+KNeH6DWUY1SHN6l+t8BlUFC0ttR09Aam01fb7DIoP5vAX8xwiymt2p
sha512-TsO7js/++izO+SPbMvVt6ZLwm4dxf2CTvGtf3AQXaXMx3jLOLhrKUidG/LZa9nqD8JKwy45tXE+wpGfCWB8Byg==

 

<script src="/js/plotly-min.js" crossorigin="anonymous" integrity="sha256-oqZObAIaVKCx7CRhsPnmTQxwNCAerZAtG+tp/4V2Vqw=" />



script
src
/js/stats.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 2814/11511 Bytes






ETag: "2e3eab19003d8e28d9ba98481901e528-ssl-df"

local SRI possible, possible hash-values:

 

sha256-snFGPkj6fvjl90G4WSSw720FxhhXUnXQv0rvPEqYxPs=
sha384-F9Gc6iDi8c16isxsjS74o6GJ5ixqNFQlogfj9y8d/3tbi6b4hnL69G+4WwhvNkCP
sha512-xUsIhoV3KImIOHRyWlD4JPwvrsezmB2KSgog+SqvdnZOigYAa6etfz67xa3k5IFXvYuj8fQghVT/H6ENmZrOew==

 

<script src="/js/stats.js" crossorigin="anonymous" integrity="sha256-snFGPkj6fvjl90G4WSSw720FxhhXUnXQv0rvPEqYxPs=" />


3.125.36.175
a

#main-content


1
ok















a

/


2
ok















a

/2023/07/10/cross-sign-expiration/


1
ok















a

/2025/06/11/reflections-on-a-year-of-sunlight/


1
ok















a

/2025/06/26/expiration-notification-service-has-ended/


1
ok















a

/2025/07/01/issuing-our-first-ip-address-certificate/


1
ok















a

/about/


1
ok















a

/blog


1
ok















a

/blog/


1
ok















a

/ca/


1
ok















a

/contact/


1
ok















a

/cs/


1
ok















a

/da/


1
ok















a

/de/


1
ok















a

/docs


1
ok















a

/docs/


1
ok















a

/docs/client-options


1
ok















a

/docs/faq/


1
ok















a

/donate


1
ok















a

/donate/


3
ok















a

/el/


1
ok















a

/es/


1
ok















a

/fi/


1
ok















a

/fr/


1
ok















a

/getinvolved/


1
ok















a

/getting-started


2
ok















a

/he/


1
ok















a

/hu/


1
ok















a

/id/


1
ok















a

/it/


1
ok















a

/ja/


1
ok















a

/ko/


1
ok















a

/pl/


1
ok















a

/privacy/


1
ok















a

/pt-br/


1
ok















a

/repository/


1
ok















a

/ru/


1
ok















a

/si/


1
ok















a

/sponsor


3
ok















a

/sr/


1
ok















a

/stats


1
ok















a

/stats/


1
ok















a

/sv/


1
ok















a

/ta/


1
ok















a

/th/


1
ok















a

/tr/


1
ok















a

/uk/


1
ok















a

/vi/


1
ok















a

/zh-cn/


1
ok















a

/zh-tw/


1
ok















a

https://actonfamilygiving.org/


1
ok















a

https://automattic.com/


1
ok















a

https://aws.amazon.com/


1
ok















a

https://bitlaunch.io/


1
ok















a

https://cargo.site/


1
ok















a

https://community.letsencrypt.org/


2
ok















a

https://divviup.org


1
ok















a

https://dnsimple.com/letsencrypt


1
ok















a

https://domainname.shop/


1
ok















a

https://driving-tests.org/


1
ok















a

https://github.com/


1
ok















a

https://github.com/letsencrypt


1
ok















a

https://goteleport.com/


1
ok















a

https://ipinfo.io/


1
ok















a

https://ipv6.rs/


1
ok















a

https://keenetic.com/


1
ok















a

https://letsencrypt.status.io/


1
ok















a

https://memorysafety.org


1
ok















a

https://ngrok.com/


1
ok















a

https://rackspeed.de/


1
ok















a

https://serpapi.com/


1
ok















a

https://serverpilot.io/


1
ok















a

https://shiguredo.jp/


1
ok















a

https://showit.com/


1
ok















a

https://snipeitapp.com/


1
ok















a

https://tailscale.com/


1
ok















a

https://unraid.net/


1
ok















a

https://www.20i.com/


1
ok















a

https://www.3cx.com/


1
ok















a

https://www.4kdownload.com/-1uvr6/video-downloader


1
ok















a

https://www.abetterinternet.org


1
ok















a

https://www.abetterinternet.org/


1
ok















a

https://www.abetterinternet.org/about/


1
ok















a

https://www.abetterinternet.org/annual-reports/


2
ok















a

https://www.abetterinternet.org/careers/


1
ok















a

https://www.abetterinternet.org/documents/2024-ISRG-Annual-Report.pdf


1
ok















a

https://www.abetterinternet.org/sponsor/


1
ok















a

https://www.abetterinternet.org/sponsors/


1
ok















a

https://www.abetterinternet.org/terms-of-service


1
ok















a

https://www.abetterinternet.org/trademarks


1
ok















a

https://www.ads.com/


1
ok















a

https://www.akamai.com/


1
ok















a

https://www.cdmon.com/es/


1
ok















a

https://www.cdn77.com/


1
ok















a

https://www.cisco.com/


1
ok















a

https://www.clever-cloud.com/


1
ok















a

https://www.cloudns.net/


1
ok















a

https://www.confluent.io/


1
ok















a

https://www.cyon.ch/


1
ok















a

https://www.digitalocean.com/


1
ok















a

https://www.discourse.org/


1
ok















a

https://www.duda.co/


1
ok















a

https://www.duocircle.com/


1
ok















a

https://www.eff.org/


1
ok















a

https://www.entri.com/


1
ok















a

https://www.fastly.com/


1
ok















a

https://www.fordfoundation.org/


1
ok















a

https://www.google.com/chrome/


1
ok















a

https://www.greengeeks.com/


1
ok















a

https://www.haproxy.com/


1
ok















a

https://www.heroku.com/


1
ok















a

https://www.hostpapa.com/lets-encrypt-hosting?utm_source=letsencrypt.org&utm_medium=referral&utm_campaign=us-seo&utm_term=web-hosting&utm_content=180x108-logo


1
ok















a

https://www.hostpoint.ch/


1
ok















a

https://www.hoststar.ch/


1
ok















a

https://www.iban.com/


1
ok















a

https://www.ibm.com/


1
ok















a

https://www.icuk.net/


1
ok















a

https://www.identrust.com/


1
ok















a

https://www.infomaniak.ch/


1
ok















a

https://www.interserver.net/


1
ok















a

https://www.jimdo.com/


1
ok















a

https://www.linkedin.com/company/lets-encrypt/


1
ok















a

https://www.livesport.eu/


1
ok















a

https://www.mongodb.com/


1
ok















a

https://www.mozilla.org/


1
ok















a

https://www.nabucasa.com/


1
ok















a

https://www.netlify.com/


1
ok















a

https://www.nginx.com/


1
ok















a

https://www.one.com/


1
ok















a

https://www.ovh.com/


1
ok















a

https://www.planethoster.com/


1
ok















a

https://www.redhat.com/


1
ok















a

https://www.sakura.ad.jp/


1
ok















a

https://www.sap.com/


1
ok















a

https://www.securew2.com/


1
ok















a

https://www.shopify.com/


1
ok















a

https://www.siteground.com/


1
ok















a

https://www.smtp2go.com/


1
ok















a

https://www.squarespace.com/


1
ok















a

https://www.vultr.com


1
ok















a

https://www.wix.com/


1
ok















a

https://www.wpbeginner.com/


1
ok















a

https://www.zendesk.com/


1
ok















iframe
src
https://outreach.abetterinternet.org/l/1011011/2025-01-14/31v6r


1
ok















img
src
/images/Divvi-Up-Large-Full-Color-Logo.png
200

1
ok
alt: Divvi Up logoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 29750 Bytes






ETag: "bbe8ec1c090e43d046de85efb8f0b653-ssl"



img
src
/images/ISRG-Logo-Blue.svg
200

1
ok
alt: Internet Security Research Group (ISRG)image/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 2836/7275 Bytes






ETag: "e6c97ddcd48a0c9a794cd6c381e0eefa-ssl-df"



img
src
/images/language-icon128px-black.png
200

1
ok
no alt-Attributeimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4772 Bytes






ETag: "57b9e444068ff4dae949a29eb717e37d-ssl"



img
src
/images/le-logo-lockonly.svg
200

4
ok
no alt-Attributeimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1015/2502 Bytes






ETag: "be9c63432fb649372708a5b9336c8a90-ssl-df"



img
src
/images/letsencrypt-logo-horizontal.svg
200

1
ok
alt: Let's Encryptimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 4876/13457 Bytes






ETag: "5b03997347cdc7ec2df73881d1e2d8fe-ssl-df"



img
src
/images/Prossimo%20Horizontal%20Full%20Color.svg
200

1
ok
alt: Prossimo logoimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 2364/6385 Bytes






ETag: "5070654fdef496eec82eef4ecc395e3b-ssl-df"



img
src
/images/sponsors/small/20i-logo.svg
200

1
ok
alt: 20iimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 906/2159 Bytes






ETag: "50b21478d332de1fd2536ea511a37969-ssl-df"



img
src
/images/sponsors/small/3cx-logo.png
200

1
ok
alt: 3CXimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4624 Bytes






ETag: "84c375ec9a82c3e23a70088539acbd82-ssl"



img
src
/images/sponsors/small/4kdownload-logo.png
200

1
ok
alt: Video Downloaderimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 13965 Bytes






ETag: "97d696bdd6f835a3382e2d3c9ee8193a-ssl"



img
src
/images/sponsors/small/acton-family-giving-logo.png
200

1
ok
alt: Acton Family Givingimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 12067 Bytes






ETag: "f5ac1a86393f27d91df2b9e8f6654d8c-ssl"



img
src
/images/sponsors/small/ads-com-logo.png
200

1
ok
alt: Ads.comimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5226 Bytes






ETag: "eac54ec4cefb4a72f5d2ed48c1912b8f-ssl"



img
src
/images/sponsors/small/akamai-logo.png
200

1
ok
alt: Akamaiimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 12998 Bytes






ETag: "c29b63fdf20569eb2500e85f455e34da-ssl"



img
src
/images/sponsors/small/automattic-logo.png
200

1
ok
alt: Automatticimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5170 Bytes






ETag: "30ce5734fb76aaac38a7f788423565f2-ssl"



img
src
/images/sponsors/small/aws-logo-2.png
200

1
ok
alt: Amazon Web Servicesimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 38887 Bytes






ETag: "57f1c64ff528f688028940355eacbc58-ssl"



img
src
/images/sponsors/small/bitlaunch-logo.svg
200

1
ok
alt: BitLaunchimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1849/3799 Bytes






ETag: "2fca599c243f0d39acdef7aa2c800d8d-ssl-df"



img
src
/images/sponsors/small/cargo-logo.png
200

1
ok
alt: Cargoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6137 Bytes






ETag: "9382d4f14aef56fb03fa499c94bc6f8f-ssl"



img
src
/images/sponsors/small/cdmon-logo.png
200

1
ok
alt: cdmonimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4852 Bytes






ETag: "1a24bf075dbe9c8cd5eb38b2af33006f-ssl"



img
src
/images/sponsors/small/cdn77-logo.png
200

1
ok
alt: CDN77image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 37784 Bytes






ETag: "b45a87d67e3b06ad81bc37d3f8057756-ssl"



img
src
/images/sponsors/small/chrome-logo.png
200

1
ok
alt: Google Chromeimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 18010 Bytes






ETag: "ebb43e5b25aa2d89e5d8034e21b7dca1-ssl"



img
src
/images/sponsors/small/cisco-logo.png
200

1
ok
alt: Ciscoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 10999 Bytes






ETag: "174fe79eb23d9d1a91919057d25a68b3-ssl"



img
src
/images/sponsors/small/clevercloud-logo.png
200

1
ok
alt: Clever Cloudimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6530 Bytes






ETag: "f732137b7091c2c8afb8faa9900a3050-ssl"



img
src
/images/sponsors/small/cloudns-logo.png
200

1
ok
alt: ClouDNSimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 34835 Bytes






ETag: "621b61f1cc98ebc45d6429eb21b2af21-ssl"



img
src
/images/sponsors/small/confluent-logo.svg
200

1
ok
alt: Confluentimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1815/4506 Bytes






ETag: "f5e0ca182cd94541db1b89b493bef30f-ssl-df"



img
src
/images/sponsors/small/cyon-logo.png
200

1
ok
alt: Cyonimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5430 Bytes






ETag: "412f4e4b69b84d8fc2095c2e00b35138-ssl"



img
src
/images/sponsors/small/DigitalOcean_logo.svg
200

1
ok
alt: DigitalOceanimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 2122/5885 Bytes






ETag: "38f11598a8b510b7c5d74276b2a7d88e-ssl-df"



img
src
/images/sponsors/small/discourse-logo.png
200

1
ok
alt: Discourseimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7516 Bytes






ETag: "8f349e7e76ed47ea3bd6f42ac9b7d327-ssl"



img
src
/images/sponsors/small/dnsimple-logo.png
200

1
ok
alt: dnsimpleimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5587 Bytes






ETag: "91fe106b515151458aa2584de04bfad9-ssl"



img
src
/images/sponsors/small/domainnameshop-logo.png
200

1
ok
alt: DomainName.Shopimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4884 Bytes






ETag: "6f3ffc929954b9492d9c719d38659ccd-ssl"



img
src
/images/sponsors/small/driving-tests-logo.png
200

1
ok
alt: driving-tests.orgimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4269 Bytes






ETag: "8b0d96fa9602a8a970b68eadded6e5cd-ssl"



img
src
/images/sponsors/small/duda-logo.png
200

1
ok
alt: Dudaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8634 Bytes






ETag: "b47a3b7510d03ae1eee771ef3094dd47-ssl"



img
src
/images/sponsors/small/duocircle-logo.png
200

1
ok
alt: DuoCircleimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5824 Bytes






ETag: "cb62c0c79a2e958a74cad191da33e0ff-ssl"



img
src
/images/sponsors/small/eff-logo.png
200

1
ok
alt: Electronic Frontier Foundationimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 1817 Bytes






ETag: "b2d8d9d2fb220fa348d4ea4c40b5ed6e-ssl"



img
src
/images/sponsors/small/entri-logo.svg
200

1
ok
alt: Entriimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 898/2105 Bytes






ETag: "3f2ae4383b090a2f7c3ace5ec016568c-ssl-df"



img
src
/images/sponsors/small/fastly-logo.png
200

1
ok
alt: Fastlyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 10322 Bytes






ETag: "f8db0e128c5b4d1765b4b0628f347a24-ssl"



img
src
/images/sponsors/small/ford-foundation-logo.png
200

1
ok
alt: Ford Foundationimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7904 Bytes






ETag: "e259848a4eab6793f2c65668780a99c7-ssl"



img
src
/images/sponsors/small/github-logo.png
200

1
ok
alt: GitHubimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4758 Bytes






ETag: "44e97d0a55bebfd9e296787bb8353b6a-ssl"



img
src
/images/sponsors/small/greengeeks-logo.png
200

1
ok
alt: GreenGeeksimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6004 Bytes






ETag: "3ce5383542a5ccb0e66396b971571fa2-ssl"



img
src
/images/sponsors/small/haproxy-logo.png
200

1
ok
alt: HAProxyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8022 Bytes






ETag: "1dbf02b30c475d138d6293f1c565bd39-ssl"



img
src
/images/sponsors/small/heroku-logo.png
200

1
ok
alt: Herokuimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4228 Bytes






ETag: "ca04c772da36e7516adef7bd53f43292-ssl"



img
src
/images/sponsors/small/hostpapa-logo.png
200

1
ok
alt: HostPapaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 12205 Bytes






ETag: "72d94936e2205755cfd90cbd6bcfccfc-ssl"



img
src
/images/sponsors/small/hostpoint-logo.png
200

1
ok
alt: HostPointimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6700 Bytes






ETag: "f7eccaa098af81403f15010baa38640f-ssl"



img
src
/images/sponsors/small/hoststar-logo.png
200

1
ok
alt: Hoststarimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5956 Bytes






ETag: "1d211ccec0a92d91e5ec54c3f9c10d15-ssl"



img
src
/images/sponsors/small/iban-logo.png
200

1
ok
alt: IBANimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 38469 Bytes






ETag: "73942bc69d907caa0563923969f35c4e-ssl"



img
src
/images/sponsors/small/ibm-logo.png
200

1
ok
alt: IBMimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4218 Bytes






ETag: "b12138a1d3a45a1425ebfaae68327693-ssl"



img
src
/images/sponsors/small/icuk-logo-red.svg
200

1
ok
alt: ICUKimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 975/1859 Bytes






ETag: "1414a3507f4a392c2dbbb4f6df330ed0-ssl-df"



img
src
/images/sponsors/small/identrust-logo.png
200

1
ok
alt: IdenTrustimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5900 Bytes






ETag: "704648834df930c8e89519ab80679eef-ssl"



img
src
/images/sponsors/small/infomaniak-logo.png
200

1
ok
alt: Infomaniakimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7310 Bytes






ETag: "4e517bb21babd0ac0861fc2abb0c73bc-ssl"



img
src
/images/sponsors/small/interserver-logo.png
200

1
ok
alt: Interserverimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 78789 Bytes






ETag: "1f6d6c05c2a5d77ad36f21d193796803-ssl"



img
src
/images/sponsors/small/ipinfo-logo.png
200

1
ok
alt: IPInfoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7940 Bytes






ETag: "5c6307a8918718d33ad5eb7834293a44-ssl"



img
src
/images/sponsors/small/ipv6rs-logo.png
200

1
ok
alt: IPv6rsimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 96851 Bytes






ETag: "0f7814b772fc2ec954af8bad310ad992-ssl"



img
src
/images/sponsors/small/jimdo-logo.png
200

1
ok
alt: Jimdoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4137 Bytes






ETag: "b772e4c65b1ce44b9d21b65dcd24bca6-ssl"



img
src
/images/sponsors/small/keenetic-logo.png
200

1
ok
alt: Keeneticimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3039 Bytes






ETag: "c12548d9c35ae0c3bd79786e77f60335-ssl"



img
src
/images/sponsors/small/livesport-logo.png
200

1
ok
alt: Livesportimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4030 Bytes






ETag: "a6dff2b79c9ae9639ac481c1413dbf66-ssl"



img
src
/images/sponsors/small/mongodb-logo.png
200

1
ok
alt: MongoDBimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6184 Bytes






ETag: "d167bc1faf0c179a4af58255be417560-ssl"



img
src
/images/sponsors/small/mozilla-logo.png
200

1
ok
alt: Mozillaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6181 Bytes






ETag: "404d8aa23373503f7910f4bf018753d2-ssl"



img
src
/images/sponsors/small/nabu-casa-logo.png
200

1
ok
alt: Nabu Casaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4859 Bytes






ETag: "07fda58c1e0a604f633e307d71dc663f-ssl"



img
src
/images/sponsors/small/netlify-logo.png
200

1
ok
alt: Netlifyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8933 Bytes






ETag: "4a611ff2ae44faa654b3c282692495ab-ssl"



img
src
/images/sponsors/small/nginx-logo.png
200

1
ok
alt: NGINXimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5680 Bytes






ETag: "b448e3bd3ab505f3716ab6c2e55c4efe-ssl"



img
src
/images/sponsors/small/ngrok-logo.png
200

1
ok
alt: Ngrokimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 9814 Bytes






ETag: "883178b360c3dc701fcff235bfddad6f-ssl"



img
src
/images/sponsors/small/one-com-logo.png
200

1
ok
alt: one.comimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4644 Bytes






ETag: "3c983bc07c9948b939269126a92156b4-ssl"



img
src
/images/sponsors/small/ovh-logo.png
200

1
ok
alt: OVHimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5674 Bytes






ETag: "ef4bfe13b22efcd6cd9a0982cfb65412-ssl"



img
src
/images/sponsors/small/planethoster-logo.png
200

1
ok
alt: Hébergement webimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 15900 Bytes






ETag: "d87653a9e6dee215771383754e436a47-ssl"



img
src
/images/sponsors/small/rack-speed-logo.png
200

1
ok
alt: RACK::SPEEDimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5231 Bytes






ETag: "c05f0a4c80392bf1b672407521f3b48d-ssl"



img
src
/images/sponsors/small/redhat-logo.png
200

1
ok
alt: RedHatimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5786 Bytes






ETag: "e92859021bbe6b37d9b3329ba672ddfa-ssl"



img
src
/images/sponsors/small/sakura-logo.png
200

1
ok
alt: Sakura Internetimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5548 Bytes






ETag: "a29952eeba7260a96ddca25357a12d5d-ssl"



img
src
/images/sponsors/small/sap-logo.svg
200

1
ok
alt: SAPimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 880/1678 Bytes






ETag: "f232bc9de15755de6cddc18aa940c6fd-ssl-df"



img
src
/images/sponsors/small/securew2-logo.png
200

1
ok
alt: SecureW2image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 38144 Bytes






ETag: "f68dabf819d47332901937197af52da7-ssl"



img
src
/images/sponsors/small/SerpApi-black.png
200

1
ok
alt: SerpApiimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 15814 Bytes






ETag: "8994d382648451c3514ed520cbf94166-ssl"



img
src
/images/sponsors/small/serverpilot-logo.png
200

1
ok
alt: ServerPilotimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8325 Bytes






ETag: "544f9ec2ef2213b8897801ee90b1a888-ssl"



img
src
/images/sponsors/small/shiguredo-v2-logo.svg
200

1
ok
alt: Shiguredoimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 3849/9596 Bytes






ETag: "7546a288976965703364aead18e3684d-ssl-df"



img
src
/images/sponsors/small/shopify-logo.png
200

1
ok
alt: Shopifyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 12390 Bytes






ETag: "050bf25813797f2e2c790db66c13667b-ssl"



img
src
/images/sponsors/small/showit-logo.png
200

1
ok
alt: Showitimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 27455 Bytes






ETag: "5c99509b01abcbe41f8d0d477053f6ae-ssl"



img
src
/images/sponsors/small/siteground-logo.png
200

1
ok
alt: SiteGroundimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 14211 Bytes






ETag: "12ff1f5f64e727641d090966bb905126-ssl"



img
src
/images/sponsors/small/smtp2go-logo.png
200

1
ok
alt: SMTP2GOimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 91681 Bytes






ETag: "cef9bb0b69c121f54a8bad4ab5980a0a-ssl"



img
src
/images/sponsors/small/snipeit-logo.png
200

1
ok
alt: Snipe-ITimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 21235 Bytes






ETag: "ff120b727d3380da73afdc144e84c961-ssl"



img
src
/images/sponsors/small/squarespace-logo.png
200

1
ok
alt: Squarespaceimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7025 Bytes






ETag: "903d6cea5e46f02ea3edc1631e77af34-ssl"



img
src
/images/sponsors/small/tailscale-logo.svg
200

1
ok
alt: Tailscaleimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1510/4427 Bytes






ETag: "4bc49801ef28c8f9753ca8de59309bc9-ssl-df"



img
src
/images/sponsors/small/teleport-logo.png
200

1
ok
alt: Teleportimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4830 Bytes






ETag: "cc67da51f24dfdfd916d74db823746a8-ssl"



img
src
/images/sponsors/small/unraid-logo.png
200

1
ok
alt: Lime Technology (Unraid)image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4510 Bytes






ETag: "61341a1c7f0419d64c577febf68f0bd2-ssl"



img
src
/images/sponsors/small/vultr-logo.png
200

1
ok
alt: Vultrimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6401 Bytes






ETag: "89fe7ec012b5d206dea64f973676fdbd-ssl"



img
src
/images/sponsors/small/wix-logo.png
200

1
ok
alt: Wiximage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5499 Bytes






ETag: "ba884b3a3869d914470e6e1d5aeeead9-ssl"



img
src
/images/sponsors/small/wpbeginner-logo.png
200

1
ok
alt: WPBeginnerimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4856 Bytes






ETag: "44b0c07d54befe358d1f5f60d6218bc3-ssl"



img
src
/images/sponsors/small/zendesk-logo.png
200

1
ok
alt: Zendeskimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8089 Bytes






ETag: "83149c03483cf64985e3a700dddb5153-ssl"



link
alternate
/feed.xml


1
ok















link
stylesheet
/css/le-2025-theme-output.min.4885710fc114d55f3ab281d57a09e66dde790ef3d49f88b4b722d0f2618a128d.css
200

1
ok
text/css; charset=UTF-8
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 7098/47183 Bytes






ETag: "fcdc9175ac7c93103ab7865786385a66-ssl-df"

SRI found. Integrity:
sha256-SIVxD8EU1V86soHVegnmbd55DvPUn4i0tyLQ8mGKEo0=
crossorigin: no crossorigin defined
No SRI Parse error
valid



link
stylesheet
/fontawesome-free-6.5.2-web/css/all.min.css
200

1
ok
text/css; charset=UTF-8
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 21896/103009 Bytes






ETag: "05513efce9d88b8dfb8678fcaf50d95d-ssl-df"

local SRI possible, possible hash-values:

 

sha256-XOqroi11tY4EFQMR9ZYwZWKj5ZXiftSx36RRuC3anlA=
sha384-PPIZEGYM1v8zp5Py7UjFb79S58UeqCL9pYVnVPURKEqvioPROaVAJKKLzvH2rDnI
sha512-SnH5WK+bZxgPHs44uWIX+LLJAJ9/2PkPKZ5QiAj6Ta86w+fsb2TkcmfRyVX3pBnMFcV7oQPJkl9QevSCWr3W6A==

 

<link rel="stylesheet" href="/fontawesome-free-6.5.2-web/css/all.min.css" crossorigin="anonymous" integrity="sha256-XOqroi11tY4EFQMR9ZYwZWKj5ZXiftSx36RRuC3anlA=" />



meta
charset
utf-8


1
ok















meta
og:description
Let's Encrypt is a free, automated, and open Certificate Authority brought to you by the nonprofit Internet Security Research Group (ISRG). Read all about our nonprofit work this year in our 2024 Annual Report.


1
ok















meta
og:image
https://letsencrypt.org/images/LetsEncrypt-SocialShare.png
200

1
ok
image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 21513 Bytes






ETag: "f69a4a7f3bd0dcf77d474f54e605ef24-ssl"



meta
og:title
Let's Encrypt


1
ok















meta
og:type
website


1
ok















meta
og:url
https://letsencrypt.org/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





9593 Bytes






ETag: "db468f242136720fefa0be3d779ae24b-ssl-df"



meta
X-UA-Compatible
IE=edge


1
ok















meta
description
Let's Encrypt is a free, automated, and open Certificate Authority brought to you by the nonprofit Internet Security Research Group (ISRG). Read all about our nonprofit work this year in our 2024 Annual Report.


1
ok















meta
generator
Hugo 0.130.0


1
ok















meta
viewport
width=device-width, initial-scale=1


1
ok















script
src
/js/autoanchor.44783525c73cfeef565e5b8441cd42a848cb630d9f365def73edce4867e6f4c8.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
287 Bytes






ETag: "5125f76809c02eaf0dc74ea8d1c71f68-ssl"

SRI found. Integrity:
sha256-RHg1Jcc8/u9WXluEQc1CqEjLYw2fNl3vc+3OSGfm9Mg=
crossorigin: anonymous
No SRI Parse error
valid



script
src
/js/le-2025-theme.baca0a37d412391799a4e5f6d58968c12b948b4c91c053a3c025ab758ffb70bc.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1618/6942 Bytes






ETag: "1154e5602690c67a0d7a6511ab7ace75-ssl-df"

SRI found. Integrity:
sha256-usoKN9QSOReZpOX21YlowSuUi0yRwFOjwCWrdY/7cLw=
crossorigin: anonymous
No SRI Parse error
valid



script
src
/js/main.a572b61495f9d8fe4e5ec075082ddfe85e5a5ff501c15c499d3f2a4bed71afb6fe89e85f3202aa8fdeebcda97645416bfc75683c2d3471485b5668a6d5f98740.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1394/4576 Bytes






ETag: "0aad23b251916fbe4694d6df71c47a7d-ssl-df"

SRI found. Integrity:
sha512-pXK2FJX52P5OXsB1CC3f6F5aX/UBwVxJnT8qS+1xr7b+iehfMgKqj97rzal2RUFr/HVoPC00cUhbVmim1fmHQA==
crossorigin: no crossorigin defined
No SRI Parse error
valid



script
src
/js/number-animation.6b554e2ec749cfa6946097a152ad3d20af4be05e196028c1b5ce0e7f3133ce51.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
363 Bytes






ETag: "50e35c44ce987abeef85bc407fc909ba-ssl"

SRI found. Integrity:
sha256-a1VOLsdJz6aUYJehUq09IK9L4F4ZYCjBtc4OfzEzzlE=
crossorigin: anonymous
No SRI Parse error
valid



script
src
/js/plotly-min.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 274164/874002 Bytes






ETag: "0b7215e212ace40e70c6d50dd090d94f-ssl-df"

local SRI possible, possible hash-values:

 

sha256-oqZObAIaVKCx7CRhsPnmTQxwNCAerZAtG+tp/4V2Vqw=
sha384-LjcRSi75J+KNeH6DWUY1SHN6l+t8BlUFC0ttR09Aam01fb7DIoP5vAX8xwiymt2p
sha512-TsO7js/++izO+SPbMvVt6ZLwm4dxf2CTvGtf3AQXaXMx3jLOLhrKUidG/LZa9nqD8JKwy45tXE+wpGfCWB8Byg==

 

<script src="/js/plotly-min.js" crossorigin="anonymous" integrity="sha256-oqZObAIaVKCx7CRhsPnmTQxwNCAerZAtG+tp/4V2Vqw=" />



script
src
/js/stats.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 2814/11511 Bytes






ETag: "2e3eab19003d8e28d9ba98481901e528-ssl-df"

local SRI possible, possible hash-values:

 

sha256-snFGPkj6fvjl90G4WSSw720FxhhXUnXQv0rvPEqYxPs=
sha384-F9Gc6iDi8c16isxsjS74o6GJ5ixqNFQlogfj9y8d/3tbi6b4hnL69G+4WwhvNkCP
sha512-xUsIhoV3KImIOHRyWlD4JPwvrsezmB2KSgog+SqvdnZOigYAa6etfz67xa3k5IFXvYuj8fQghVT/H6ENmZrOew==

 

<script src="/js/stats.js" crossorigin="anonymous" integrity="sha256-snFGPkj6fvjl90G4WSSw720FxhhXUnXQv0rvPEqYxPs=" />


2a05:d014:58f:6200::65
a

#main-content


1
ok















a

/


2
ok















a

/2023/07/10/cross-sign-expiration/


1
ok















a

/2025/06/11/reflections-on-a-year-of-sunlight/


1
ok















a

/2025/06/26/expiration-notification-service-has-ended/


1
ok















a

/2025/07/01/issuing-our-first-ip-address-certificate/


1
ok















a

/about/


1
ok















a

/blog


1
ok














 

12. Html-Parsing via https://validator.w3.org/nu/

Url used (first standard-https-result with http status 200): https://letsencrypt.org/

Summary

Good: No non-document-errors
11 errors
0 warnings

TypeMessagenum found
1.errorAn img element must have an alt attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.4
2.errorElement div not allowed as child of element button in this context. (Suppressing further errors from this subtree.)4
3.errorThe text content of element time was not in the required format: The literal did not satisfy the time-datetime format.3

Details


TypeMessage + Sample
1errorThe text content of element time was not in the required format: The literal did not satisfy the time-datetime format.

From line 683, column 51 to line 683, column 57

ly 1, 2025</time> <h3
2errorThe text content of element time was not in the required format: The literal did not satisfy the time-datetime format.

From line 702, column 52 to line 702, column 58

e 26, 2025</time> <h3
3errorThe text content of element time was not in the required format: The literal did not satisfy the time-datetime format.

From line 721, column 52 to line 721, column 58

e 11, 2025</time> <h3
4errorAn img element must have an alt attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.

From line 1874, column 5 to line 1874, column 87

ion"> <img src="/images/le-logo-lockonly.svg" class="w-5 h-5 transform -translate-y-0.5"> <
5errorElement div not allowed as child of element button in this context. (Suppressing further errors from this subtree.)

From line 1876, column 5 to line 1876, column 43

span> <div class="ml-auto flex items-center">
6errorAn img element must have an alt attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.

From line 1898, column 5 to line 1898, column 87

ion"> <img src="/images/le-logo-lockonly.svg" class="w-5 h-5 transform -translate-y-0.5"> <
7errorElement div not allowed as child of element button in this context. (Suppressing further errors from this subtree.)

From line 1900, column 5 to line 1900, column 43

span> <div class="ml-auto flex items-center">
8errorAn img element must have an alt attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.

From line 1922, column 5 to line 1922, column 87

ion"> <img src="/images/le-logo-lockonly.svg" class="w-5 h-5 transform -translate-y-0.5"> <
9errorElement div not allowed as child of element button in this context. (Suppressing further errors from this subtree.)

From line 1924, column 5 to line 1924, column 43

span> <div class="ml-auto flex items-center">
10errorAn img element must have an alt attribute, except under certain conditions. For details, consult guidance on providing text alternatives for images.

From line 1946, column 5 to line 1946, column 87

ion"> <img src="/images/le-logo-lockonly.svg" class="w-5 h-5 transform -translate-y-0.5"> <
11errorElement div not allowed as child of element button in this context. (Suppressing further errors from this subtree.)

From line 1948, column 5 to line 1948, column 43

span> <div class="ml-auto flex items-center">

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: owen.ns.cloudflare.com, vera.ns.cloudflare.com

 

QNr.DomainTypeNS used
1
com
NS
h.root-servers.net (2001:500:1::53)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
owen.ns.cloudflare.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com

Answer: ns3.cloudflare.com
162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2

Answer: ns4.cloudflare.com
162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837

Answer: ns5.cloudflare.com
162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937

Answer: ns6.cloudflare.com
162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506

Answer: ns7.cloudflare.com
162.159.4.8, 162.159.6.6, 2400:cb00:2049:1::a29f:408, 2400:cb00:2049:1::a29f:606
3
vera.ns.cloudflare.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com

Answer: ns3.cloudflare.com
162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2

Answer: ns4.cloudflare.com
162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837

Answer: ns5.cloudflare.com
162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937

Answer: ns6.cloudflare.com
162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506

Answer: ns7.cloudflare.com
162.159.4.8, 162.159.6.6, 2400:cb00:2049:1::a29f:408, 2400:cb00:2049:1::a29f:606
4
owen.ns.cloudflare.com: 108.162.193.219, 172.64.33.219, 173.245.59.219
A
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
5
owen.ns.cloudflare.com: 2606:4700:58::adf5:3bdb, 2803:f800:50::6ca2:c1db, 2a06:98c1:50::ac40:21db
AAAA
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
6
vera.ns.cloudflare.com: 108.162.192.147, 172.64.32.147, 173.245.58.147
A
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
7
vera.ns.cloudflare.com: 2606:4700:50::adf5:3a93, 2803:f800:50::6ca2:c093, 2a06:98c1:50::ac40:2093
AAAA
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
letsencrypt.netlify.com
0

no CAA entry found
1
0
www.letsencrypt.org



1
0
letsencrypt.org
0

no CAA entry found
1
0
netlify.com
32773
issue
amazon.com
1
0

32773
issue
digicert.com;account=2d83e9ac9b6776c3f215150f6ebceea8cefe3bc2e1fb5efffb1d71e200575226
1
0

32773
iodef
mailto:security@netlify.com
1
0
org
0

no CAA entry found
1
0
com
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
letsencrypt.org
pardot1011011=d160caff32c4415bb46bb82d8c50e5bea7ea1a74f5a149cb96bd952467266044
ok
1
0
letsencrypt.org
sending_domain1011011=f98c68e7636a708a1987c7b9da300d64a354041fa41ea2039fbb02bc18c4ed0f
ok
1
0
letsencrypt.org
v=spf1 ip4:209.61.151.249 ip6:2800:3f0:4000::/36 ip4:172.217.192.0/19 ip4:13.111.0.0/16 ip4:136.147.182.0/24 ip4:103.151.192.0/23 ip4:185.12.80.0/22 ip4:74.125.0.0/16 ip4:172.217.128.0/19 ip4:172.253.112.0/20 ip4:64.78.149.164 ip4:136.147.135.0/24 ip4:198 .244.59.35 ip6:2c0f:fb50:4000::/36 ip4:188.172.128.0/20 ip4:216.198.0.0/18 ip4:185.250.239.168 ip4:172.253.56.0/21 ip4:23.178.112.0/24 ip4:72.14.192.0/18 ip4:209.85.128.0/17 ip4:216.58.192.0/19 ip6:2001:4860:4000::/36 ip6:2607:f8b0:4000::/36 ip4:172.217.3 2.0/20 ip4:66.133.109.36 ip4:136.147.176.0/24 ip4:209.61.151.236 ip4:69.72.40.94/31 ip4:173.194.0.0/16 ip4:199.122.123.0/24 ip4:198.244.59.30 ip4:198.61.254.21 ip4:66.102.0.0/21 ip4:108.177.8.0/21 ip4:172.217.0.0/19 ip4:172.217.160.0/20 ip4:108.177.96.0/1 9 ip4:198.245.81.0/24 ip4:209.61.151.251 ip4:216.239.32.0/19 ip4:192.161.144.0/20 ip4:69.72.40.93 ip4:69.72.40.96/30 ip4:66.249.80.0/20 ip6:2404:6800:4000::/36 ip6:2a00:1450:4000::/36 ip4:185.250.239.148 ip4:185.250.239.190 ip4:198.244.59.33 ip4:69.72.47.
ok
1
0
www.letsencrypt.org


1
0
letsencrypt.netlify.com

ok
1
0
_acme-challenge.letsencrypt.org

Name Error - The domain name does not exist
1
0
_acme-challenge.www.letsencrypt.org

Name Error - The domain name does not exist
1
0
_acme-challenge.letsencrypt.netlify.com

missing entry or wrong length
1
0
_acme-challenge.letsencrypt.org.letsencrypt.org

Name Error - The domain name does not exist
1
0
_acme-challenge.www.letsencrypt.org.letsencrypt.org

Name Error - The domain name does not exist
1
0
_acme-challenge.www.letsencrypt.org.www.letsencrypt.org

Name Error - The domain name does not exist
1
0
_acme-challenge.letsencrypt.netlify.com.letsencrypt.netlify.com

perhaps wrong
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

letsencrypt.org
1
aspmx.l.google.com
05ok

A


142.251.5.26
01ok

AAAA


2a00:1450:400c:c06::1b
01ok

CNAME


00ok
MX

letsencrypt.org
5
alt1.aspmx.l.google.com
05ok

A


192.178.156.27
01ok

AAAA


2a00:1450:4013:c1c::1b
01ok

CNAME


00ok
MX

letsencrypt.org
5
alt2.aspmx.l.google.com
05ok

A


142.250.147.27
01ok

AAAA


2a00:1450:4025:c01::1a
01ok

CNAME


00ok
MX

letsencrypt.org
10
aspmx2.googlemail.com
05ok

A


192.178.156.27
01ok

AAAA


2a00:1450:4013:c1c::1a
01ok

CNAME


00ok
MX

letsencrypt.org
10
aspmx3.googlemail.com
05ok

A


142.250.147.26
01ok

AAAA


2a00:1450:4025:c01::1a
01ok

CNAME


00ok
SPF
TXT
letsencrypt.org

v=spf1 ip4:209.61.151.249 ip6:2800:3f0:4000::/36 ip4:172.217.192.0/19 ip4:13.111.0.0/16 ip4:136.147.182.0/24 ip4:103.151.192.0/23 ip4:185.12.80.0/22 ip4:74.125.0.0/16 ip4:172.217.128.0/19 ip4:172.253.112.0/20 ip4:64.78.149.164 ip4:136.147.135.0/24 ip4:198.244.59.35 ip6:2c0f:fb50:4000::/36 ip4:188.172.128.0/20 ip4:216.198.0.0/18 ip4:185.250.239.168 ip4:172.253.56.0/21 ip4:23.178.112.0/24 ip4:72.14.192.0/18 ip4:209.85.128.0/17 ip4:216.58.192.0/19 ip6:2001:4860:4000::/36 ip6:2607:f8b0:4000::/36 ip4:172.217.32.0/20 ip4:66.133.109.36 ip4:136.147.176.0/24 ip4:209.61.151.236 ip4:69.72.40.94/31 ip4:173.194.0.0/16 ip4:199.122.123.0/24 ip4:198.244.59.30 ip4:198.61.254.21 ip4:66.102.0.0/21 ip4:108.177.8.0/21 ip4:172.217.0.0/19 ip4:172.217.160.0/20 ip4:108.177.96.0/19 ip4:198.245.81.0/24 ip4:209.61.151.251 ip4:216.239.32.0/19 ip4:192.161.144.0/20 ip4:69.72.40.93 ip4:69.72.40.96/30 ip4:66.249.80.0/20 ip6:2404:6800:4000::/36 ip6:2a00:1450:4000::/36 ip4:185.250.239.148 ip4:185.250.239.190 ip4:198.244.59.33 ip4:69.72.47.205 include:_spf.intacct.com -all
ok

TXT
_spf.intacct.com

v=spf1 ip4:4.7.16.128/26 ip4:38.108.186.0/24 ip4:199.87.209.0/24 ip4:4.53.200.128/26 ip4:52.62.199.66 ip4:52.63.210.175 ip4:52.19.0.156 ip4:34.242.34.203 ip4:15.157.154.20 ip4:3.97.56.230 ip4:18.233.211.170 ip4:18.210.219.222 ip4:16.50.78.62 ip4:16.51.180.22 ip4:18.196.254.50 ip4:3.75.50.121 ip4:40.176.107.168 ip4:40.176.215.184 ip4:20.109.99.74 ip4:20.97.237.150 ip4:20.122.187.209 ip4:20.10.6.183 ip4:20.1.175.150 ip4:104.209.145.54 ip4:18.198.129.203 ip4:52.52.134.28 ip4:18.222.100.37 ip4:18.220.6.173 ip4:13.89.129.61 ip4:40.86.47.187 ip4:34.211.36.37 ip4:34.209.22.161 ip4:18.219.211.170 ip4:52.179.183.89 ip4:13.88.170.98 ip4:20.192.29.133 ip4:44.240.143.150 ip4:52.52.30.41 ip4:54.203.18.106 ip4:20.65.115.153 ip4:52.165.249.35 ip4:20.242.106.212 ip4:52.252.111.27 ip4:52.214.168.26 ip4:172.203.43.191 ip4:18.189.12.235 ?all
ok
_dmarc
TXT
_dmarc.letsencrypt.org

v=DMARC1; p=reject; rua=mailto:re+2ea7a1650465@inbound.dmarcdigests.com; fo=1
ok

TXT
letsencrypt.org._report._dmarc.inbound.dmarcdigests.com

mailto:re+2ea7a1650465@inbound.dmarcdigests.com
okMail domain unequal current domain. Check required, if there is a confirming _report._dmarc-Record. See RFC 7489, 7.1.

TXT
letsencrypt.org._report._dmarc.inbound.dmarcdigests.com

v=DMARC1;
okConfirmed. Sending reports to external domain is allowed.

 

 

17. Cipher Suites




Skipped, CDN used or too many ip addresses

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=1dc4ba32-c1c1-4abe-99e5-ae89ee80789a

 

Last Result: https://check-your-website.server-daten.de/?q=letsencrypt.org - 2025-07-02 10:52:30

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=letsencrypt.org" target="_blank">Check this Site: letsencrypt.org</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=letsencrypt.org