Check DNS, Urls + Redirects, Certificates and Content of your Website


 

 

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
letsencrypt.org
A
3.124.100.143
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
Hostname: ec2-3-124-100-143.eu-central-1.compute.amazonaws.com
yes
1
0

A
3.125.36.175
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
Hostname: ec2-3-125-36-175.eu-central-1.compute.amazonaws.com
yes
1
0

AAAA
2a05:d014:58f:6200::65
Frankfurt am Main/Hesse/Germany (DE) - Amazon.com, Inc.

yes



AAAA
2a05:d014:58f:6201::65
Frankfurt am Main/Hesse/Germany (DE) - Amazon.com, Inc.

yes


www.letsencrypt.org
CNAME
letsencrypt.netlify.com
yes
1
0

A
3.75.10.80
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
Hostname: ec2-3-75-10-80.eu-central-1.compute.amazonaws.com
yes



A
3.125.36.175
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
Hostname: ec2-3-125-36-175.eu-central-1.compute.amazonaws.com
yes



AAAA
2a05:d014:58f:6200::65
Frankfurt am Main/Hesse/Germany (DE) - Amazon.com, Inc.

yes



AAAA
2a05:d014:58f:6201::65
Frankfurt am Main/Hesse/Germany (DE) - Amazon.com, Inc.

yes


*.letsencrypt.org
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 26470, Flags 256






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.02.2025, 00:00:00 +, Signature-Inception: 31.01.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: org

org
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=






1 RRSIG RR to validate DS RR found






RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 17.02.2025, 05:00:00 +, Signature-Inception: 04.02.2025, 04:00:00 +, KeyTag 26470, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26470 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 11409, Flags 256






Public Key with Algorithm 8, KeyTag 26974, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 55899, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 22.02.2025, 15:32:31 +, Signature-Inception: 01.02.2025, 14:32:31 +, KeyTag 26974, Signer-Name: org






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26974 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest "T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: letsencrypt.org

letsencrypt.org
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "p6tft5m0irqlsejks5jp7dvv7n6p6fji" between the hashed NSEC3-owner "p6tf1pkmp2952dasn90et9gnvrg5fvhi" and the hashed NextOwner "p6thccaej4k2p672k4cp0lg7fa25nn1n". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner p6tf1pkmp2952dasn90et9gnvrg5fvhi.org., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 22.02.2025, 15:32:31 +, Signature-Inception: 01.02.2025, 14:32:31 +, KeyTag 55899, Signer-Name: org






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "gdtpongmpok61u9lvnipqor8lra9l4t0" as Owner. That's the Hash of "org" with the NextHashedOwnerName "gdtrea8kmj2rneqen4m2ogj26kfsukj7". So that domain name is the Closest Encloser of "letsencrypt.org". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner gdtpongmpok61u9lvnipqor8lra9l4t0.org., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 25.02.2025, 08:08:27 +, Signature-Inception: 04.02.2025, 07:08:27 +, KeyTag 55899, Signer-Name: org






0 DNSKEY RR found









Zone: www.letsencrypt.org

www.letsencrypt.org
0 DS RR in the parent zone found



Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 26470, Flags 256






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.02.2025, 00:00:00 +, Signature-Inception: 31.01.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: com

com
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=






1 RRSIG RR to validate DS RR found






RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 17.02.2025, 05:00:00 +, Signature-Inception: 04.02.2025, 04:00:00 +, KeyTag 26470, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26470 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 23202, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 16.02.2025, 15:02:35 +, Signature-Inception: 01.02.2025, 14:57:35 +, KeyTag 19718, Signer-Name: com






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest "isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: netlify.com

netlify.com
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "la5aphutgpjaph4c4q4ju0hq8scb5a3l" between the hashed NSEC3-owner "la5aj6k9ahgp403r95il9g2ob2gem09m" and the hashed NextOwner "la5aq77lhm8o7e6262pcvlej5t8t4547". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner la5aj6k9ahgp403r95il9g2ob2gem09m.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 10.02.2025, 02:16:10 +, Signature-Inception: 03.02.2025, 01:06:10 +, KeyTag 23202, Signer-Name: com






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q3udg8cekkae7rukpgct1dvssh8ll". So that domain name is the Closest Encloser of "netlify.com". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 08.02.2025, 00:26:34 +, Signature-Inception: 31.01.2025, 23:16:34 +, KeyTag 23202, Signer-Name: com






0 DNSKEY RR found









Zone: letsencrypt.netlify.com

letsencrypt.netlify.com
0 DS RR in the parent zone found






0 DNSKEY RR found







 

3. Name Servers

DomainNameserverNS-IP
letsencrypt.org
  owen.ns.cloudflare.com / 67m48
108.162.193.219
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
172.64.33.219
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
173.245.59.219
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
2606:4700:58::adf5:3bdb
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.


 
2803:f800:50::6ca2:c1db
San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.


 
2a06:98c1:50::ac40:21db
London/England/United Kingdom (GB) - Cloudflare, Inc.


  vera.ns.cloudflare.com / 67m97
108.162.192.147
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
172.64.32.147
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
173.245.58.147
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
2606:4700:50::adf5:3a93
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.


 
2803:f800:50::6ca2:c093
San José/Provincia de San José/Costa Rica (CR) - Cloudflare, Inc.


 
2a06:98c1:50::ac40:2093
London/England/United Kingdom (GB) - Cloudflare, Inc.

org
  a0.org.afilias-nst.info / app13.ams2.hosts.meta.redstone.afilias-nst.info-1615580861


  a2.org.afilias-nst.info / FRA3


  b0.org.afilias-nst.org / app14.ams2.hosts.meta.redstone.afilias-nst.info-1615580861


  b2.org.afilias-nst.org / FRA5


  c0.org.afilias-nst.info / app30.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861


  d0.org.afilias-nst.org / app5.ams2.hosts.meta.redstone.afilias-nst.info-1615580861


letsencrypt.netlify.com
  dns1.p04.nsone.net / ns1dns-fra03-910-5310-0
198.51.44.4
Toronto/Ohio/United States (US) - NSONE Inc


 
2620:4d:4000:6259:7:4:0:1
New York/United States (US) - NSONE Inc

netlify.com
  dns1.p04.nsone.net / ns1dns-fra03-912-5302-0
198.51.44.4
Toronto/Ohio/United States (US) - NSONE Inc


 
2620:4d:4000:6259:7:4:0:1
New York/United States (US) - NSONE Inc


  dns2.p04.nsone.net / ns1dns-fra03-387-5315-0
198.51.45.4
Kimball/Nebraska/United States (US) - NSONE Inc


 
2a00:edc0:6259:7:4::2
Amsterdam/North Holland/The Netherlands (NL) - NS1


  dns3.p04.nsone.net / ns1dns-fra03-386-5314-0
198.51.44.68
Toronto/Ohio/United States (US) - NSONE Inc


 
2620:4d:4000:6259:7:4:0:3
New York/United States (US) - NSONE Inc


  dns4.p04.nsone.net / ns1dns-fra03-341-5300-0
198.51.45.68
Kimball/Nebraska/United States (US) - NSONE Inc


 
2a00:edc0:6259:7:4::4
Amsterdam/North Holland/The Netherlands (NL) - NS1


  ns01.netlifydns.com / ns1dns-iad99-37975752-3085-740f-e6d9-7d091561079c-5301-42
45.54.30.1
Ashburn/Virginia/United States (US) - NetActuate, Inc


 
2607:f740:e630::1
Ashburn/Virginia/United States (US) - NetActuate, Inc


  ns02.netlifydns.com / ns1dns-ams99-0231310d-8af4-187e-e2b6-2894c7ab82a8-5305-42
45.54.30.65
Ashburn/Virginia/United States (US) - NetActuate, Inc


 
2607:f740:e630:4::1
Ashburn/Virginia/United States (US) - NetActuate, Inc


  ns03.netlifydns.com / ns1dns-iad99-37975752-3085-740f-e6d9-7d091561079c-5304-42
45.54.30.129
Ashburn/Virginia/United States (US) - NetActuate, Inc


 
2607:f740:e630:8::1
Ashburn/Virginia/United States (US) - NetActuate, Inc


  ns04.netlifydns.com / ns1dns-ams99-0231310d-8af4-187e-e2b6-2894c7ab82a8-5305-42
45.54.30.193
Ashburn/Virginia/United States (US) - NetActuate, Inc


 
2607:f740:e630:c::1
Ashburn/Virginia/United States (US) - NetActuate, Inc

com
  a.gtld-servers.net / nnn1-defra-5


  b.gtld-servers.net / nnn1-ellux2


  c.gtld-servers.net / nnn1-defra-5


  d.gtld-servers.net / nnn1-defra-5


  e.gtld-servers.net / nnn1-defra-5


  f.gtld-servers.net / nnn1-defra-4


  g.gtld-servers.net / nnn1-defra-4


  h.gtld-servers.net / nnn1-defra-4


  i.gtld-servers.net / nnn1-defra-4


  j.gtld-servers.net / nnn1-frmrs-2


  k.gtld-servers.net / nnn1-frmrs-2


  l.gtld-servers.net / nnn1-frmrs-2


  m.gtld-servers.net / nnn1-ein3

 

4. SOA-Entries


Domain:org
Zone-Name:org
Primary:a0.org.afilias-nst.info
Mail:hostmaster.donuts.email
Serial:1738656150
Refresh:7200
Retry:900
Expire:1209600
TTL:3600
num Entries:6


Domain:letsencrypt.org
Zone-Name:letsencrypt.org
Primary:owen.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2363680586
Refresh:10000
Retry:2400
Expire:604800
TTL:1800
num Entries:12



Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1738656598
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:9


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1738656618
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:4


Domain:netlify.com
Zone-Name:netlify.com
Primary:dns1.p04.nsone.net
Mail:hostmaster.nsone.net
Serial:1664458603
Refresh:43200
Retry:7200
Expire:1209600
TTL:300
num Entries:16


Domain:letsencrypt.netlify.com
Zone-Name:netlify.com
Primary:dns1.p04.nsone.net
Mail:hostmaster.nsone.net
Serial:1664458603
Refresh:43200
Retry:7200
Expire:1209600
TTL:300
num Entries:2


5. Screenshots

Startaddress: https://letsencrypt.org/, address used: https://letsencrypt.org/, Screenshot created 2025-02-04 09:18:31 +00:0

 

Mobil (412px x 732px)

 

1129 milliseconds

 

Screenshot mobile - https://letsencrypt.org/
Mobil + Landscape (732px x 412px)

 

1137 milliseconds

 

Screenshot mobile landscape - https://letsencrypt.org/
Screen (1280px x 1680px)

 

1319 milliseconds

 

Screenshot Desktop - https://letsencrypt.org/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport396732
content Size3964740

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://letsencrypt.org/
3.124.100.143
301
https://letsencrypt.org/
Html is minified: 100.00 %
0.030
A
Date: Tue, 04 Feb 2025 08:12:41 GMT
Location: https://letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JK809H7NGFZTXRB31PC1RA9Z
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• http://letsencrypt.org/
3.125.36.175
301
https://letsencrypt.org/
Html is minified: 100.00 %
0.033
A
Date: Tue, 04 Feb 2025 08:12:41 GMT
Location: https://letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JK809H9468BEATK20QGAWRTM
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• http://letsencrypt.org/
2a05:d014:58f:6200::65
301
https://letsencrypt.org/
Html is minified: 100.00 %
0.046
A
Date: Tue, 04 Feb 2025 08:12:41 GMT
Location: https://letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JK809HARGZGDANSGN37YTQYS
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• http://letsencrypt.org/
2a05:d014:58f:6201::65
301
https://letsencrypt.org/
Html is minified: 100.00 %
0.050
A
Date: Tue, 04 Feb 2025 08:12:41 GMT
Location: https://letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JK809HCMPZZVSSW6S3ZAJ322
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• http://www.letsencrypt.org/
3.75.10.80
301
https://www.letsencrypt.org/
Html is minified: 100.00 %
0.033
A
Date: Tue, 04 Feb 2025 08:12:41 GMT
Location: https://www.letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JK809HFN2GZETH14FFPCSNWE
Content-Type: text/plain; charset=utf-8
Content-Length: 43

• http://www.letsencrypt.org/
3.125.36.175
301
https://www.letsencrypt.org/
Html is minified: 100.00 %
0.030
A
Date: Tue, 04 Feb 2025 08:12:41 GMT
Location: https://www.letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JK809HEB2H9VGS8RD1TYVPJ5
Content-Type: text/plain; charset=utf-8
Content-Length: 43

• http://www.letsencrypt.org/
2a05:d014:58f:6200::65
301
https://www.letsencrypt.org/
Html is minified: 100.00 %
0.033
A
Date: Tue, 04 Feb 2025 08:12:41 GMT
Location: https://www.letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JK809HGHBJP97XBZJ1PZRNWW
Content-Type: text/plain; charset=utf-8
Content-Length: 43

• http://www.letsencrypt.org/
2a05:d014:58f:6201::65
301
https://www.letsencrypt.org/
Html is minified: 100.00 %
0.030
A
Date: Tue, 04 Feb 2025 08:12:41 GMT
Location: https://www.letsencrypt.org/
Server: Netlify
X-Nf-Request-Id: 01JK809HHNVK8DPXNFKHQA2G3P
Content-Type: text/plain; charset=utf-8
Content-Length: 43

• https://www.letsencrypt.org/
3.75.10.80
301
https://letsencrypt.org/
Html is minified: 100.00 %
2.187
A
Date: Tue, 04 Feb 2025 08:13:00 GMT
Location: https://letsencrypt.org/
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01JK80A4ER05RXH06ZZABRJWS3
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• https://www.letsencrypt.org/
3.125.36.175
301
https://letsencrypt.org/
Html is minified: 100.00 %
2.093
A
Date: Tue, 04 Feb 2025 08:12:57 GMT
Location: https://letsencrypt.org/
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01JK80A0ZSZ0183YSRGJWDVZE4
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• https://www.letsencrypt.org/
2a05:d014:58f:6200::65
301
https://letsencrypt.org/
Html is minified: 100.00 %
2.000
A
Date: Tue, 04 Feb 2025 08:13:04 GMT
Location: https://letsencrypt.org/
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01JK80A7YG4HVKHQJDP5H1VY7S
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• https://www.letsencrypt.org/
2a05:d014:58f:6201::65
301
https://letsencrypt.org/
Html is minified: 100.00 %
2.030
A
Date: Tue, 04 Feb 2025 08:13:07 GMT
Location: https://letsencrypt.org/
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01JK80AB9K9WGX1NBKCSR5M1NC
Content-Type: text/plain; charset=utf-8
Content-Length: 39

• https://letsencrypt.org/
3.124.100.143 br used - 5720 / 54435 - 89.49 %
Inline-JavaScript (∑/total): 2/577 Inline-CSS (∑/total): 0/0
200

Html is minified: 213.68 %
Other inline scripts (∑/total): 0/0
2.220
I
Accept-Ranges: bytes
Age: 80141
Cache-Control: public, must-revalidate, max-age=0
Cache-Status: "Netlify Edge"; hit
Content-Security-Policy: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
Date: Tue, 04 Feb 2025 08:12:41 GMT
ETag: "0098686c2f97f26b1a89102f9b789315-ssl-df"
Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
Referrer-Policy: no-referrer
Server: Netlify
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Nf-Request-Id: 01JK809HTBF4EZTAZDR726X8WY
X-XSS-Protection: 1; mode=block
Content-Encoding: br
Content-Length: 5720
Content-Type: text/html; charset=UTF-8

• https://letsencrypt.org/
3.125.36.175 br used - 5720 / 54435 - 89.49 %
Inline-JavaScript (∑/total): 2/577 Inline-CSS (∑/total): 0/0
200

Html is minified: 213.68 %
Other inline scripts (∑/total): 0/0
2.250
I
Accept-Ranges: bytes
Age: 41075
Cache-Control: public, must-revalidate, max-age=0
Cache-Status: "Netlify Edge"; hit
Content-Security-Policy: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
Date: Tue, 04 Feb 2025 08:12:45 GMT
ETag: "0098686c2f97f26b1a89102f9b789315-ssl-df"
Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
Referrer-Policy: no-referrer
Server: Netlify
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Nf-Request-Id: 01JK809NGNG6A7T4P6M6KVTPM5
X-XSS-Protection: 1; mode=block
Content-Encoding: br
Content-Length: 5720
Content-Type: text/html; charset=UTF-8

• https://letsencrypt.org/
2a05:d014:58f:6200::65 br used - 5720 / 54435 - 89.49 %
Inline-JavaScript (∑/total): 2/577 Inline-CSS (∑/total): 0/0
200

Html is minified: 213.68 %
Other inline scripts (∑/total): 0/0
2.157
I
Accept-Ranges: bytes
Age: 54743
Cache-Control: public, must-revalidate, max-age=0
Cache-Status: "Netlify Edge"; hit
Content-Security-Policy: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
Date: Tue, 04 Feb 2025 08:12:49 GMT
ETag: "0098686c2f97f26b1a89102f9b789315-ssl-df"
Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
Referrer-Policy: no-referrer
Server: Netlify
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Nf-Request-Id: 01JK809S8A5GR7GHD3T9722KFV
X-XSS-Protection: 1; mode=block
Content-Encoding: br
Content-Length: 5720
Content-Type: text/html; charset=UTF-8

• https://letsencrypt.org/
2a05:d014:58f:6201::65 br used - 5766 / 54435 - 89.41 %
Inline-JavaScript (∑/total): 2/577 Inline-CSS (∑/total): 0/0
200

Html is minified: 213.68 %
Other inline scripts (∑/total): 0/0
2.250
I
Accept-Ranges: bytes
Age: 43465
Cache-Control: public, must-revalidate, max-age=0
Cache-Status: "Netlify Edge"; hit
Content-Security-Policy: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
Date: Tue, 04 Feb 2025 08:12:52 GMT
ETag: "0098686c2f97f26b1a89102f9b789315-ssl-df"
Permissions-Policy: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
Referrer-Policy: no-referrer
Server: Netlify
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Nf-Request-Id: 01JK809WSPZ2HANY2ZHJHGYJ9K
X-XSS-Protection: 1; mode=block
Content-Encoding: br
Content-Length: 5766
Content-Type: text/html; charset=UTF-8

• http://letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.124.100.143
404


0.156
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Tue, 04 Feb 2025 08:13:11 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AEM3666NAM59ZWC679Z3
Content-Length: 0

• http://letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.125.36.175
404


0.144
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Tue, 04 Feb 2025 08:13:11 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AES8D2XNGBPM5J9R6A5Q
Content-Length: 0

• http://letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a05:d014:58f:6200::65
404


0.170
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Tue, 04 Feb 2025 08:13:11 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AEZ84K1H3S6AAY2DSTQB
Content-Length: 0

• http://letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a05:d014:58f:6201::65
404


0.157
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Tue, 04 Feb 2025 08:13:11 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AF5G7V9JJCMS84Z3B83R
Content-Length: 0

• http://www.letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.75.10.80
404


0.144
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Tue, 04 Feb 2025 08:13:12 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AFH0QHNZHEHK66VEV777
Content-Length: 0

• http://www.letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.125.36.175
404


0.140
A
Not Found
Visible Content:
Age: 2
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Tue, 04 Feb 2025 08:13:12 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AFB7FRJ07E3SEZH1ABCH
Content-Length: 0

• http://www.letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a05:d014:58f:6200::65
404


0.140
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Tue, 04 Feb 2025 08:13:12 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AFPCB0QPH4D6R8FSREPZ
Content-Length: 0

• http://www.letsencrypt.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a05:d014:58f:6201::65
404


0.157
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Cache-Status: "Netlify Edge"; fwd=miss
Date: Tue, 04 Feb 2025 08:13:12 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AFVKD9SRBVTPB9M6WZHV
Content-Length: 0

• https://3.75.10.80/
3.75.10.80
404


2.173
N
Not Found
Certificate error: RemoteCertificateNameMismatch
Date: Tue, 04 Feb 2025 08:13:28 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AZ62F6AVEZ1NRTSV4P1J
Content-Length: 0

• https://3.125.36.175/
3.125.36.175
404


2.187
N
Not Found
Certificate error: RemoteCertificateNameMismatch
Date: Tue, 04 Feb 2025 08:13:17 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AMJPF8VXK4W6DAMCFYB9
Content-Length: 0

• https://3.124.100.143/
3.124.100.143
404


2.797
N
Not Found
Certificate error: RemoteCertificateNameMismatch
Date: Tue, 04 Feb 2025 08:13:13 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AGF3H4RKCMRCF1TCM63Y
Content-Length: 0

• https://[2a05:d014:058f:6200:0000:0000:0000:0065]/
2a05:d014:58f:6200::65
404


2.046
N
Not Found
Certificate error: RemoteCertificateNameMismatch
Date: Tue, 04 Feb 2025 08:13:20 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AR3HXWG0KQY4SK4BS1QZ
Content-Length: 0

• https://[2a05:d014:058f:6201:0000:0000:0000:0065]/
2a05:d014:58f:6201::65
404


2.000
N
Not Found
Certificate error: RemoteCertificateNameMismatch
Date: Tue, 04 Feb 2025 08:13:24 GMT
Server: Netlify
X-Nf-Request-Id: 01JK80AVMF75QDYFABFXFEFESE
Content-Length: 0

 

7. Comments


1. General Results, most used to calculate the result

Aname "letsencrypt.org" is domain, public suffix is ".org", top-level-domain is ".org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)", num .org-domains preloaded: 9857 (complete: 263653)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: letsencrypt.org has 4 different ip addresses (authoritative).
AGood: Minimal 2 ip addresses per domain name found: www.letsencrypt.org has 4 different ip addresses (authoritative).
AGood: Ipv4 and Ipv6 addresses per domain name found: letsencrypt.org has 2 ipv4, 2 ipv6 addresses
AGood: Ipv4 and Ipv6 addresses per domain name found: www.letsencrypt.org has 2 ipv4, 2 ipv6 addresses
AGood: No asked Authoritative Name Server had a timeout
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: non-www is preferred
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
Ahttp://letsencrypt.org/ 3.124.100.143
301
https://letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://letsencrypt.org/ 3.125.36.175
301
https://letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://letsencrypt.org/ 2a05:d014:58f:6200::65
301
https://letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://letsencrypt.org/ 2a05:d014:58f:6201::65
301
https://letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://www.letsencrypt.org/ 3.75.10.80
301
https://www.letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://www.letsencrypt.org/ 3.125.36.175
301
https://www.letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://www.letsencrypt.org/ 2a05:d014:58f:6200::65
301
https://www.letsencrypt.org/
Correct redirect http - https with the same domain name
Ahttp://www.letsencrypt.org/ 2a05:d014:58f:6201::65
301
https://www.letsencrypt.org/
Correct redirect http - https with the same domain name
Ihttps://letsencrypt.org/ 3.124.100.143
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://letsencrypt.org/ 3.125.36.175
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://letsencrypt.org/ 2a05:d014:58f:6200::65
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://letsencrypt.org/ 2a05:d014:58f:6201::65
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Mhttps://3.124.100.143/ 3.124.100.143
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://3.125.36.175/ 3.125.36.175
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://[2a05:d014:058f:6200:0000:0000:0000:0065]/ 2a05:d014:58f:6200::65
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://[2a05:d014:058f:6201:0000:0000:0000:0065]/ 2a05:d014:58f:6201::65
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://3.75.10.80/ 3.75.10.80
404

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://3.124.100.143/ 3.124.100.143
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://3.125.36.175/ 3.125.36.175
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://[2a05:d014:058f:6200:0000:0000:0000:0065]/ 2a05:d014:58f:6200::65
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://[2a05:d014:058f:6201:0000:0000:0000:0065]/ 2a05:d014:58f:6201::65
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://3.75.10.80/ 3.75.10.80
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
XFatal error: Nameserver doesn't support TCP connection: c0.org.afilias-nst.info: Timeout
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain letsencrypt.org, 4 ip addresses.
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain www.letsencrypt.org, 4 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain letsencrypt.org, 4 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain www.letsencrypt.org, 4 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.letsencrypt.org

2. Header-Checks

Aletsencrypt.org 3.124.100.143
Content-Security-Policy
Ok: Header without syntax errors found: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
A

Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A

Good: default-src without 'unsafe-inline' or 'unsave-eval'.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A

Good: No object-src found, but the default-src used as fallback is defined and restricted.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
F

Critical: script-src with * or a scheme found. Never allow wildcard - sources.
F

Dangerous: script-src with data: schema found. The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A

Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: no-referrer
A
Permissions-Policy
Ok: Header without syntax errors found: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
A
X-Frame-Options
Ok: Header without syntax errors found: DENY
B

Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Aletsencrypt.org 3.125.36.175
Content-Security-Policy
Ok: Header without syntax errors found: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
A

Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A

Good: default-src without 'unsafe-inline' or 'unsave-eval'.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A

Good: No object-src found, but the default-src used as fallback is defined and restricted.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
F

Critical: script-src with * or a scheme found. Never allow wildcard - sources.
F

Dangerous: script-src with data: schema found. The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A

Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: no-referrer
A
Permissions-Policy
Ok: Header without syntax errors found: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
A
X-Frame-Options
Ok: Header without syntax errors found: DENY
B

Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Aletsencrypt.org 2a05:d014:58f:6200::65
Content-Security-Policy
Ok: Header without syntax errors found: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
A

Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A

Good: default-src without 'unsafe-inline' or 'unsave-eval'.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A

Good: No object-src found, but the default-src used as fallback is defined and restricted.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
F

Critical: script-src with * or a scheme found. Never allow wildcard - sources.
F

Dangerous: script-src with data: schema found. The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A

Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: no-referrer
A
Permissions-Policy
Ok: Header without syntax errors found: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
A
X-Frame-Options
Ok: Header without syntax errors found: DENY
B

Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Aletsencrypt.org 2a05:d014:58f:6201::65
Content-Security-Policy
Ok: Header without syntax errors found: default-src 'none'; font-src 'self'; style-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' data: https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://donorbox.org https://js.stripe.com/v3/ https://sdks.shopifycdn.com https://www.paypal.com https://www.paypalobjects.com https://widget.thegivingblock.com https://*.shift4.com ; img-src 'self' data: blob: https://www.google-analytics.com https://*.paypal.com https://www.paypalobjects.com https://ak2s.abmr.net https://ak1s.abmr.net https://www.google.com https://cdn.shopify.com https://v.shopify.com ; frame-src https://donorbox.org https://www.youtube.com https://www.youtube-nocookie.com https://bid.g.doubleclick.net https://js.stripe.com/v3/ https://js.stripe.com/v2/ https://www.paypal.com https://outreach.abetterinternet.org https://app.netlify.com https://widget.thegivingblock.com/ ; connect-src 'self' https://d4twhgtvn0ff5.cloudfront.net/ https://letsencrypt-merch.myshopify.com https://monorail-edge.shopifysvc.com https://www.paypal.com https://www.google-analytics.com ;
A

Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A

Good: default-src without 'unsafe-inline' or 'unsave-eval'.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A

Good: No object-src found, but the default-src used as fallback is defined and restricted.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
F

Critical: script-src with * or a scheme found. Never allow wildcard - sources.
F

Dangerous: script-src with data: schema found. The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A

Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: no-referrer
A
Permissions-Policy
Ok: Header without syntax errors found: geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(self), vibrate=(), fullscreen=(self), interest-cohort=()
A
X-Frame-Options
Ok: Header without syntax errors found: DENY
B

Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Bletsencrypt.org 3.124.100.143
Cross-Origin-Embedder-Policy
Info: Missing Header
Bletsencrypt.org 3.124.100.143
Cross-Origin-Opener-Policy
Info: Missing Header
Bletsencrypt.org 3.124.100.143
Cross-Origin-Resource-Policy
Info: Missing Header
Bletsencrypt.org 3.125.36.175
Cross-Origin-Embedder-Policy
Info: Missing Header
Bletsencrypt.org 3.125.36.175
Cross-Origin-Opener-Policy
Info: Missing Header
Bletsencrypt.org 3.125.36.175
Cross-Origin-Resource-Policy
Info: Missing Header
Bletsencrypt.org 2a05:d014:58f:6200::65
Cross-Origin-Embedder-Policy
Info: Missing Header
Bletsencrypt.org 2a05:d014:58f:6200::65
Cross-Origin-Opener-Policy
Info: Missing Header
Bletsencrypt.org 2a05:d014:58f:6200::65
Cross-Origin-Resource-Policy
Info: Missing Header
Bletsencrypt.org 2a05:d014:58f:6201::65
Cross-Origin-Embedder-Policy
Info: Missing Header
Bletsencrypt.org 2a05:d014:58f:6201::65
Cross-Origin-Opener-Policy
Info: Missing Header
Bletsencrypt.org 2a05:d014:58f:6201::65
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks

AInfo:: 7 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 7 Queries complete, 7 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Ok (4 - 8):: An average of 3.5 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 2 different Name Servers found: owen.ns.cloudflare.com, vera.ns.cloudflare.com, 2 Name Servers included in Delegation: owen.ns.cloudflare.com, vera.ns.cloudflare.com, 2 Name Servers included in 1 Zone definitions: owen.ns.cloudflare.com, vera.ns.cloudflare.com, 1 Name Servers listed in SOA.Primary: owen.ns.cloudflare.com.
AGood: Only one SOA.Primary Name Server found.: owen.ns.cloudflare.com.
AGood: SOA.Primary Name Server included in the delegation set.: owen.ns.cloudflare.com.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: owen.ns.cloudflare.com, vera.ns.cloudflare.com
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: com
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: cloudflare.com
AGood: Name servers with different Country locations found: 2 Name Servers, 3 Countries: CA, CR, GB
AInfo: Ipv4-Subnet-list: 6 Name Servers, 3 different subnets (first Byte): 108., 172., 173., 3 different subnets (first two Bytes): 108.162., 172.64., 173.245., 6 different subnets (first three Bytes): 108.162.192., 108.162.193., 172.64.32., 172.64.33., 173.245.58., 173.245.59.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 6 Name Servers with IPv6, 3 different subnets (first block): 2606:, 2803:, 2a06:, 3 different subnets (first two blocks): 2606:4700:, 2803:f800:, 2a06:98c1:, 4 different subnets (first three blocks): 2606:4700:0050:, 2606:4700:0058:, 2803:f800:0050:, 2a06:98c1:0050:, 4 different subnets (first four blocks): 2606:4700:0050:0000:, 2606:4700:0058:0000:, 2803:f800:0050:0000:, 2a06:98c1:0050:0000:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 12 good Nameserver
AGood: Nameserver supports Echo Capitalization: 12 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 12 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 12 good Nameserver
AGood: All SOA have the same Serial Number
AGood: CAA entries found, creating certificate is limited: amazon.com is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: digicert.com is allowed to create certificates

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
https://letsencrypt.org/ 3.124.100.143
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://letsencrypt.org/ 3.125.36.175
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://letsencrypt.org/ 2a05:d014:58f:6200::65
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://letsencrypt.org/ 2a05:d014:58f:6201::65
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://letsencrypt.org/ 3.124.100.143
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://letsencrypt.org/ 3.125.36.175
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://letsencrypt.org/ 2a05:d014:58f:6200::65
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://letsencrypt.org/ 2a05:d014:58f:6201::65
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
AGood: Some script Elements (type text/javascript) with a src-Attribute have a defer / async - Attribute. So loading and executing these JavaScripts doesn't block parsing and rendering the Html-Output.
https://letsencrypt.org/ 3.124.100.143
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
https://letsencrypt.org/ 3.125.36.175
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
https://letsencrypt.org/ 2a05:d014:58f:6200::65
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
https://letsencrypt.org/ 2a05:d014:58f:6201::65
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
AGood: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 20 external CSS / JavaScript files found
AGood: All svg-Images greater 1024 Bytes without internal compression are compressed. Svg is an Xml-Application, so Compression reduces the size of the file. 40 images (type image/svg+xml, image/x-icon, image/vnd.microsoft.icon) found with compression.
AGood: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 276 images (type image/png, image/jpg, image/jpeg, image/webp, image/gif) found without additional Compression. Not required because these images are already compressed
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 20 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 20 complete.
Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 316 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 316 complete.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AGood: Some img-elements have a valid alt-attribute.: 316 img-elements found, 312 img-elements with correct alt-attributes (defined, not an empty value).
Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 0 img-elements without alt-attribute, 4 img-elements with empty alt-attribute found.
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://3.124.100.143/ 3.124.100.143
404
2.797 seconds
Warning: 404 needs more then one second
https://3.125.36.175/ 3.125.36.175
404
2.187 seconds
Warning: 404 needs more then one second
https://[2a05:d014:058f:6200:0000:0000:0000:0065]/ 2a05:d014:58f:6200::65
404
2.046 seconds
Warning: 404 needs more then one second
https://[2a05:d014:058f:6201:0000:0000:0000:0065]/ 2a05:d014:58f:6201::65
404
2.000 seconds
Warning: 404 needs more then one second
https://3.75.10.80/ 3.75.10.80
404
2.173 seconds
Warning: 404 needs more then one second
ADuration: 517253 milliseconds, 517.253 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
letsencrypt.org
3.124.100.143
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
letsencrypt.org
3.124.100.143
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


letsencrypt.org
3.125.36.175
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

letsencrypt.org
3.125.36.175
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


letsencrypt.org
2a05:d014:58f:6200::65
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

letsencrypt.org
2a05:d014:58f:6200::65
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


letsencrypt.org
2a05:d014:58f:6201::65
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

letsencrypt.org
2a05:d014:58f:6201::65
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


www.letsencrypt.org
3.75.10.80
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.letsencrypt.org
3.75.10.80
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


www.letsencrypt.org
3.125.36.175
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.letsencrypt.org
3.125.36.175
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


www.letsencrypt.org
2a05:d014:58f:6200::65
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.letsencrypt.org
2a05:d014:58f:6200::65
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


www.letsencrypt.org
2a05:d014:58f:6201::65
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.letsencrypt.org
2a05:d014:58f:6201::65
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=letsencrypt.org


2CN=E6, O=Let's Encrypt, C=US


3.75.10.80
3.75.10.80
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

3.75.10.80
3.75.10.80
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US


3.125.36.175
3.125.36.175
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

3.125.36.175
3.125.36.175
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US


3.124.100.143
3.124.100.143
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

3.124.100.143
3.124.100.143
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US


[2a05:d014:058f:6200:0000:0000:0000:0065]
2a05:d014:58f:6200::65
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

[2a05:d014:058f:6200:0000:0000:0000:0065]
2a05:d014:58f:6200::65
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US


[2a05:d014:058f:6201:0000:0000:0000:0065]
2a05:d014:58f:6201::65
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

[2a05:d014:058f:6201:0000:0000:0000:0065]
2a05:d014:58f:6201::65
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

 

9. Certificates

1.
1.
CN=letsencrypt.org
07.12.2024
07.03.2025
expires in 16 days
lencr.org, letsencrypt.com, letsencrypt.org, www.lencr.org, www.letsencrypt.com, www.letsencrypt.org - 6 entries
1.
1.
CN=letsencrypt.org
07.12.2024

07.03.2025
expires in 16 days


lencr.org, letsencrypt.com, letsencrypt.org, www.lencr.org, www.letsencrypt.com, www.letsencrypt.org - 6 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:04C7A73A361AC02B67BDBD6AF210285B1CC7
Thumbprint:6C98A3EF277A0D37DBD34D5ED7F417C018B57D5B
SHA256 / Certificate:fZIcX3NUd0mErkdPM8dUWKe9OlMAE+/qgwcpnvZH+0o=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):bfe641336f840d25a027324eae21811fc2008bd3c803287064646e44ef4244ef
SHA256 hex / Subject Public Key Information (SPKI):bfe641336f840d25a027324eae21811fc2008bd3c803287064646e44ef4244ef (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://e6.o.lencr.org
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=E6, O=Let's Encrypt, C=US
13.03.2024
13.03.2027
expires in 752 days


2.
CN=E6, O=Let's Encrypt, C=US
13.03.2024

13.03.2027
expires in 752 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:00B0573E9173972770DBB487CB3A452B38
Thumbprint:C94DC4831A901A9FEC0FB49B71BD49B5AAD4FAD0
SHA256 / Certificate:duniiKr8Djf0OQy/lGqtmX1cHJAbPOUT09j626viq4U=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):d016e1fe311948aca64f2de44ce86c9a51ca041df6103bb52a88eb3f761f57d7
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3757 days


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3757 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, S=California, C=US
15.01.2024
15.02.2025
4 days expired
*.netlify.app, netlify.app - 2 entries
2.
1.
CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, S=California, C=US
15.01.2024

15.02.2025
4 days expired


*.netlify.app, netlify.app - 2 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:SHA256 With RSA-Encryption
Serial Number:03ED167A2659DA278E7B21CDBEB33E32
Thumbprint:B08EE9A5C3D9B5C1FFB6517ADF98CF2D2818419B
SHA256 / Certificate:qk1GrpWdGTHOjdyesDzAU8Be25Q9BK7MlhW2crYHpEE=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):0c5bf4acf22686578bcc8bdcb6f12eb016b9c27cd0ffe692ab25b5f32dba2feb
SHA256 hex / Subject Public Key Information (SPKI):0c5bf4acf22686578bcc8bdcb6f12eb016b9c27cd0ffe692ab25b5f32dba2feb (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
30.03.2021
30.03.2031
expires in 2230 days


2.
CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
30.03.2021

30.03.2031
expires in 2230 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0CF5BD062B5602F47AB8502C23CCF066
Thumbprint:1B511ABEAD59C6CE207077C0BF0E0043B1382612
SHA256 / Certificate:yAJfn8Zf38lbPKjMeGe5pYe1J3lzlXkXRj/IE9C2Jak=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):59e738e674221702af1edb87c5200c1a4b75f64fae3d2c3d265124c61bd83c79
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013
15.01.2038
expires in 4713 days


3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013

15.01.2038
expires in 4713 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:033AF1E6A711A9A0BB2864B11D09FAE5
Thumbprint:DF3C24F9BFD666761B268073FE06D1CC8D4F82A4
SHA256 / Certificate:yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18=
SHA256 hex / Cert (DANE * 0 1):cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA256 hex / PublicKey (DANE * 1 1):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=E6, O=Let's Encrypt, C=US
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
8864200117
leaf cert
CN=E6, O=Let's Encrypt, C=US
2024-12-07 14:44:05
2025-03-07 14:44:04
lencr.org, letsencrypt.com, letsencrypt.org, www.lencr.org, www.letsencrypt.com, www.letsencrypt.org - 6 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://letsencrypt.org/
3.124.100.143
a

152
3,289,385 Bytes
5
59
89
9
0
0
-9

iframe

1

0


0
0
0


img

79
774,203 Bytes
0
79
0
0
0
0


link
alternate
1

0


0
0
0


link
stylesheet
2
30,948 Bytes
0
2
0
0
0
1


link
other
1

0


0
0
0


meta
og
5
27,233 Bytes
0
2
0
0
0
0


meta
other
5

0


0
0
0


script

3
107,626 Bytes
2
1
2
0
0
1

https://letsencrypt.org/
3.125.36.175
a

152
3,294,191 Bytes
4
59
89
8
0
0
-8

iframe

1

0


0
0
0


img

79
774,328 Bytes
0
79
0
0
0
0


link
alternate
1

0


0
0
0


link
stylesheet
2
31,080 Bytes
0
2
0
0
0
1


link
other
1

0


0
0
0


meta
og
5
27,233 Bytes
0
2
0
0
0
0


meta
other
5

0


0
0
0


script

3
107,742 Bytes
2
1
2
0
0
1

https://letsencrypt.org/
2a05:d014:58f:6200::65
a

152
3,230,788 Bytes
4
59
89
8
0
0
-8

iframe

1

0


0
0
0


img

79
774,261 Bytes
0
79
0
0
0
0


link
alternate
1

0


0
0
0


link
stylesheet
2
31,012 Bytes
0
2
0
0
0
1


link
other
1

0


0
0
0


meta
og
5
27,233 Bytes
0
2
0
0
0
0


meta
other
5

0


0
0
0


script

3
107,529 Bytes
2
1
2
0
0
1

https://letsencrypt.org/
2a05:d014:58f:6201::65
a

152
3,294,542 Bytes
4
59
89
8
0
0
-8

iframe

1

0


0
0
0


img

79
774,285 Bytes
0
79
0
0
0
0


link
alternate
1

0


0
0
0


link
stylesheet
2
30,912 Bytes
0
2
0
0
0
1


link
other
1

0


0
0
0


meta
og
5
27,233 Bytes
0
2
0
0
0
0


meta
other
5

0


0
0
0


script

3
107,606 Bytes
2
1
2
0
0
1

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://letsencrypt.org/
3.124.100.143
a

#


3
ok















a

#main-content


1
ok















a

/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5720 Bytes








a

/2023/07/10/cross-sign-expiration/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5395 Bytes








a

/2024/12/11/eoy-letter-2024/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4701 Bytes








a

/2025/01/09/acme-profiles/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5582 Bytes








a

/2025/01/16/6-day-and-ip-certs/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4591 Bytes








a

/2025/01/22/ending-expiration-emails/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3927 Bytes








a

/2025/01/30/scaling-rate-limits/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





9355 Bytes








a

/about/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4380 Bytes








a

/blog/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





12505 Bytes








a

/ca/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5616 Bytes








a

/contact/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4099 Bytes








a

/cs/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6014 Bytes








a

/da/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5810 Bytes








a

/de/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5893 Bytes








a

/docs/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3764 Bytes








a

/docs/faq/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





7093 Bytes








a

/donate/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4986 Bytes








a

/el/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6084 Bytes








a

/es/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5883 Bytes








a

/feed.xml
200

1
ok
application/xml
X-Content-Type-Options nosniff found





17822 Bytes








a

/fi/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5811 Bytes








a

/fr/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5915 Bytes








a

/getinvolved/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4341 Bytes








a

/getting-started/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5332 Bytes








a

/he/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6114 Bytes








a

/hu/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5894 Bytes








a

/id/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5770 Bytes








a

/it/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5762 Bytes








a

/ja/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6174 Bytes








a

/ko/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6063 Bytes








a

/pl/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5937 Bytes








a

/privacy/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





8289 Bytes








a

/pt-br/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5784 Bytes








a

/repository/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5102 Bytes








a

/ru/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6305 Bytes








a

/si/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6157 Bytes








a

/sponsors/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5567 Bytes








a

/sr/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5765 Bytes








a

/stats/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4226 Bytes








a

/sv/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5776 Bytes








a

/ta/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6019 Bytes








a

/th/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5969 Bytes








a

/tr/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5777 Bytes








a

/uk/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6183 Bytes








a

/vi/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5965 Bytes








a

/zh-cn/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5899 Bytes








a

/zh-tw/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5987 Bytes








a

https://abetterinternet.org
301
https://www.abetterinternet.org/
1
ok
text/plain; charset=utf-8
missing X-Content-Type-Options nosniff





0 Bytes








a

https://abetterinternet.org/annual-reports/
301
https://www.abetterinternet.org/annual-reports/
1
ok
text/plain; charset=utf-8
missing X-Content-Type-Options nosniff





0 Bytes








a

https://actonfamilygiving.org/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6822 Bytes








a

https://automattic.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





22112 Bytes








a

https://aws.amazon.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





179995 Bytes








a

https://bitlaunch.io/
200

1
ok
text/html
X-Content-Type-Options nosniff found





21840 Bytes








a

https://cargo.site/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





6956 Bytes








a

https://community.letsencrypt.org/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





34026 Bytes








a

https://dnsimple.com/letsencrypt
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





8938 Bytes








a

https://domainname.shop/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





5482 Bytes








a

https://donorbox.org/support-lets-encrypt
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





15752 Bytes








a

https://driving-tests.org/
200

1
ok
text/html
X-Content-Type-Options nosniff found





43838 Bytes








a

https://github.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





47723 Bytes








a

https://github.com/letsencrypt
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





39472 Bytes








a

https://goteleport.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





52844 Bytes








a

https://ipinfo.io/
429
Too Many Requests
1
Too Many Requests
text/html; charset=utf-8
X-Content-Type-Options nosniff found





6670 Bytes








a

https://ipv6.rs/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





24359 Bytes








a

https://keenetic.com/
302
https://keenetic.com/en/
1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





0 Bytes








a

https://letsencrypt.status.io/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





6565 Bytes








a

https://ngrok.com/
200

1
ok
text/html
missing X-Content-Type-Options nosniff





57688 Bytes








a

https://rackspeed.de/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





29953 Bytes








a

https://serpapi.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





15841 Bytes








a

https://serverpilot.io/
200

1
ok
text/html
X-Content-Type-Options nosniff found





21270 Bytes








a

https://shiguredo.jp/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





11736 Bytes








a

https://showit.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





81289 Bytes








a

https://snipeitapp.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





8463 Bytes








a

https://tailscale.com/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





38310 Bytes








a

https://unraid.net/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





21759 Bytes








a

https://www.20i.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





38532 Bytes








a

https://www.3cx.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





176700 Bytes








a

https://www.4kdownload.com/-1uvr6/video-downloader
301
https://www.4kdownload.com/products/videodownloader-42
1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





0 Bytes








a

https://www.abetterinternet.org/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3422 Bytes








a

https://www.abetterinternet.org/about/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3059 Bytes








a

https://www.abetterinternet.org/annual-reports/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





2771 Bytes








a

https://www.abetterinternet.org/careers/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3540 Bytes








a

https://www.abetterinternet.org/sponsor/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3908 Bytes








a

https://www.abetterinternet.org/trademarks
301
/trademarks/
1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





7770 Bytes








a

https://www.ads.com/
200

1
ok
text/html
missing X-Content-Type-Options nosniff





7053 Bytes








a

https://www.akamai.com/
-14
Timeout - The operation has timed out.
1
Timeout - The operation has timed out.















a

https://www.cdmon.com/es/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





29992 Bytes








a

https://www.cdn77.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





20221 Bytes








a

https://www.cisco.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





18214 Bytes








a

https://www.clever-cloud.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





19639 Bytes








a

https://www.cloudns.net/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





25046 Bytes








a

https://www.confluent.io/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





134581 Bytes








a

https://www.cyon.ch/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





65269 Bytes








a

https://www.digitalocean.com/
200

1
ok
text/html
missing X-Content-Type-Options nosniff





38645 Bytes








a

https://www.discourse.org/
200

1
ok
text/html
missing X-Content-Type-Options nosniff





10569 Bytes








a

https://www.duda.co/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





61511 Bytes








a

https://www.duocircle.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





44710 Bytes








a

https://www.eff.org/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





12807 Bytes








a

https://www.entri.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





13377 Bytes








a

https://www.fastly.com/
200

1
ok
text/html
X-Content-Type-Options nosniff found





155905 Bytes








a

https://www.fordfoundation.org/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





25753 Bytes








a

https://www.google.com/chrome/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





51194 Bytes








a

https://www.greengeeks.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





28485 Bytes








a

https://www.haproxy.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





65574 Bytes








a

https://www.heroku.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





57563 Bytes








a

https://www.hostpapa.com/lets-encrypt-hosting?utm_source=letsencrypt.org&utm_medium=referral&utm_campaign=us-seo&utm_term=web-hosting&utm_content=180x108-logo
403
Forbidden
1
Forbidden
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





5974 Bytes








a

https://www.hostpoint.ch/
200

1
ok
text/html
X-Content-Type-Options nosniff found





50719 Bytes








a

https://www.hoststar.ch/
301
https://www.hoststar.ch/de
1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





0 Bytes








a

https://www.iban.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





10286 Bytes








a

https://www.ibm.com/
303
https://www.ibm.com/de-en
1
ok

X-Content-Type-Options nosniff found





0 Bytes








a

https://www.icuk.net/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





9312 Bytes








a

https://www.identrust.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





14725 Bytes








a

https://www.infomaniak.ch/
301
https://www.infomaniak.com/
1
ok
text/html; charset=iso-8859-1
missing X-Content-Type-Options nosniff





0 Bytes








a

https://www.interserver.net/
403
Forbidden
1
Forbidden
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





5684 Bytes








a

https://www.jimdo.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





68981 Bytes








a

https://www.linkedin.com/company/lets-encrypt/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





28649 Bytes








a

https://www.livesport.eu/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





36363 Bytes








a

https://www.mongodb.com/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





58708 Bytes








a

https://www.mozilla.org/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





8537 Bytes








a

https://www.nabucasa.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





5337 Bytes








a

https://www.netlify.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





34182 Bytes








a

https://www.nginx.com/
301
https://www.f5.com/go/product/welcome-to-nginx
1
ok
text/html; charset=iso-8859-1
missing X-Content-Type-Options nosniff





0 Bytes








a

https://www.one.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





19019 Bytes








a

https://www.ovh.com/
307
https://www.ovh.com/
1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





0 Bytes








a

https://www.planethoster.com/
301
/fr
1
ok
text/plain; charset=utf-8
X-Content-Type-Options nosniff found





37 Bytes








a

https://www.redhat.com/
301
https://www.redhat.com/en
1
ok

missing X-Content-Type-Options nosniff





0 Bytes








a

https://www.sakura.ad.jp/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





8111 Bytes








a

https://www.sap.com/
403
Forbidden
1
Forbidden
text/html
missing X-Content-Type-Options nosniff





365 Bytes








a

https://www.securew2.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





23384 Bytes








a

https://www.shopify.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





123273 Bytes








a

https://www.siteground.com/
302
https://de.siteground.com/
1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





0 Bytes








a

https://www.smtp2go.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





26967 Bytes








a

https://www.squarespace.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





49139 Bytes








a

https://www.vultr.com
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





85868 Bytes








a

https://www.wix.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





225090 Bytes








a

https://www.wpbeginner.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





46355 Bytes








a

https://www.zendesk.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





56636 Bytes








iframe
src
https://outreach.abetterinternet.org/l/1011011/2025-01-14/31v6r


1
ok















img
src
/images/language-icon128px-black.png
200

1
ok
no alt-Attributeimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4772 Bytes






ETag: "57b9e444068ff4dae949a29eb717e37d-ssl"



img
src
/images/letsencrypt-logo-horizontal.svg
200

1
ok
alt: Let's Encryptimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 4875/13457 Bytes






ETag: "5b03997347cdc7ec2df73881d1e2d8fe-ssl-df"



img
src
/images/sponsors/small/20i-logo.svg
200

1
ok
alt: 20iimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 906/2159 Bytes






ETag: "50b21478d332de1fd2536ea511a37969-ssl-df"



img
src
/images/sponsors/small/3cx-logo.png
200

1
ok
alt: 3CXimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 1878 Bytes






ETag: "890b4e277c853451f5c844972af15219-ssl"



img
src
/images/sponsors/small/4kdownload-logo.png
200

1
ok
alt: Video Downloaderimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8907 Bytes






ETag: "e8a86f06f0cb1ebf9b88363a8bd5ccda-ssl"



img
src
/images/sponsors/small/acton-family-giving-logo.png
200

1
ok
alt: Acton Family Givingimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 11944 Bytes






ETag: "2c70f8f7eff9cefc090bb909528c0b08-ssl"



img
src
/images/sponsors/small/ads-com-logo.png
200

1
ok
alt: Ads.comimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4028 Bytes






ETag: "4848522bfaa955dc110e673b15a57100-ssl"



img
src
/images/sponsors/small/akamai-logo.png
200

1
ok
alt: Akamaiimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 10783 Bytes






ETag: "bace05a8dee20c8164ece5a0267289ed-ssl"



img
src
/images/sponsors/small/automattic-logo.png
200

1
ok
alt: Automatticimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3361 Bytes






ETag: "84a9d1173bd772aa7fa22f7487886c1d-ssl"



img
src
/images/sponsors/small/aws-logo-2.png
200

1
ok
alt: Amazon Web Servicesimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 30048 Bytes






ETag: "17a13bfd3a555fcacde0a80860a6ed99-ssl"



img
src
/images/sponsors/small/bitlaunch-logo.svg
200

1
ok
alt: BitLaunchimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1879/3799 Bytes






ETag: "2fca599c243f0d39acdef7aa2c800d8d-ssl-df"



img
src
/images/sponsors/small/cargo-logo.png
200

1
ok
alt: Cargoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4914 Bytes






ETag: "118fc61f6d94807d33bece14920ce0bd-ssl"



img
src
/images/sponsors/small/cdmon-logo.png
200

1
ok
alt: cdmonimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3530 Bytes






ETag: "d6e0fe72c0749eca17bfbc62b8796379-ssl"



img
src
/images/sponsors/small/cdn77-logo.png
200

1
ok
alt: CDN77image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 36785 Bytes






ETag: "ffd4e04479aaed495ebd0eadaeca4d15-ssl"



img
src
/images/sponsors/small/chrome-logo.png
200

1
ok
alt: Google Chromeimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 9064 Bytes






ETag: "061a00611d300493a352634b0d79ff99-ssl"



img
src
/images/sponsors/small/cisco-logo.png
200

1
ok
alt: Ciscoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8543 Bytes






ETag: "3197164d5e8a0cd03164b01d367eeb14-ssl"



img
src
/images/sponsors/small/clevercloud-logo.png
200

1
ok
alt: Clever Cloudimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6318 Bytes






ETag: "4d32e11dcc9d67e9dd2c60d7e2925a9a-ssl"



img
src
/images/sponsors/small/cloudns-logo.png
200

1
ok
alt: ClouDNSimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 31583 Bytes






ETag: "06bcd959e86e9a013225e5b5f226aeef-ssl"



img
src
/images/sponsors/small/confluent-logo.svg
200

1
ok
alt: Confluentimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1815/4506 Bytes






ETag: "f5e0ca182cd94541db1b89b493bef30f-ssl-df"



img
src
/images/sponsors/small/cyon-logo.png
200

1
ok
alt: Cyonimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4026 Bytes






ETag: "dfd5b1d98f9fe6fc0fb29855ae899fb4-ssl"



img
src
/images/sponsors/small/DigitalOcean_logo.svg
200

1
ok
alt: DigitalOceanimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 2122/5885 Bytes






ETag: "38f11598a8b510b7c5d74276b2a7d88e-ssl-df"



img
src
/images/sponsors/small/discourse-logo.png
200

1
ok
alt: Discourseimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5473 Bytes






ETag: "e27ff61930ad3c55340f5108d454caa8-ssl"



img
src
/images/sponsors/small/dnsimple-logo.png
200

1
ok
alt: dnsimpleimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3814 Bytes






ETag: "134748d2e20dc1de5a7470df39a4d251-ssl"



img
src
/images/sponsors/small/domainnameshop-logo.png
200

1
ok
alt: DomainName.Shopimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4126 Bytes






ETag: "6b6ddcaa25b4ced0d7ea436ac914ce77-ssl"



img
src
/images/sponsors/small/driving-tests-logo.png
200

1
ok
alt: driving-tests.orgimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 2887 Bytes






ETag: "0fdca2e61947a6108c29cfc63aa14c19-ssl"



img
src
/images/sponsors/small/duda-logo.png
200

1
ok
alt: Dudaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6418 Bytes






ETag: "8a5db665bf51140fceacee141c4f0a05-ssl"



img
src
/images/sponsors/small/duocircle-logo.png
200

1
ok
alt: DuoCircleimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4120 Bytes






ETag: "3e5765008150f3ced389ab2df5459033-ssl"



img
src
/images/sponsors/small/eff-logo.png
200

1
ok
alt: Electronic Frontier Foundationimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 533 Bytes






ETag: "0e0757dc5308ae492f6349b3f49fc693-ssl"



img
src
/images/sponsors/small/entri-logo.svg
200

1
ok
alt: Entriimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 898/2105 Bytes






ETag: "3f2ae4383b090a2f7c3ace5ec016568c-ssl-df"



img
src
/images/sponsors/small/fastly-logo.png
200

1
ok
alt: Fastlyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7830 Bytes






ETag: "116d88460ee95477bc7c57bc19daf386-ssl"



img
src
/images/sponsors/small/ford-foundation-logo.png
200

1
ok
alt: Ford Foundationimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5097 Bytes






ETag: "440184c1918b86cb455915fcb8922218-ssl"



img
src
/images/sponsors/small/github-logo.png
200

1
ok
alt: GitHubimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3256 Bytes






ETag: "f22209ba6f339a322910c3bb40057924-ssl"



img
src
/images/sponsors/small/greengeeks-logo.png
200

1
ok
alt: GreenGeeksimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5282 Bytes






ETag: "77b2f96ba8888217589a06e28eb49074-ssl"



img
src
/images/sponsors/small/haproxy-logo.png
200

1
ok
alt: HAProxyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6745 Bytes






ETag: "327e2d578b18816d7e626ae2d79b8890-ssl"



img
src
/images/sponsors/small/heroku-logo.png
200

1
ok
alt: Herokuimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4010 Bytes






ETag: "7025d344ec5b79ef8e90629323d89e5b-ssl"



img
src
/images/sponsors/small/hostpapa-logo.png
200

1
ok
alt: HostPapaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 11803 Bytes






ETag: "3215318729f738c725c4f930fe9798d7-ssl"



img
src
/images/sponsors/small/hostpoint-logo.png
200

1
ok
alt: HostPointimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4390 Bytes






ETag: "d392b3808b208e0c0f94845760d66037-ssl"



img
src
/images/sponsors/small/hoststar-logo.png
200

1
ok
alt: Hoststarimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5742 Bytes






ETag: "e5a875b75b87ba241849298732df5591-ssl"



img
src
/images/sponsors/small/iban-logo.png
200

1
ok
alt: IBANimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 27818 Bytes






ETag: "d1a397da043de5bcfd44bb8317f8b5af-ssl"



img
src
/images/sponsors/small/ibm-logo.png
200

1
ok
alt: IBMimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3902 Bytes






ETag: "025471ff0541e7a7945ff4acf8aec165-ssl"



img
src
/images/sponsors/small/icuk-logo-red.svg
200

1
ok
alt: ICUKimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 975/1859 Bytes






ETag: "1414a3507f4a392c2dbbb4f6df330ed0-ssl-df"



img
src
/images/sponsors/small/identrust-logo.png
200

1
ok
alt: IdenTrustimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4786 Bytes






ETag: "76cb7526208670e295ce86bfae6fc0f1-ssl"



img
src
/images/sponsors/small/infomaniak-logo.png
200

1
ok
alt: Infomaniakimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5824 Bytes






ETag: "312524dcfd8f7283e839dbf7c5587c71-ssl"



img
src
/images/sponsors/small/interserver-logo.png
200

1
ok
alt: Interserverimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 78305 Bytes






ETag: "8475248cd4d9150cf68752c38e7b0fd4-ssl"



img
src
/images/sponsors/small/ipinfo-logo.png
200

1
ok
alt: IPInfoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5339 Bytes






ETag: "2026718d54d61083cfc2b0aeb65d05c4-ssl"



img
src
/images/sponsors/small/ipv6rs-logo.png
200

1
ok
alt: IPv6rsimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 50852 Bytes






ETag: "6248dd06c022a349104f346d20a41c05-ssl"



img
src
/images/sponsors/small/jimdo-logo.png
200

1
ok
alt: Jimdoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3001 Bytes






ETag: "b7565eead0a7835ce9e397e145eff85d-ssl"



img
src
/images/sponsors/small/keenetic-logo.png
200

1
ok
alt: Keeneticimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 1853 Bytes






ETag: "0085a6a0e86a0c14c43cab9131ec5489-ssl"



img
src
/images/sponsors/small/livesport-logo.png
200

1
ok
alt: Livesportimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 2767 Bytes






ETag: "e47e58c9a2eb7c5ec2902b7f15785b92-ssl"



img
src
/images/sponsors/small/mongodb-logo.png
200

1
ok
alt: MongoDBimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4888 Bytes






ETag: "77039ecdb479b976d423b9f2698b38eb-ssl"



img
src
/images/sponsors/small/mozilla-logo.png
200

1
ok
alt: Mozillaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4265 Bytes






ETag: "831a2cf891de48201ad13a7a3aa73f7a-ssl"



img
src
/images/sponsors/small/nabu-casa-logo.png
200

1
ok
alt: Nabu Casaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3930 Bytes






ETag: "e8fecc4328a6a5e1f3e965d90f8f75c6-ssl"



img
src
/images/sponsors/small/netlify-logo.png
200

1
ok
alt: Netlifyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7507 Bytes






ETag: "c31309ed17f0f1bfc29df714c8d1bce5-ssl"



img
src
/images/sponsors/small/nginx-logo.png
200

1
ok
alt: NGINXimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4996 Bytes






ETag: "a4d227dec5b3236df715307066d58c88-ssl"



img
src
/images/sponsors/small/ngrok-logo.png
200

1
ok
alt: Ngrokimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8400 Bytes






ETag: "3edb25eca8d73111aad643b2807ed451-ssl"



img
src
/images/sponsors/small/one-com-logo.png
200

1
ok
alt: one.comimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3354 Bytes






ETag: "8f1ad8ed5fc5c1a08571a540468e5562-ssl"



img
src
/images/sponsors/small/ovh-logo.png
200

1
ok
alt: OVHimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5516 Bytes






ETag: "33b17d6754cc16e8322cac5eeb7beab7-ssl"



img
src
/images/sponsors/small/planethoster-logo.png
200

1
ok
alt: Hébergement webimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 12732 Bytes






ETag: "ea00c86059d86be4526783dbe26acde1-ssl"



img
src
/images/sponsors/small/rack-speed-logo.png
200

1
ok
alt: RACK::SPEEDimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4156 Bytes






ETag: "801e18ee0d2b85251bec8f50384602c2-ssl"



img
src
/images/sponsors/small/redhat-logo.png
200

1
ok
alt: RedHatimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5601 Bytes






ETag: "6afa545632ffe3bbd177b29378f37114-ssl"



img
src
/images/sponsors/small/sakura-logo.png
200

1
ok
alt: Sakura Internetimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5402 Bytes






ETag: "a442d637170323b1294b96a6bfa94e95-ssl"



img
src
/images/sponsors/small/sap-logo.svg
200

1
ok
alt: SAPimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 880/1678 Bytes






ETag: "f232bc9de15755de6cddc18aa940c6fd-ssl-df"



img
src
/images/sponsors/small/securew2-logo.png
200

1
ok
alt: SecureW2image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 43051 Bytes






ETag: "808d206f96adc359d1614bd42c309489-ssl"



img
src
/images/sponsors/small/SerpApi-black.png
200

1
ok
alt: SerpApiimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8192 Bytes






ETag: "739ea51179e55b54d703380d4c20a149-ssl"



img
src
/images/sponsors/small/serverpilot-logo.png
200

1
ok
alt: ServerPilotimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7196 Bytes






ETag: "a054be0a7c4990e4daad99f9a048828c-ssl"



img
src
/images/sponsors/small/shiguredo-v2-logo.svg
200

1
ok
alt: Shiguredoimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 3878/9596 Bytes






ETag: "7546a288976965703364aead18e3684d-ssl-df"



img
src
/images/sponsors/small/shopify-logo.png
200

1
ok
alt: Shopifyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 9475 Bytes






ETag: "71afeacb52d32b761bd3c43e0d524676-ssl"



img
src
/images/sponsors/small/showit-logo.png
200

1
ok
alt: Showitimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 26273 Bytes






ETag: "90d34c2ebf77a5cdd97d485dbb84d8db-ssl"



img
src
/images/sponsors/small/siteground-logo.png
200

1
ok
alt: SiteGroundimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 10235 Bytes






ETag: "813ab2c89f2ba9c73cff122ca752c141-ssl"



img
src
/images/sponsors/small/smtp2go-logo.png
200

1
ok
alt: SMTP2GOimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 83357 Bytes






ETag: "d065f4a167c9f81e5713abef71c3e405-ssl"



img
src
/images/sponsors/small/snipeit-logo.png
200

1
ok
alt: Snipe-ITimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 16551 Bytes






ETag: "f662a678fcc545adf39b9beed9806dcf-ssl"



img
src
/images/sponsors/small/squarespace-logo.png
200

1
ok
alt: Squarespaceimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4779 Bytes






ETag: "fc2cab15c9ed6782061ff527bb2df979-ssl"



img
src
/images/sponsors/small/tailscale-logo.svg
200

1
ok
alt: Tailscaleimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1538/4427 Bytes






ETag: "4bc49801ef28c8f9753ca8de59309bc9-ssl-df"



img
src
/images/sponsors/small/teleport-logo.png
200

1
ok
alt: Teleportimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3705 Bytes






ETag: "d9656a1fe662a24103d185b35b32038a-ssl"



img
src
/images/sponsors/small/unraid-logo.png
200

1
ok
alt: Lime Technology (Unraid)image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3236 Bytes






ETag: "4f3a91fabfcd3096dbfa9f05d461ec1d-ssl"



img
src
/images/sponsors/small/vultr-logo.png
200

1
ok
alt: Vultrimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7123 Bytes






ETag: "38759304d1ed3e9351a94ec15b1b2b47-ssl"



img
src
/images/sponsors/small/wix-logo.png
200

1
ok
alt: Wiximage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4613 Bytes






ETag: "cc723eceaaeb94c01f04a00094eee118-ssl"



img
src
/images/sponsors/small/wpbeginner-logo.png
200

1
ok
alt: WPBeginnerimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3948 Bytes






ETag: "2467a23fe18fb614676a82e6a43fd3dc-ssl"



img
src
/images/sponsors/small/zendesk-logo.png
200

1
ok
alt: Zendeskimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5499 Bytes






ETag: "2135f40c083966269f55d24442c25a3e-ssl"



link
alternate
/feed.xml


1
ok















link
canonical
/


1
ok















link
stylesheet
/css/main.min.b82cdd11679484f398baf9bacf803d8462927aa48f722830017495d4167c643ebbbb110bd864533e2f9493fd4bc344bd859fa8874c32e6a0d7e24d95c3d11b59.css
200

1
ok
text/css; charset=UTF-8
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 9016/45266 Bytes






ETag: "464e78d8deaf662344c8b560e2f48efb-ssl-df"

SRI found. Integrity:
sha512-uCzdEWeUhPOYuvm6z4A9hGKSeqSPcigwAXSV1BZ8ZD67uxEL2GRTPi+Uk/1Lw0S9hZ+oh0wy5qDX4k2Vw9EbWQ==
crossorigin: no crossorigin defined
No SRI Parse error
valid



link
stylesheet
/fontawesome-free-6.5.2-web/css/all.min.css
200

1
ok
text/css; charset=UTF-8
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 21932/103009 Bytes






ETag: "05513efce9d88b8dfb8678fcaf50d95d-ssl-df"

local SRI possible, possible hash-values:

 

sha256-XOqroi11tY4EFQMR9ZYwZWKj5ZXiftSx36RRuC3anlA=
sha384-PPIZEGYM1v8zp5Py7UjFb79S58UeqCL9pYVnVPURKEqvioPROaVAJKKLzvH2rDnI
sha512-SnH5WK+bZxgPHs44uWIX+LLJAJ9/2PkPKZ5QiAj6Ta86w+fsb2TkcmfRyVX3pBnMFcV7oQPJkl9QevSCWr3W6A==

 

<link rel="stylesheet" href="/fontawesome-free-6.5.2-web/css/all.min.css" crossorigin="anonymous" integrity="sha256-XOqroi11tY4EFQMR9ZYwZWKj5ZXiftSx36RRuC3anlA=" />



meta
charset
utf-8


1
ok















meta
og:description
Let's Encrypt is a free, automated, and open Certificate Authority brought to you by the nonprofit Internet Security Research Group (ISRG). Read all about our nonprofit work this year in our 2024 Annual Report.


1
ok















meta
og:image
https://letsencrypt.org/images/LetsEncrypt-SocialShare.png
200

1
ok
image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 21513 Bytes






ETag: "f69a4a7f3bd0dcf77d474f54e605ef24-ssl"



meta
og:title
Let's Encrypt


1
ok















meta
og:type
website


1
ok















meta
og:url
https://letsencrypt.org/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5720 Bytes






ETag: "0098686c2f97f26b1a89102f9b789315-ssl-df"



meta
X-UA-Compatible
IE=edge


1
ok















meta
description
Let's Encrypt is a free, automated, and open Certificate Authority brought to you by the nonprofit Internet Security Research Group (ISRG). Read all about our nonprofit work this year in our 2024 Annual Report.


1
ok















meta
generator
Hugo 0.130.0


1
ok















meta
viewport
width=device-width, initial-scale=1


1
ok















script
src
/js/main.a572b61495f9d8fe4e5ec075082ddfe85e5a5ff501c15c499d3f2a4bed71afb6fe89e85f3202aa8fdeebcda97645416bfc75683c2d3471485b5668a6d5f98740.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1394/4576 Bytes






ETag: "0aad23b251916fbe4694d6df71c47a7d-ssl-df"

SRI found. Integrity:
sha512-pXK2FJX52P5OXsB1CC3f6F5aX/UBwVxJnT8qS+1xr7b+iehfMgKqj97rzal2RUFr/HVoPC00cUhbVmim1fmHQA==
crossorigin: no crossorigin defined
No SRI Parse error
valid



script
src
https://donorbox.org/install-popup-button.js
200

1
ok
defer attribute found text/javascript
missing X-Content-Type-Options nosniff





Cache-Control: public, max-age=0, s-maxage=3600 - max-age too short.
Compression (br): 5771/15100 Bytes






Server-Header Access-Control-Allow-Origin: not found
Cross-Origin Resource Sharing (CORS) not supported



script
src
https://www.googletagmanager.com/gtag/js?id=G-XEJKGKMHBK
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript; charset=UTF-8
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=900, private - max-age too short.
Compression (br): 100461/285004 Bytes






Server-Header Access-Control-Allow-Origin: https://letsencrypt.org
Cross-Origin Resource Sharing (CORS) not supported


3.125.36.175
a

#


3
ok















a

#main-content


1
ok















a

/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5720 Bytes








a

/2023/07/10/cross-sign-expiration/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5447 Bytes








a

/2024/12/11/eoy-letter-2024/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4701 Bytes








a

/2025/01/09/acme-profiles/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5582 Bytes








a

/2025/01/16/6-day-and-ip-certs/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4591 Bytes








a

/2025/01/22/ending-expiration-emails/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3927 Bytes








a

/2025/01/30/scaling-rate-limits/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





9394 Bytes








a

/about/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4477 Bytes








a

/blog/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





12505 Bytes








a

/ca/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5616 Bytes








a

/contact/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4099 Bytes








a

/cs/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6053 Bytes








a

/da/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5810 Bytes








a

/de/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5893 Bytes








a

/docs/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3764 Bytes








a

/docs/faq/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





7116 Bytes








a

/donate/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4955 Bytes








a

/el/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6084 Bytes








a

/es/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5910 Bytes








a

/feed.xml
200

1
ok
application/xml
X-Content-Type-Options nosniff found





17822 Bytes








a

/fi/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5811 Bytes








a

/fr/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5990 Bytes








a

/getinvolved/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4341 Bytes








a

/getting-started/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5326 Bytes








a

/he/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6031 Bytes








a

/hu/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5876 Bytes








a

/id/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5770 Bytes








a

/it/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5762 Bytes








a

/ja/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6152 Bytes








a

/ko/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6003 Bytes








a

/pl/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5924 Bytes








a

/privacy/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





8261 Bytes








a

/pt-br/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5871 Bytes








a

/repository/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5102 Bytes








a

/ru/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6305 Bytes








a

/si/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6134 Bytes








a

/sponsors/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5542 Bytes








a

/sr/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5765 Bytes








a

/stats/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4226 Bytes








a

/sv/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5873 Bytes








a

/ta/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6019 Bytes








a

/th/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5969 Bytes








a

/tr/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5777 Bytes








a

/uk/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6247 Bytes








a

/vi/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6039 Bytes








a

/zh-cn/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5844 Bytes








a

/zh-tw/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5922 Bytes








a

https://abetterinternet.org
301
https://www.abetterinternet.org/
1
ok
text/plain; charset=utf-8
missing X-Content-Type-Options nosniff





0 Bytes








a

https://abetterinternet.org/annual-reports/
301
https://www.abetterinternet.org/annual-reports/
1
ok
text/plain; charset=utf-8
missing X-Content-Type-Options nosniff





0 Bytes








a

https://actonfamilygiving.org/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6822 Bytes








a

https://automattic.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





22112 Bytes








a

https://aws.amazon.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





179920 Bytes








a

https://bitlaunch.io/
200

1
ok
text/html
X-Content-Type-Options nosniff found





21807 Bytes








a

https://cargo.site/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





6956 Bytes








a

https://community.letsencrypt.org/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





34030 Bytes








a

https://dnsimple.com/letsencrypt
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





8940 Bytes








a

https://domainname.shop/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





5476 Bytes








a

https://donorbox.org/support-lets-encrypt
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





15751 Bytes








a

https://driving-tests.org/
200

1
ok
text/html
X-Content-Type-Options nosniff found





43902 Bytes








a

https://github.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





47723 Bytes








a

https://github.com/letsencrypt
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





39472 Bytes








a

https://goteleport.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





53112 Bytes








a

https://ipinfo.io/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





11302 Bytes








a

https://ipv6.rs/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





24359 Bytes








a

https://keenetic.com/
302
https://keenetic.com/en/
1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





0 Bytes








a

https://letsencrypt.status.io/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





6565 Bytes








a

https://ngrok.com/
200

1
ok
text/html
missing X-Content-Type-Options nosniff





57688 Bytes








a

https://rackspeed.de/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





29953 Bytes








a

https://serpapi.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





15841 Bytes








a

https://serverpilot.io/
200

1
ok
text/html
X-Content-Type-Options nosniff found





21270 Bytes








a

https://shiguredo.jp/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





11808 Bytes








a

https://showit.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





81289 Bytes








a

https://snipeitapp.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





8470 Bytes








a

https://tailscale.com/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





38310 Bytes








a

https://unraid.net/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





21760 Bytes








a

https://www.20i.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





38532 Bytes








a

https://www.3cx.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





176756 Bytes








a

https://www.4kdownload.com/-1uvr6/video-downloader
301
https://www.4kdownload.com/products/videodownloader-42
1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





0 Bytes








a

https://www.abetterinternet.org/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3422 Bytes








a

https://www.abetterinternet.org/about/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3059 Bytes








a

https://www.abetterinternet.org/annual-reports/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





2771 Bytes








a

https://www.abetterinternet.org/careers/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3540 Bytes








a

https://www.abetterinternet.org/sponsor/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3908 Bytes








a

https://www.abetterinternet.org/trademarks
301
/trademarks/
1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





7770 Bytes








a

https://www.ads.com/
200

1
ok
text/html
missing X-Content-Type-Options nosniff





7053 Bytes








a

https://www.akamai.com/
-14
Timeout - The operation has timed out.
1
Timeout - The operation has timed out.















a

https://www.cdmon.com/es/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





29992 Bytes








a

https://www.cdn77.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





20221 Bytes








a

https://www.cisco.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





18212 Bytes








a

https://www.clever-cloud.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





19639 Bytes








a

https://www.cloudns.net/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





25050 Bytes








a

https://www.confluent.io/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





134581 Bytes








a

https://www.cyon.ch/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





65202 Bytes








a

https://www.digitalocean.com/
200

1
ok
text/html
missing X-Content-Type-Options nosniff





38646 Bytes








a

https://www.discourse.org/
200

1
ok
text/html
missing X-Content-Type-Options nosniff





10569 Bytes








a

https://www.duda.co/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





61511 Bytes








a

https://www.duocircle.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





44710 Bytes








a

https://www.eff.org/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





12807 Bytes








a

https://www.entri.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





13377 Bytes








a

https://www.fastly.com/
200

1
ok
text/html
X-Content-Type-Options nosniff found





155905 Bytes








a

https://www.fordfoundation.org/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





25753 Bytes








a

https://www.google.com/chrome/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





51194 Bytes








a

https://www.greengeeks.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





28561 Bytes








a

https://www.haproxy.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





65574 Bytes








a

https://www.heroku.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





57563 Bytes








a

https://www.hostpapa.com/lets-encrypt-hosting?utm_source=letsencrypt.org&utm_medium=referral&utm_campaign=us-seo&utm_term=web-hosting&utm_content=180x108-logo
403
Forbidden
1
Forbidden
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





5973 Bytes








a

https://www.hostpoint.ch/
200

1
ok
text/html
X-Content-Type-Options nosniff found





50719 Bytes








a

https://www.hoststar.ch/
301
https://www.hoststar.ch/de
1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





0 Bytes








a

https://www.iban.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





10269 Bytes








a

https://www.ibm.com/
303
https://www.ibm.com/de-en
1
ok

X-Content-Type-Options nosniff found





0 Bytes








a

https://www.icuk.net/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





9299 Bytes








a

https://www.identrust.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





14696 Bytes








a

https://www.infomaniak.ch/
301
https://www.infomaniak.com/
1
ok
text/html; charset=iso-8859-1
missing X-Content-Type-Options nosniff





0 Bytes








a

https://www.interserver.net/
403
Forbidden
1
Forbidden
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





5602 Bytes








a

https://www.jimdo.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





68981 Bytes








a

https://www.linkedin.com/company/lets-encrypt/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





28649 Bytes








a

https://www.livesport.eu/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





36415 Bytes








a

https://www.mongodb.com/
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





58708 Bytes








a

https://www.mozilla.org/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





8537 Bytes








a

https://www.nabucasa.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





5329 Bytes








a

https://www.netlify.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





34182 Bytes








a

https://www.nginx.com/
301
https://www.f5.com/go/product/welcome-to-nginx
1
ok
text/html; charset=iso-8859-1
missing X-Content-Type-Options nosniff





0 Bytes








a

https://www.one.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





19019 Bytes








a

https://www.ovh.com/
301
https://www.ovh.de/
1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff





0 Bytes








a

https://www.planethoster.com/
301
/fr
1
ok
text/plain; charset=utf-8
X-Content-Type-Options nosniff found





37 Bytes








a

https://www.redhat.com/
301
https://www.redhat.com/en
1
ok

missing X-Content-Type-Options nosniff





0 Bytes








a

https://www.sakura.ad.jp/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





8111 Bytes








a

https://www.sap.com/
403
Forbidden
1
Forbidden
text/html
missing X-Content-Type-Options nosniff





365 Bytes








a

https://www.securew2.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





23384 Bytes








a

https://www.shopify.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





123348 Bytes








a

https://www.siteground.com/
302
https://de.siteground.com/
1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





0 Bytes








a

https://www.smtp2go.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





26967 Bytes








a

https://www.squarespace.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





49139 Bytes








a

https://www.vultr.com
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





85868 Bytes








a

https://www.wix.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





225090 Bytes








a

https://www.wpbeginner.com/
200

1
ok
text/html; charset=UTF-8
missing X-Content-Type-Options nosniff





46155 Bytes








a

https://www.zendesk.com/
200

1
ok
text/html; charset=utf-8
X-Content-Type-Options nosniff found





56434 Bytes








iframe
src
https://outreach.abetterinternet.org/l/1011011/2025-01-14/31v6r


1
ok















img
src
/images/language-icon128px-black.png
200

1
ok
no alt-Attributeimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4772 Bytes






ETag: "57b9e444068ff4dae949a29eb717e37d-ssl"



img
src
/images/letsencrypt-logo-horizontal.svg
200

1
ok
alt: Let's Encryptimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 4875/13457 Bytes






ETag: "5b03997347cdc7ec2df73881d1e2d8fe-ssl-df"



img
src
/images/sponsors/small/20i-logo.svg
200

1
ok
alt: 20iimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 939/2159 Bytes






ETag: "50b21478d332de1fd2536ea511a37969-ssl-df"



img
src
/images/sponsors/small/3cx-logo.png
200

1
ok
alt: 3CXimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 1878 Bytes






ETag: "890b4e277c853451f5c844972af15219-ssl"



img
src
/images/sponsors/small/4kdownload-logo.png
200

1
ok
alt: Video Downloaderimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8907 Bytes






ETag: "e8a86f06f0cb1ebf9b88363a8bd5ccda-ssl"



img
src
/images/sponsors/small/acton-family-giving-logo.png
200

1
ok
alt: Acton Family Givingimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 11944 Bytes






ETag: "2c70f8f7eff9cefc090bb909528c0b08-ssl"



img
src
/images/sponsors/small/ads-com-logo.png
200

1
ok
alt: Ads.comimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4028 Bytes






ETag: "4848522bfaa955dc110e673b15a57100-ssl"



img
src
/images/sponsors/small/akamai-logo.png
200

1
ok
alt: Akamaiimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 10783 Bytes






ETag: "bace05a8dee20c8164ece5a0267289ed-ssl"



img
src
/images/sponsors/small/automattic-logo.png
200

1
ok
alt: Automatticimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3361 Bytes






ETag: "84a9d1173bd772aa7fa22f7487886c1d-ssl"



img
src
/images/sponsors/small/aws-logo-2.png
200

1
ok
alt: Amazon Web Servicesimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 30048 Bytes






ETag: "17a13bfd3a555fcacde0a80860a6ed99-ssl"



img
src
/images/sponsors/small/bitlaunch-logo.svg
200

1
ok
alt: BitLaunchimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1849/3799 Bytes






ETag: "2fca599c243f0d39acdef7aa2c800d8d-ssl-df"



img
src
/images/sponsors/small/cargo-logo.png
200

1
ok
alt: Cargoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4914 Bytes






ETag: "118fc61f6d94807d33bece14920ce0bd-ssl"



img
src
/images/sponsors/small/cdmon-logo.png
200

1
ok
alt: cdmonimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3530 Bytes






ETag: "d6e0fe72c0749eca17bfbc62b8796379-ssl"



img
src
/images/sponsors/small/cdn77-logo.png
200

1
ok
alt: CDN77image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 36785 Bytes






ETag: "ffd4e04479aaed495ebd0eadaeca4d15-ssl"



img
src
/images/sponsors/small/chrome-logo.png
200

1
ok
alt: Google Chromeimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 9064 Bytes






ETag: "061a00611d300493a352634b0d79ff99-ssl"



img
src
/images/sponsors/small/cisco-logo.png
200

1
ok
alt: Ciscoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8543 Bytes






ETag: "3197164d5e8a0cd03164b01d367eeb14-ssl"



img
src
/images/sponsors/small/clevercloud-logo.png
200

1
ok
alt: Clever Cloudimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6318 Bytes






ETag: "4d32e11dcc9d67e9dd2c60d7e2925a9a-ssl"



img
src
/images/sponsors/small/cloudns-logo.png
200

1
ok
alt: ClouDNSimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 31583 Bytes






ETag: "06bcd959e86e9a013225e5b5f226aeef-ssl"



img
src
/images/sponsors/small/confluent-logo.svg
200

1
ok
alt: Confluentimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1844/4506 Bytes






ETag: "f5e0ca182cd94541db1b89b493bef30f-ssl-df"



img
src
/images/sponsors/small/cyon-logo.png
200

1
ok
alt: Cyonimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4026 Bytes






ETag: "dfd5b1d98f9fe6fc0fb29855ae899fb4-ssl"



img
src
/images/sponsors/small/DigitalOcean_logo.svg
200

1
ok
alt: DigitalOceanimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 2168/5885 Bytes






ETag: "38f11598a8b510b7c5d74276b2a7d88e-ssl-df"



img
src
/images/sponsors/small/discourse-logo.png
200

1
ok
alt: Discourseimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5473 Bytes






ETag: "e27ff61930ad3c55340f5108d454caa8-ssl"



img
src
/images/sponsors/small/dnsimple-logo.png
200

1
ok
alt: dnsimpleimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3814 Bytes






ETag: "134748d2e20dc1de5a7470df39a4d251-ssl"



img
src
/images/sponsors/small/domainnameshop-logo.png
200

1
ok
alt: DomainName.Shopimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4126 Bytes






ETag: "6b6ddcaa25b4ced0d7ea436ac914ce77-ssl"



img
src
/images/sponsors/small/driving-tests-logo.png
200

1
ok
alt: driving-tests.orgimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 2887 Bytes






ETag: "0fdca2e61947a6108c29cfc63aa14c19-ssl"



img
src
/images/sponsors/small/duda-logo.png
200

1
ok
alt: Dudaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6418 Bytes






ETag: "8a5db665bf51140fceacee141c4f0a05-ssl"



img
src
/images/sponsors/small/duocircle-logo.png
200

1
ok
alt: DuoCircleimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4120 Bytes






ETag: "3e5765008150f3ced389ab2df5459033-ssl"



img
src
/images/sponsors/small/eff-logo.png
200

1
ok
alt: Electronic Frontier Foundationimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 533 Bytes






ETag: "0e0757dc5308ae492f6349b3f49fc693-ssl"



img
src
/images/sponsors/small/entri-logo.svg
200

1
ok
alt: Entriimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 927/2105 Bytes






ETag: "3f2ae4383b090a2f7c3ace5ec016568c-ssl-df"



img
src
/images/sponsors/small/fastly-logo.png
200

1
ok
alt: Fastlyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7830 Bytes






ETag: "116d88460ee95477bc7c57bc19daf386-ssl"



img
src
/images/sponsors/small/ford-foundation-logo.png
200

1
ok
alt: Ford Foundationimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5097 Bytes






ETag: "440184c1918b86cb455915fcb8922218-ssl"



img
src
/images/sponsors/small/github-logo.png
200

1
ok
alt: GitHubimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3256 Bytes






ETag: "f22209ba6f339a322910c3bb40057924-ssl"



img
src
/images/sponsors/small/greengeeks-logo.png
200

1
ok
alt: GreenGeeksimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5282 Bytes






ETag: "77b2f96ba8888217589a06e28eb49074-ssl"



img
src
/images/sponsors/small/haproxy-logo.png
200

1
ok
alt: HAProxyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 6745 Bytes






ETag: "327e2d578b18816d7e626ae2d79b8890-ssl"



img
src
/images/sponsors/small/heroku-logo.png
200

1
ok
alt: Herokuimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4010 Bytes






ETag: "7025d344ec5b79ef8e90629323d89e5b-ssl"



img
src
/images/sponsors/small/hostpapa-logo.png
200

1
ok
alt: HostPapaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 11803 Bytes






ETag: "3215318729f738c725c4f930fe9798d7-ssl"



img
src
/images/sponsors/small/hostpoint-logo.png
200

1
ok
alt: HostPointimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4390 Bytes






ETag: "d392b3808b208e0c0f94845760d66037-ssl"



img
src
/images/sponsors/small/hoststar-logo.png
200

1
ok
alt: Hoststarimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5742 Bytes






ETag: "e5a875b75b87ba241849298732df5591-ssl"



img
src
/images/sponsors/small/iban-logo.png
200

1
ok
alt: IBANimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 27818 Bytes






ETag: "d1a397da043de5bcfd44bb8317f8b5af-ssl"



img
src
/images/sponsors/small/ibm-logo.png
200

1
ok
alt: IBMimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3902 Bytes






ETag: "025471ff0541e7a7945ff4acf8aec165-ssl"



img
src
/images/sponsors/small/icuk-logo-red.svg
200

1
ok
alt: ICUKimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1004/1859 Bytes






ETag: "1414a3507f4a392c2dbbb4f6df330ed0-ssl-df"



img
src
/images/sponsors/small/identrust-logo.png
200

1
ok
alt: IdenTrustimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4786 Bytes






ETag: "76cb7526208670e295ce86bfae6fc0f1-ssl"



img
src
/images/sponsors/small/infomaniak-logo.png
200

1
ok
alt: Infomaniakimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5824 Bytes






ETag: "312524dcfd8f7283e839dbf7c5587c71-ssl"



img
src
/images/sponsors/small/interserver-logo.png
200

1
ok
alt: Interserverimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 78305 Bytes






ETag: "8475248cd4d9150cf68752c38e7b0fd4-ssl"



img
src
/images/sponsors/small/ipinfo-logo.png
200

1
ok
alt: IPInfoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5339 Bytes






ETag: "2026718d54d61083cfc2b0aeb65d05c4-ssl"



img
src
/images/sponsors/small/ipv6rs-logo.png
200

1
ok
alt: IPv6rsimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 50852 Bytes






ETag: "6248dd06c022a349104f346d20a41c05-ssl"



img
src
/images/sponsors/small/jimdo-logo.png
200

1
ok
alt: Jimdoimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3001 Bytes






ETag: "b7565eead0a7835ce9e397e145eff85d-ssl"



img
src
/images/sponsors/small/keenetic-logo.png
200

1
ok
alt: Keeneticimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 1853 Bytes






ETag: "0085a6a0e86a0c14c43cab9131ec5489-ssl"



img
src
/images/sponsors/small/livesport-logo.png
200

1
ok
alt: Livesportimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 2767 Bytes






ETag: "e47e58c9a2eb7c5ec2902b7f15785b92-ssl"



img
src
/images/sponsors/small/mongodb-logo.png
200

1
ok
alt: MongoDBimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4888 Bytes






ETag: "77039ecdb479b976d423b9f2698b38eb-ssl"



img
src
/images/sponsors/small/mozilla-logo.png
200

1
ok
alt: Mozillaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4265 Bytes






ETag: "831a2cf891de48201ad13a7a3aa73f7a-ssl"



img
src
/images/sponsors/small/nabu-casa-logo.png
200

1
ok
alt: Nabu Casaimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3930 Bytes






ETag: "e8fecc4328a6a5e1f3e965d90f8f75c6-ssl"



img
src
/images/sponsors/small/netlify-logo.png
200

1
ok
alt: Netlifyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7507 Bytes






ETag: "c31309ed17f0f1bfc29df714c8d1bce5-ssl"



img
src
/images/sponsors/small/nginx-logo.png
200

1
ok
alt: NGINXimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4996 Bytes






ETag: "a4d227dec5b3236df715307066d58c88-ssl"



img
src
/images/sponsors/small/ngrok-logo.png
200

1
ok
alt: Ngrokimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8400 Bytes






ETag: "3edb25eca8d73111aad643b2807ed451-ssl"



img
src
/images/sponsors/small/one-com-logo.png
200

1
ok
alt: one.comimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3354 Bytes






ETag: "8f1ad8ed5fc5c1a08571a540468e5562-ssl"



img
src
/images/sponsors/small/ovh-logo.png
200

1
ok
alt: OVHimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5516 Bytes






ETag: "33b17d6754cc16e8322cac5eeb7beab7-ssl"



img
src
/images/sponsors/small/planethoster-logo.png
200

1
ok
alt: Hébergement webimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 12732 Bytes






ETag: "ea00c86059d86be4526783dbe26acde1-ssl"



img
src
/images/sponsors/small/rack-speed-logo.png
200

1
ok
alt: RACK::SPEEDimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4156 Bytes






ETag: "801e18ee0d2b85251bec8f50384602c2-ssl"



img
src
/images/sponsors/small/redhat-logo.png
200

1
ok
alt: RedHatimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5601 Bytes






ETag: "6afa545632ffe3bbd177b29378f37114-ssl"



img
src
/images/sponsors/small/sakura-logo.png
200

1
ok
alt: Sakura Internetimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5402 Bytes






ETag: "a442d637170323b1294b96a6bfa94e95-ssl"



img
src
/images/sponsors/small/sap-logo.svg
200

1
ok
alt: SAPimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 880/1678 Bytes






ETag: "f232bc9de15755de6cddc18aa940c6fd-ssl-df"



img
src
/images/sponsors/small/securew2-logo.png
200

1
ok
alt: SecureW2image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 43051 Bytes






ETag: "808d206f96adc359d1614bd42c309489-ssl"



img
src
/images/sponsors/small/SerpApi-black.png
200

1
ok
alt: SerpApiimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 8192 Bytes






ETag: "739ea51179e55b54d703380d4c20a149-ssl"



img
src
/images/sponsors/small/serverpilot-logo.png
200

1
ok
alt: ServerPilotimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7196 Bytes






ETag: "a054be0a7c4990e4daad99f9a048828c-ssl"



img
src
/images/sponsors/small/shiguredo-v2-logo.svg
200

1
ok
alt: Shiguredoimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 3895/9596 Bytes






ETag: "7546a288976965703364aead18e3684d-ssl-df"



img
src
/images/sponsors/small/shopify-logo.png
200

1
ok
alt: Shopifyimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 9475 Bytes






ETag: "71afeacb52d32b761bd3c43e0d524676-ssl"



img
src
/images/sponsors/small/showit-logo.png
200

1
ok
alt: Showitimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 26273 Bytes






ETag: "90d34c2ebf77a5cdd97d485dbb84d8db-ssl"



img
src
/images/sponsors/small/siteground-logo.png
200

1
ok
alt: SiteGroundimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 10235 Bytes






ETag: "813ab2c89f2ba9c73cff122ca752c141-ssl"



img
src
/images/sponsors/small/smtp2go-logo.png
200

1
ok
alt: SMTP2GOimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 83357 Bytes






ETag: "d065f4a167c9f81e5713abef71c3e405-ssl"



img
src
/images/sponsors/small/snipeit-logo.png
200

1
ok
alt: Snipe-ITimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 16551 Bytes






ETag: "f662a678fcc545adf39b9beed9806dcf-ssl"



img
src
/images/sponsors/small/squarespace-logo.png
200

1
ok
alt: Squarespaceimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4779 Bytes






ETag: "fc2cab15c9ed6782061ff527bb2df979-ssl"



img
src
/images/sponsors/small/tailscale-logo.svg
200

1
ok
alt: Tailscaleimage/svg+xml
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1510/4427 Bytes






ETag: "4bc49801ef28c8f9753ca8de59309bc9-ssl-df"



img
src
/images/sponsors/small/teleport-logo.png
200

1
ok
alt: Teleportimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3705 Bytes






ETag: "d9656a1fe662a24103d185b35b32038a-ssl"



img
src
/images/sponsors/small/unraid-logo.png
200

1
ok
alt: Lime Technology (Unraid)image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3236 Bytes






ETag: "4f3a91fabfcd3096dbfa9f05d461ec1d-ssl"



img
src
/images/sponsors/small/vultr-logo.png
200

1
ok
alt: Vultrimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 7123 Bytes






ETag: "38759304d1ed3e9351a94ec15b1b2b47-ssl"



img
src
/images/sponsors/small/wix-logo.png
200

1
ok
alt: Wiximage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 4613 Bytes






ETag: "cc723eceaaeb94c01f04a00094eee118-ssl"



img
src
/images/sponsors/small/wpbeginner-logo.png
200

1
ok
alt: WPBeginnerimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 3948 Bytes






ETag: "2467a23fe18fb614676a82e6a43fd3dc-ssl"



img
src
/images/sponsors/small/zendesk-logo.png
200

1
ok
alt: Zendeskimage/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 5499 Bytes






ETag: "2135f40c083966269f55d24442c25a3e-ssl"



link
alternate
/feed.xml


1
ok















link
canonical
/


1
ok















link
stylesheet
/css/main.min.b82cdd11679484f398baf9bacf803d8462927aa48f722830017495d4167c643ebbbb110bd864533e2f9493fd4bc344bd859fa8874c32e6a0d7e24d95c3d11b59.css
200

1
ok
text/css; charset=UTF-8
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 9016/45266 Bytes






ETag: "464e78d8deaf662344c8b560e2f48efb-ssl-df"

SRI found. Integrity:
sha512-uCzdEWeUhPOYuvm6z4A9hGKSeqSPcigwAXSV1BZ8ZD67uxEL2GRTPi+Uk/1Lw0S9hZ+oh0wy5qDX4k2Vw9EbWQ==
crossorigin: no crossorigin defined
No SRI Parse error
valid



link
stylesheet
/fontawesome-free-6.5.2-web/css/all.min.css
200

1
ok
text/css; charset=UTF-8
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 22064/103009 Bytes






ETag: "05513efce9d88b8dfb8678fcaf50d95d-ssl-df"

local SRI possible, possible hash-values:

 

sha256-XOqroi11tY4EFQMR9ZYwZWKj5ZXiftSx36RRuC3anlA=
sha384-PPIZEGYM1v8zp5Py7UjFb79S58UeqCL9pYVnVPURKEqvioPROaVAJKKLzvH2rDnI
sha512-SnH5WK+bZxgPHs44uWIX+LLJAJ9/2PkPKZ5QiAj6Ta86w+fsb2TkcmfRyVX3pBnMFcV7oQPJkl9QevSCWr3W6A==

 

<link rel="stylesheet" href="/fontawesome-free-6.5.2-web/css/all.min.css" crossorigin="anonymous" integrity="sha256-XOqroi11tY4EFQMR9ZYwZWKj5ZXiftSx36RRuC3anlA=" />



meta
charset
utf-8


1
ok















meta
og:description
Let's Encrypt is a free, automated, and open Certificate Authority brought to you by the nonprofit Internet Security Research Group (ISRG). Read all about our nonprofit work this year in our 2024 Annual Report.


1
ok















meta
og:image
https://letsencrypt.org/images/LetsEncrypt-SocialShare.png
200

1
ok
image/png
X-Content-Type-Options nosniff found





Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
No Compression - 21513 Bytes






ETag: "f69a4a7f3bd0dcf77d474f54e605ef24-ssl"



meta
og:title
Let's Encrypt


1
ok















meta
og:type
website


1
ok















meta
og:url
https://letsencrypt.org/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5720 Bytes






ETag: "0098686c2f97f26b1a89102f9b789315-ssl-df"



meta
X-UA-Compatible
IE=edge


1
ok















meta
description
Let's Encrypt is a free, automated, and open Certificate Authority brought to you by the nonprofit Internet Security Research Group (ISRG). Read all about our nonprofit work this year in our 2024 Annual Report.


1
ok















meta
generator
Hugo 0.130.0


1
ok















meta
viewport
width=device-width, initial-scale=1


1
ok















script
src
/js/main.a572b61495f9d8fe4e5ec075082ddfe85e5a5ff501c15c499d3f2a4bed71afb6fe89e85f3202aa8fdeebcda97645416bfc75683c2d3471485b5668a6d5f98740.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript; charset=UTF-8
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: public, must-revalidate, max-age=0 - max-age too short.
Compression (br): 1437/4576 Bytes






ETag: "0aad23b251916fbe4694d6df71c47a7d-ssl-df"

SRI found. Integrity:
sha512-pXK2FJX52P5OXsB1CC3f6F5aX/UBwVxJnT8qS+1xr7b+iehfMgKqj97rzal2RUFr/HVoPC00cUhbVmim1fmHQA==
crossorigin: no crossorigin defined
No SRI Parse error
valid



script
src
https://donorbox.org/install-popup-button.js
200

1
ok
defer attribute found text/javascript
missing X-Content-Type-Options nosniff





Cache-Control: public, max-age=0, s-maxage=3600 - max-age too short.
Compression (br): 5771/15100 Bytes






Server-Header Access-Control-Allow-Origin: not found
Cross-Origin Resource Sharing (CORS) not supported



script
src
https://www.googletagmanager.com/gtag/js?id=G-XEJKGKMHBK
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript; charset=UTF-8
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=900, private - max-age too short.
Compression (br): 100534/285011 Bytes






Server-Header Access-Control-Allow-Origin: https://letsencrypt.org
Cross-Origin Resource Sharing (CORS) not supported


2a05:d014:58f:6200::65
a

#


3
ok















a

#main-content


1
ok















a

/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5720 Bytes








a

/2023/07/10/cross-sign-expiration/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5395 Bytes








a

/2024/12/11/eoy-letter-2024/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4701 Bytes








a

/2025/01/09/acme-profiles/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5582 Bytes








a

/2025/01/16/6-day-and-ip-certs/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4630 Bytes








a

/2025/01/22/ending-expiration-emails/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3927 Bytes








a

/2025/01/30/scaling-rate-limits/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





9355 Bytes








a

/about/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4477 Bytes








a

/blog/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





12505 Bytes








a

/ca/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5616 Bytes








a

/contact/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4099 Bytes








a

/cs/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6052 Bytes








a

/da/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5905 Bytes








a

/de/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5893 Bytes








a

/docs/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





3798 Bytes








a

/docs/faq/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





7132 Bytes








a

/donate/
200

2
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4986 Bytes








a

/el/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6084 Bytes








a

/es/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5865 Bytes








a

/feed.xml
200

1
ok
application/xml
X-Content-Type-Options nosniff found





17822 Bytes








a

/fi/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5951 Bytes








a

/fr/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5915 Bytes








a

/getinvolved/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





4369 Bytes








a

/getting-started/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5326 Bytes








a

/he/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





6087 Bytes








a

/hu/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





5894 Bytes







 

12. Html-Parsing via https://validator.w3.org/nu/

Url used (first standard-https-result with http status 200): https://letsencrypt.org/

Summary

Good: No non-document-errors
0 errors
1 warnings

TypeMessagenum found
1.warningThe type attribute is unnecessary for JavaScript resources.1

Details


TypeMessage + Sample
1warningThe type attribute is unnecessary for JavaScript resources.

From line 63, column 1 to line 63, column 125

ay. </a> <script type="text/javascript" defer src="https://donorbox.org/install-popup-button.js" id="donorbox-popup-button-installer"> </scr

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: owen.ns.cloudflare.com, vera.ns.cloudflare.com

 

QNr.DomainTypeNS used
1
com
NS
f.root-servers.net (2001:500:2f::f)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
owen.ns.cloudflare.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com

Answer: ns3.cloudflare.com
162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2

Answer: ns4.cloudflare.com
162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837

Answer: ns5.cloudflare.com
162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937

Answer: ns6.cloudflare.com
162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506

Answer: ns7.cloudflare.com
162.159.4.8, 162.159.6.6, 2400:cb00:2049:1::a29f:408, 2400:cb00:2049:1::a29f:606
3
vera.ns.cloudflare.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com

Answer: ns3.cloudflare.com
162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2

Answer: ns4.cloudflare.com
162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837

Answer: ns5.cloudflare.com
162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937

Answer: ns6.cloudflare.com
162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506

Answer: ns7.cloudflare.com
162.159.4.8, 162.159.6.6, 2400:cb00:2049:1::a29f:408, 2400:cb00:2049:1::a29f:606
4
owen.ns.cloudflare.com: 108.162.193.219, 172.64.33.219, 173.245.59.219
A
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)