Check DNS, Urls + Redirects, Certificates and Content of your Website


Info: Problems with 3.048.289 Letsencrypt certificates (378.325 accounts). They must be revoked (revocation starts 2020-03-04 20:00 UTC) - see Revoking certain certificates on March 4. Update 2020-03-07: Good news: Mass-revocation is canceled.

This tool: A check (SerialNumber) is added. Letsencrypt has published a list of critical SerialNumbers, this list is checked. See the part "9. Certificates". If there is a warning, renew that certificate and replace the current certificate.




N

No trusted Certificate

Checked:
06.04.2020 23:39:35


Older results

No older results found


1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
lms.edop.com.tr
A
34.91.43.172
Newark/New Jersey/United States (US) - Google LLC
Hostname: 172.43.91.34.bc.googleusercontent.com
yes
1
0

AAAA

yes


www.lms.edop.com.tr
A
34.91.43.172
Newark/New Jersey/United States (US) - Google LLC
Hostname: 172.43.91.34.bc.googleusercontent.com
yes
1
0

AAAA

yes



2. DNSSEC

Info: The Xml-split has triggered some hidden bugs. Now it looks ok.
If root or the top level zone isn't validated, it's buggy.
Both green and your domain is red -> it's your domain.

Zone (*)DNSSEC - Informations

Zone: (root)
(root)
1 DS RR published



Status: Valid because published



3 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 33853, Flags 256



Public Key with Algorithm 8, KeyTag 48903, Flags 256



1 RRSIG RR to validate DNSKEY RR found



Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.04.2020, 00:00:00 +, Signature-Inception: 01.04.2020, 00:00:00 +, KeyTag 20326, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: tr
tr
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "tr" and the NextOwner "trade". So the parent zone confirmes the non-existence of a DS RR. Bitmap: NS, RRSIG, NSEC



0 DNSKEY RR found





Zone: com.tr
com.tr
0 DS RR in the parent zone found



0 DNSKEY RR found





Zone: edop.com.tr
edop.com.tr
0 DS RR in the parent zone found



2 DNSKEY RR found



Public Key with Algorithm 13, KeyTag 2371, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 13, KeyTag 34505, Flags 256



1 RRSIG RR to validate DNSKEY RR found



Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 25.04.2020, 17:10:55 +, Signature-Inception: 25.02.2020, 17:10:55 +, KeyTag 2371, Signer-Name: edop.com.tr



Status: Good - Algorithmus 13 and DNSKEY with KeyTag 2371 used to validate the DNSKEY RRSet



Fatal error: DNSKEY 2371 signs DNSKEY RRset, but no confirming DS RR in the parent zone found. No chain of trust created.

Zone: lms.edop.com.tr
lms.edop.com.tr
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "lms.edop.com.tr" and the NextOwner "\000.lms.edop.com.tr". So the parent zone confirmes the non-existence of a DS RR. Bitmap: A, 13, MX, TXT, AAAA, LOC, SRV, CERT, SSHFP, RRSIG, NSEC, TLSA, HIP, 61, 99, CAA



0 DNSKEY RR found







RRSIG Type 1, expiration 2020-04-07 22:40:27 + validates the A - Result: 34.91.43.172



RRSIG Type 47, expiration 2020-04-07 22:40:27 + validates the NSEC RR that proves the not-existence of the CNAME RR. Owner lms.edop.com.tr, NextOwner: \000.lms.edop.com.tr. Bitmap: A, 13, MX, TXT, AAAA, LOC, SRV, CERT, SSHFP, RRSIG, NSEC, TLSA, HIP, 61, 99, CAA



RRSIG Type 47, expiration 2020-04-07 22:40:27 + validates the NSEC RR that proves the not-existence of the TXT RR. Owner lms.edop.com.tr, NextOwner: \000.lms.edop.com.tr. Bitmap: A, 13, MX, AAAA, LOC, SRV, CERT, SSHFP, RRSIG, NSEC, TLSA, HIP, 61, 99, CAA



RRSIG Type 47, expiration 2020-04-07 22:40:27 + validates the NSEC RR that proves the not-existence of the AAAA RR. Owner lms.edop.com.tr, NextOwner: \000.lms.edop.com.tr. Bitmap: A, 13, MX, TXT, LOC, SRV, CERT, SSHFP, RRSIG, NSEC, TLSA, HIP, 61, 99, CAA



RRSIG Type 47, expiration 2020-04-07 22:40:28 + validates the NSEC RR that proves the not-existence of the TLSA RR. Owner _443._tcp.lms.edop.com.tr, NextOwner: \000._443._tcp.lms.edop.com.tr. Bitmap: RRSIG, NSEC



RRSIG Type 47, expiration 2020-04-07 22:40:28 + validates the NSEC RR that proves the not-existence of the CAA RR. Owner lms.edop.com.tr, NextOwner: \000.lms.edop.com.tr. Bitmap: A, 13, MX, TXT, AAAA, LOC, SRV, CERT, SSHFP, RRSIG, NSEC, TLSA, HIP, 61, 99

Zone: www.lms.edop.com.tr
www.lms.edop.com.tr
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "www.lms.edop.com.tr" and the NextOwner "\000.www.lms.edop.com.tr". So the parent zone confirmes the non-existence of a DS RR. Bitmap: A, 13, MX, TXT, AAAA, LOC, SRV, CERT, SSHFP, RRSIG, NSEC, TLSA, HIP, 61, 99, CAA



RRSIG Type 1, expiration 2020-04-07 22:40:30 + validates the A - Result: 34.91.43.172



RRSIG Type 47, expiration 2020-04-07 22:40:30 + validates the NSEC RR that proves the not-existence of the CNAME RR. Owner www.lms.edop.com.tr, NextOwner: \000.www.lms.edop.com.tr. Bitmap: A, 13, MX, TXT, AAAA, LOC, SRV, CERT, SSHFP, RRSIG, NSEC, TLSA, HIP, 61, 99, CAA



RRSIG Type 47, expiration 2020-04-07 22:40:30 + validates the NSEC RR that proves the not-existence of the TXT RR. Owner www.lms.edop.com.tr, NextOwner: \000.www.lms.edop.com.tr. Bitmap: A, 13, MX, AAAA, LOC, SRV, CERT, SSHFP, RRSIG, NSEC, TLSA, HIP, 61, 99, CAA



RRSIG Type 47, expiration 2020-04-07 22:40:30 + validates the NSEC RR that proves the not-existence of the AAAA RR. Owner www.lms.edop.com.tr, NextOwner: \000.www.lms.edop.com.tr. Bitmap: A, 13, MX, TXT, LOC, SRV, CERT, SSHFP, RRSIG, NSEC, TLSA, HIP, 61, 99, CAA



RRSIG Type 47, expiration 2020-04-07 22:40:30 + validates the NSEC RR that proves the not-existence of the TLSA RR. Owner _443._tcp.www.lms.edop.com.tr, NextOwner: \000._443._tcp.www.lms.edop.com.tr. Bitmap: RRSIG, NSEC



RRSIG Type 47, expiration 2020-04-07 22:40:30 + validates the NSEC RR that proves the not-existence of the CAA RR. Owner www.lms.edop.com.tr, NextOwner: \000.www.lms.edop.com.tr. Bitmap: A, 13, MX, TXT, AAAA, LOC, SRV, CERT, SSHFP, RRSIG, NSEC, TLSA, HIP, 61, 99


3. Name Servers

DomainNameserverNS-IP
www.lms.edop.com.tr
  nora.ns.cloudflare.com / 71m456

lms.edop.com.tr
  nora.ns.cloudflare.com / 71m428
173.245.58.213
Chicago/Illinois/United States (US) - Cloudflare, Inc.


 
2606:4700:50::adf5:3ad5
San Francisco/California/United States (US) - Cloudflare, Inc.

edop.com.tr
  nora.ns.cloudflare.com / 71m460


  vick.ns.cloudflare.com / 71m386

com.tr
  lns21.nic.tr


  lns22.nic.tr


  lns31.nic.tr


  lns34.nic.tr


  lns35.nic.tr


  lns41.nic.tr


  lns42.nic.tr


  lns5.nic.tr


  lns61.nic.tr / 2.fra.pch


  lns91.nic.tr / hivecast-167-zadur.as15135.net TR-A


  lns92.nic.tr / hivecast-168-zajnb.as15135.net TR-B

tr
  ns21.nic.tr


  ns22.nic.tr


  ns31.nic.tr


  ns41.nic.tr


  ns42.nic.tr


  ns91.nic.tr / hivecast-167-zadur.as15135.net TR-A


  ns92.nic.tr / hivecast-168-zajnb.as15135.net TR-B


4. SOA-Entries


Domain:tr
Zone-Name:
Primary:ns42.nic.tr
Mail:hostmaster.nic.tr
Serial:2018041001
Refresh:14400
Retry:3600
Expire:1209600
TTL:86400
num Entries:7


Domain:com.tr
Zone-Name:
Primary:ns42.nic.tr
Mail:hostmaster.nic.tr
Serial:1586196002
Refresh:21600
Retry:3600
Expire:57600
TTL:3600
num Entries:11


Domain:edop.com.tr
Zone-Name:
Primary:nora.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2033787330
Refresh:10000
Retry:2400
Expire:604800
TTL:3600
num Entries:2


Domain:lms.edop.com.tr
Zone-Name:
Primary:nora.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2033787330
Refresh:10000
Retry:2400
Expire:604800
TTL:3600
num Entries:2


Domain:www.lms.edop.com.tr
Zone-Name:
Primary:nora.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2033787330
Refresh:10000
Retry:2400
Expire:604800
TTL:3600
num Entries:1


5. Screenshots

Startaddress: https://lms.edop.com.tr, address used: https://lms.edop.com.tr/, Screenshot created 2020-04-06 23:41:27 +00:0 url is insecure, certificate invalid

Mobil (412px x 732px)

300 milliseconds

Screenshot mobile - https://lms.edop.com.tr/
Mobil + Landscape (732px x 412px)

310 milliseconds

Screenshot mobile landscape - https://lms.edop.com.tr/
Screen (1280px x 1680px)

463 milliseconds

Screenshot Desktop - https://lms.edop.com.tr/

Mobile- and other Chrome-Checks

widthheight
visual Viewport412716
content Size463716

Fatal: Horizontal scrollbar detected. Content-size width is greater then visual Viewport width.

Chrome-Connection: secure. secure connection settings. The connection to this site is encrypted and authenticated using TLS 1.2, ECDHE_RSA with X25519, and AES_256_GCM.

Chrome-Resources : secure. all served securely. All resources on this page are served securely.

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://lms.edop.com.tr/
34.91.43.172 GZip used - 546 / 1051 - 48.05 %
200

Html is minified: 212.32 %
0.067
H
small visible content (num chars: 31)
s1.edop.com.tr Powered by VESTA
Server: nginx
Date: Mon, 06 Apr 2020 21:40:40 GMT
Content-Type: text/html
Last-Modified: Sun, 05 Apr 2020 16:39:21 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
ETag: W/"5e8a09b9-41b"
Content-Encoding: gzip

• http://www.lms.edop.com.tr/
34.91.43.172 GZip used - 546 / 1051 - 48.05 %
200

Html is minified: 212.32 %
0.057
H
small visible content (num chars: 31)
s1.edop.com.tr Powered by VESTA
Server: nginx
Date: Mon, 06 Apr 2020 21:40:40 GMT
Content-Type: text/html
Last-Modified: Sun, 05 Apr 2020 16:39:21 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
ETag: W/"5e8a09b9-41b"
Content-Encoding: gzip

• https://lms.edop.com.tr/
34.91.43.172 GZip used - 546 / 1051 - 48.05 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/474
200

Html is minified: 212.32 %
3.550
N
Certificate error: RemoteCertificateNameMismatch
small visible content (num chars: 31)
s1.edop.com.tr Powered by VESTA
Server: nginx
Date: Mon, 06 Apr 2020 21:40:40 GMT
Content-Type: text/html
Last-Modified: Sun, 05 Apr 2020 16:39:21 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
ETag: W/"5e8a09b9-41b"
Content-Encoding: gzip

• https://www.lms.edop.com.tr/
34.91.43.172 GZip used - 546 / 1051 - 48.05 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/474
200

Html is minified: 212.32 %
3.334
N
Certificate error: RemoteCertificateNameMismatch
small visible content (num chars: 31)
s1.edop.com.tr Powered by VESTA
Server: nginx
Date: Mon, 06 Apr 2020 21:40:44 GMT
Content-Type: text/html
Last-Modified: Sun, 05 Apr 2020 16:39:21 GMT
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
ETag: W/"5e8a09b9-41b"
Content-Encoding: gzip

• http://lms.edop.com.tr/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
34.91.43.172
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
200

Html is minified: 100.00 %
0.076
A
Visible Content: check-your-website-dot-server-daten-dot-de.wVtgNvXbtcaXIABE6xGGe5dHZgcRSyV7uzQNxr0urjE
Server: nginx
Date: Mon, 06 Apr 2020 21:40:48 GMT
Content-Type: text/plain
Content-Length: 86
Connection: close

• http://www.lms.edop.com.tr/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
34.91.43.172
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
200

Html is minified: 100.00 %
0.053
A
Visible Content: check-your-website-dot-server-daten-dot-de.wVtgNvXbtcaXIABE6xGGe5dHZgcRSyV7uzQNxr0urjE
Server: nginx
Date: Mon, 06 Apr 2020 21:40:48 GMT
Content-Type: text/plain
Content-Length: 86
Connection: close

7. Comments


1. General Results, most used to calculate the result

Aname "lms.edop.com.tr" is subdomain, public suffix is "com.tr", top-level-domain-type is "country-code", Country is Turkey, tld-manager is "Middle East Technical University Department of Computer Engineering"
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):0 complete Content-Type - header (6 urls)
http://lms.edop.com.tr/ 34.91.43.172


Url with incomplete Content-Type - header - missing charset
http://www.lms.edop.com.tr/ 34.91.43.172


Url with incomplete Content-Type - header - missing charset
https://lms.edop.com.tr/ 34.91.43.172


Url with incomplete Content-Type - header - missing charset
https://www.lms.edop.com.tr/ 34.91.43.172


Url with incomplete Content-Type - header - missing charset
http://lms.edop.com.tr/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 34.91.43.172


Url with incomplete Content-Type - header - missing charset
http://www.lms.edop.com.tr/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 34.91.43.172


Url with incomplete Content-Type - header - missing charset
Bhttps://lms.edop.com.tr/ 34.91.43.172
200

Missing HSTS-Header
Bhttps://www.lms.edop.com.tr/ 34.91.43.172
200

Missing HSTS-Header
CError - no preferred version www or non-www. Select one version as preferred version, then add a redirect https + not-preferred version to https + preferred version. Perhaps in your port 443 vHost something like "RewriteEngine on" + "RewriteCond %{SERVER_NAME} = example.com" + "ReWriteRule ^ https://www.example.com%{REQUEST_URI} [END,QSA,R=permanent]" (three rows, without the "). That should create a redirect https + example.com ⇒ https + www.example.com. Or switch both values to use the non-www version as your preferred version.
CError - more then one version with Http-Status 200. After all redirects, all users (and search engines) should see the same https url: Non-www or www, but not both with http status 200.
HFatal error: http result with http-status 200, no encryption. Add a redirect http ⇒ https, so every connection is secure. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop.
Nhttps://lms.edop.com.tr/ 34.91.43.172
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://www.lms.edop.com.tr/ 34.91.43.172
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nlms.edop.com.tr:8083


Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nwww.lms.edop.com.tr:8083


Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N34.91.43.172:8083


Error - Certificate isn't trusted, RemoteCertificateNameMismatch

2. DNS- and NameServer - Checks

AGood: Nameserver supports TCP connections: 2 good Nameserver
AGood: Nameserver supports Echo Capitalization: 2 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 2 good Nameserver
Nameserver doesn't pass all EDNS-Checks: lns5.nic.tr: OP100: ok. FLAGS: ok. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: ok. V1DNSSEC: fatal timeout. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns91.nic.tr: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: fatal timeout. NSID: ok (hivecast-167-zadur.as15135.net TR-A). COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

3. Content- and Performance-critical Checks

Ahttp://lms.edop.com.tr/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 34.91.43.172
200

Good: Acme-Check - Answer looks like a correct keyAuthorization - String: Filename + "." + base64url(Thumbprint(accountKey)). So creating a Letsencrypt certificate using that integrated solution should work. Don't use another client (like Certbot). Don't mix integrated solutions with own ACME-clients, that may not work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
Ahttp://www.lms.edop.com.tr/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 34.91.43.172
200

Good: Acme-Check - Answer looks like a correct keyAuthorization - String: Filename + "." + base64url(Thumbprint(accountKey)). So creating a Letsencrypt certificate using that integrated solution should work. Don't use another client (like Certbot). Don't mix integrated solutions with own ACME-clients, that may not work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 supports GZip.
https://lms.edop.com.tr/ 34.91.43.172
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.lms.edop.com.tr/ 34.91.43.172
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://lms.edop.com.tr/ 34.91.43.172
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://www.lms.edop.com.tr/ 34.91.43.172
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://lms.edop.com.tr/ 34.91.43.172
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
https://www.lms.edop.com.tr/ 34.91.43.172
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
ADuration: 116457 milliseconds, 116.457 seconds


8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
lms.edop.com.tr
34.91.43.172
443
name does not match
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
error checking OCSP stapling
ok
lms.edop.com.tr
34.91.43.172
443
name does not match
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
Tls.1.2
Tls.1.1
Tls.1.0
Chain (complete)
1CN=s1.edop.com.tr

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


www.lms.edop.com.tr
34.91.43.172
443
name does not match
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
error checking OCSP stapling
ok

www.lms.edop.com.tr
34.91.43.172
443
name does not match
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
Tls.1.2
Tls.1.1
Tls.1.0
Chain (complete)
1CN=s1.edop.com.tr

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


lms.edop.com.tr
lms.edop.com.tr
8083
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok

lms.edop.com.tr
lms.edop.com.tr
8083
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
Tls.1.2
Tls.1.1
Tls.1.0
Chain - incomplete
1CN=s1.edop.com.tr


www.lms.edop.com.tr
www.lms.edop.com.tr
8083
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok

www.lms.edop.com.tr
www.lms.edop.com.tr
8083
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
Tls.1.2
Tls.1.1
Tls.1.0
Chain - incomplete
1CN=s1.edop.com.tr


34.91.43.172
34.91.43.172
8083
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok

34.91.43.172
34.91.43.172
8083
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
Tls.1.2
Tls.1.1
Tls.1.0
Chain - incomplete
1CN=s1.edop.com.tr


9. Certificates

1.
1.
CN=s1.edop.com.tr
05.04.2020
04.07.2020
expires in 33 days
s1.edop.com.tr, www.s1.edop.com.tr - 2 entries
1.
1.
CN=s1.edop.com.tr
05.04.2020

04.07.2020
expires in 33 days
s1.edop.com.tr, www.s1.edop.com.tr - 2 entries

KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0343AE24925AF832F51CBB1D80D45EA0A165
Thumbprint:E38409FA092D7D7CED47A1C8A78A0C8F6C3874B8
SHA256 / Certificate:2FYqR0oBZ0Y7FOmSezdmnVLbLqO4zl3V5BgTvjDPc+c=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):fd5050cf117a8fb6a9ce56bba60f5337a4e37cea11290f937a2311a711b96440
SHA256 hex / Subject Public Key Information (SPKI):5ec0d668f3724f909662ebccbbc298c0bd3fe4f1dab9ab4cf7dc05817bddbcf4
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.int-x3.letsencrypt.org
OCSP - must staple:no
Certificate Transparency:yes


2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
17.03.2016
17.03.2021
expires in 289 days


2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
17.03.2016

17.03.2021
expires in 289 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0A0141420000015385736A0B85ECA708
Thumbprint:E6A3B45B062D509B3382282D196EFE97D5956CCB
SHA256 / Certificate:JYR9Zo608E/dQLErawdAxWfafQJDCOtsLJb+QdneIY0=
SHA256 hex / Cert (DANE * 0 1):25847d668eb4f04fdd40b12b6b0740c567da7d024308eb6c2c96fe41d9de218d
SHA256 hex / PublicKey (DANE * 1 1):60b87575447dcba2a36b7d11ac09fb24a9db406fee12d2cc90180517616e8a18
SHA256 hex / Subject Public Key Information (SPKI):cbb93d32de628874a3ecfb92affadc97f1b795f84cc6f24221a089dee1aa25ad
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://isrg.trustid.ocsp.identrust.com
OCSP - must staple:no
Certificate Transparency:no


3.
CN=DST Root CA X3, O=Digital Signature Trust Co.
30.09.2000
30.09.2021
expires in 486 days


3.
CN=DST Root CA X3, O=Digital Signature Trust Co.
30.09.2000

30.09.2021
expires in 486 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:44AFB080D6A327BA893039862EF8406B
Thumbprint:DAC9024F54D8F6DF94935FB1732638CA6AD77C13
SHA256 / Certificate:BocmAzGnJAPZCfEF5pvPDTLhvSST/8bZIG0RvNZ3Bzk=
SHA256 hex / Cert (DANE * 0 1):0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739
SHA256 hex / PublicKey (DANE * 1 1):563b3caf8cfef34c2335caf560a7a95906e8488462eb75ac59784830df9e5b2b
SHA256 hex / Subject Public Key Information (SPKI):29cc40db5e2de462a311cbbafaa1dc466960002335ecdf3317f2cd05c1d0bedf
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no



10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1474988130
leaf cert
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2020-03-04 22:04:43
2020-06-02 22:04:43
lms.edop.com.tr - 1 entries



2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > 2019 are listed

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0 /0 new
1
3

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
2548322413
leaf cert
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2020-03-04 21:04:43
2020-06-02 20:04:43
lms.edop.com.tr
1 entries


2307325401
leaf cert
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2020-01-04 20:56:59
2020-04-03 19:56:59
lms.edop.com.tr
1 entries


2079984826
precert
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-11-06 20:54:47
2020-02-04 20:54:47
lms.edop.com.tr
1 entries



11. Html-Content - Entries

Summary

Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://lms.edop.com.tr/
34.91.43.172
a

1

0


0
0
0


meta
other
2

0


0
0
0

https://www.lms.edop.com.tr/
34.91.43.172
a

1

0


0
0
0


meta
other
2

0


0
0
0

Details

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://lms.edop.com.tr/
34.91.43.172
a

http://vestacp.com/


1
ok








meta
Content-Type
text/html; charset=UTF-8


1
ok








meta
description
This is a default index page for a new domain.


1
ok







https://www.lms.edop.com.tr/
34.91.43.172
a

http://vestacp.com/


1
ok








meta
Content-Type
text/html; charset=UTF-8


1
ok








meta
description
This is a default index page for a new domain.


1
ok








12. Nameserver - IP-Adresses (alpha)

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers:

No NameServer - IP address informations found. The feature is new (2020-05-07), so recheck this domain.


13. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.lms.edop.com.tr
0

no CAA entry found
1
0
lms.edop.com.tr
0

no CAA entry found
1
0
edop.com.tr
0

no CAA entry found
1
0
com.tr
0

no CAA entry found
1
0
tr
0

no CAA entry found
1
0


14. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
edop.com.tr
v=spf1 redirect=_spf.yandex.net
ok
1
0
lms.edop.com.tr

ok
1
0
www.lms.edop.com.tr

ok
1
0
_acme-challenge.lms.edop.com.tr

Name Error - The domain name does not exist
1
0
_acme-challenge.www.lms.edop.com.tr

Name Error - The domain name does not exist
1
0
_acme-challenge.lms.edop.com.tr.edop.com.tr

Name Error - The domain name does not exist
1
0
_acme-challenge.lms.edop.com.tr.lms.edop.com.tr

Name Error - The domain name does not exist
1
0
_acme-challenge.www.lms.edop.com.tr.lms.edop.com.tr

Name Error - The domain name does not exist
1
0
_acme-challenge.www.lms.edop.com.tr.www.lms.edop.com.tr

Name Error - The domain name does not exist
1
0


15. Portchecks

Domain or IPPortDescriptionResultAnswer
lms.edop.com.tr
21
FTP



lms.edop.com.tr
21
FTP



lms.edop.com.tr
22
SSH
open
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

lms.edop.com.tr
22
SSH
open
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

lms.edop.com.tr
25
SMTP



lms.edop.com.tr
25
SMTP



lms.edop.com.tr
53
DNS



lms.edop.com.tr
53
DNS



lms.edop.com.tr
110
POP3



lms.edop.com.tr
110
POP3



lms.edop.com.tr
143
IMAP



lms.edop.com.tr
143
IMAP



lms.edop.com.tr
465
SMTP (encrypted)



lms.edop.com.tr
465
SMTP (encrypted)



lms.edop.com.tr
587
SMTP (encrypted, submission)



lms.edop.com.tr
587
SMTP (encrypted, submission)



lms.edop.com.tr
993
IMAP (encrypted)



lms.edop.com.tr
993
IMAP (encrypted)



lms.edop.com.tr
995
POP3 (encrypted)



lms.edop.com.tr
995
POP3 (encrypted)



lms.edop.com.tr
1433
MS SQL



lms.edop.com.tr
1433
MS SQL



lms.edop.com.tr
2082
cPanel (http)



lms.edop.com.tr
2082
cPanel (http)



lms.edop.com.tr
2083
cPanel (https)



lms.edop.com.tr
2083
cPanel (https)



lms.edop.com.tr
2086
WHM (http)



lms.edop.com.tr
2086
WHM (http)



lms.edop.com.tr
2087
WHM (https)



lms.edop.com.tr
2087
WHM (https)



lms.edop.com.tr
2089
cPanel Licensing



lms.edop.com.tr
2089
cPanel Licensing



lms.edop.com.tr
2095
cPanel Webmail (http)



lms.edop.com.tr
2095
cPanel Webmail (http)



lms.edop.com.tr
2096
cPanel Webmail (https)



lms.edop.com.tr
2096
cPanel Webmail (https)



lms.edop.com.tr
2222
DirectAdmin (http)



lms.edop.com.tr
2222
DirectAdmin (http)



lms.edop.com.tr
2222
DirectAdmin (https)



lms.edop.com.tr
2222
DirectAdmin (https)



lms.edop.com.tr
3306
mySql



lms.edop.com.tr
3306
mySql



lms.edop.com.tr
5224
Plesk Licensing



lms.edop.com.tr
5224
Plesk Licensing



lms.edop.com.tr
5432
PostgreSQL



lms.edop.com.tr
5432
PostgreSQL



lms.edop.com.tr
8080
Ookla Speedtest (http)



lms.edop.com.tr
8080
Ookla Speedtest (http)



lms.edop.com.tr
8080
Ookla Speedtest (https)



lms.edop.com.tr
8080
Ookla Speedtest (https)



lms.edop.com.tr
8083
VestaCP http
open
http://lms.edop.com.tr:8083/
Http-Status: 302
Redirect: https://lms.edop.com.tr:8083/
lms.edop.com.tr
8083
VestaCP http
open
http://lms.edop.com.tr:8083/
Http-Status: 302
Redirect: https://lms.edop.com.tr:8083/
lms.edop.com.tr
8083
VestaCP https
open
https://lms.edop.com.tr:8083/
Http-Status: 302
Certificate is invalid Redirect: /login/
lms.edop.com.tr
8083
VestaCP https
open
https://lms.edop.com.tr:8083/
Http-Status: 302
Certificate is invalid Redirect: /login/
lms.edop.com.tr
8443
Plesk Administration (https)



lms.edop.com.tr
8443
Plesk Administration (https)



lms.edop.com.tr
8447
Plesk Installer + Updates



lms.edop.com.tr
8447
Plesk Installer + Updates



lms.edop.com.tr
8880
Plesk Administration (http)



lms.edop.com.tr
8880
Plesk Administration (http)



lms.edop.com.tr
10000
Webmin (http)



lms.edop.com.tr
10000
Webmin (http)



lms.edop.com.tr
10000
Webmin (https)



lms.edop.com.tr
10000
Webmin (https)



www.lms.edop.com.tr
21
FTP



www.lms.edop.com.tr
21
FTP



www.lms.edop.com.tr
22
SSH
open
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

www.lms.edop.com.tr
22
SSH
open
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

www.lms.edop.com.tr
25
SMTP



www.lms.edop.com.tr
25
SMTP



www.lms.edop.com.tr
53
DNS



www.lms.edop.com.tr
53
DNS



www.lms.edop.com.tr
110
POP3



www.lms.edop.com.tr
110
POP3



www.lms.edop.com.tr
143
IMAP



www.lms.edop.com.tr
143
IMAP



www.lms.edop.com.tr
465
SMTP (encrypted)



www.lms.edop.com.tr
465
SMTP (encrypted)



www.lms.edop.com.tr
587
SMTP (encrypted, submission)



www.lms.edop.com.tr
587
SMTP (encrypted, submission)



www.lms.edop.com.tr
993
IMAP (encrypted)



www.lms.edop.com.tr
993
IMAP (encrypted)



www.lms.edop.com.tr
995
POP3 (encrypted)



www.lms.edop.com.tr
995
POP3 (encrypted)



www.lms.edop.com.tr
1433
MS SQL



www.lms.edop.com.tr
1433
MS SQL



www.lms.edop.com.tr
2082
cPanel (http)



www.lms.edop.com.tr
2082
cPanel (http)



www.lms.edop.com.tr
2083
cPanel (https)



www.lms.edop.com.tr
2083
cPanel (https)



www.lms.edop.com.tr
2086
WHM (http)



www.lms.edop.com.tr
2086
WHM (http)



www.lms.edop.com.tr
2087
WHM (https)



www.lms.edop.com.tr
2087
WHM (https)



www.lms.edop.com.tr
2089
cPanel Licensing



www.lms.edop.com.tr
2089
cPanel Licensing



www.lms.edop.com.tr
2095
cPanel Webmail (http)



www.lms.edop.com.tr
2095
cPanel Webmail (http)



www.lms.edop.com.tr
2096
cPanel Webmail (https)



www.lms.edop.com.tr
2096
cPanel Webmail (https)



www.lms.edop.com.tr
2222
DirectAdmin (http)



www.lms.edop.com.tr
2222
DirectAdmin (http)



www.lms.edop.com.tr
2222
DirectAdmin (https)



www.lms.edop.com.tr
2222
DirectAdmin (https)



www.lms.edop.com.tr
3306
mySql



www.lms.edop.com.tr
3306
mySql



www.lms.edop.com.tr
5224
Plesk Licensing



www.lms.edop.com.tr
5224
Plesk Licensing



www.lms.edop.com.tr
5432
PostgreSQL



www.lms.edop.com.tr
5432
PostgreSQL



www.lms.edop.com.tr
8080
Ookla Speedtest (http)



www.lms.edop.com.tr
8080
Ookla Speedtest (http)



www.lms.edop.com.tr
8080
Ookla Speedtest (https)



www.lms.edop.com.tr
8080
Ookla Speedtest (https)



www.lms.edop.com.tr
8083
VestaCP http
open
http://www.lms.edop.com.tr:8083/
Http-Status: 302
Redirect: https://www.lms.edop.com.tr:8083/
www.lms.edop.com.tr
8083
VestaCP http
open
http://www.lms.edop.com.tr:8083/
Http-Status: 302
Redirect: https://www.lms.edop.com.tr:8083/
www.lms.edop.com.tr
8083
VestaCP https
open
https://www.lms.edop.com.tr:8083/
Http-Status: 302
Certificate is invalid Redirect: /login/
www.lms.edop.com.tr
8083
VestaCP https
open
https://www.lms.edop.com.tr:8083/
Http-Status: 302
Certificate is invalid Redirect: /login/
www.lms.edop.com.tr
8443
Plesk Administration (https)



www.lms.edop.com.tr
8443
Plesk Administration (https)



www.lms.edop.com.tr
8447
Plesk Installer + Updates



www.lms.edop.com.tr
8447
Plesk Installer + Updates



www.lms.edop.com.tr
8880
Plesk Administration (http)



www.lms.edop.com.tr
8880
Plesk Administration (http)



www.lms.edop.com.tr
10000
Webmin (http)



www.lms.edop.com.tr
10000
Webmin (http)



www.lms.edop.com.tr
10000
Webmin (https)



www.lms.edop.com.tr
10000
Webmin (https)



34.91.43.172
21
FTP



34.91.43.172
21
FTP



34.91.43.172
22
SSH
open
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

34.91.43.172
22
SSH
open
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

34.91.43.172
25
SMTP



34.91.43.172
25
SMTP



34.91.43.172
53
DNS



34.91.43.172
53
DNS



34.91.43.172
110
POP3



34.91.43.172
110
POP3



34.91.43.172
143
IMAP



34.91.43.172
143
IMAP



34.91.43.172
465
SMTP (encrypted)



34.91.43.172
465
SMTP (encrypted)



34.91.43.172
587
SMTP (encrypted, submission)



34.91.43.172
587
SMTP (encrypted, submission)



34.91.43.172
993
IMAP (encrypted)



34.91.43.172
993
IMAP (encrypted)



34.91.43.172
995
POP3 (encrypted)



34.91.43.172
995
POP3 (encrypted)



34.91.43.172
1433
MS SQL



34.91.43.172
1433
MS SQL



34.91.43.172
2082
cPanel (http)



34.91.43.172
2082
cPanel (http)



34.91.43.172
2083
cPanel (https)



34.91.43.172
2083
cPanel (https)



34.91.43.172
2086
WHM (http)



34.91.43.172
2086
WHM (http)



34.91.43.172
2087
WHM (https)



34.91.43.172
2087
WHM (https)



34.91.43.172
2089
cPanel Licensing



34.91.43.172
2089
cPanel Licensing



34.91.43.172
2095
cPanel Webmail (http)



34.91.43.172
2095
cPanel Webmail (http)



34.91.43.172
2096
cPanel Webmail (https)



34.91.43.172
2096
cPanel Webmail (https)



34.91.43.172
2222
DirectAdmin (http)



34.91.43.172
2222
DirectAdmin (http)



34.91.43.172
2222
DirectAdmin (https)



34.91.43.172
2222
DirectAdmin (https)



34.91.43.172
3306
mySql



34.91.43.172
3306
mySql



34.91.43.172
5224
Plesk Licensing



34.91.43.172
5224
Plesk Licensing



34.91.43.172
5432
PostgreSQL



34.91.43.172
5432
PostgreSQL



34.91.43.172
8080
Ookla Speedtest (http)



34.91.43.172
8080
Ookla Speedtest (http)



34.91.43.172
8080
Ookla Speedtest (https)



34.91.43.172
8080
Ookla Speedtest (https)



34.91.43.172
8083
VestaCP http
open
http://34.91.43.172:8083/
Http-Status: 302
Redirect: https://34.91.43.172:8083/
34.91.43.172
8083
VestaCP http
open
http://34.91.43.172:8083/
Http-Status: 302
Redirect: https://34.91.43.172:8083/
34.91.43.172
8083
VestaCP https
open
https://34.91.43.172:8083/
Http-Status: 302
Certificate is invalid Redirect: /login/
34.91.43.172
8083
VestaCP https
open
https://34.91.43.172:8083/
Http-Status: 302
Certificate is invalid Redirect: /login/
34.91.43.172
8443
Plesk Administration (https)



34.91.43.172
8443
Plesk Administration (https)



34.91.43.172
8447
Plesk Installer + Updates



34.91.43.172
8447
Plesk Installer + Updates



34.91.43.172
8880
Plesk Administration (http)



34.91.43.172
8880
Plesk Administration (http)



34.91.43.172
10000
Webmin (http)



34.91.43.172
10000
Webmin (http)



34.91.43.172
10000
Webmin (https)



34.91.43.172
10000
Webmin (https)





Permalink: https://check-your-website.server-daten.de/?i=2739ce0c-872e-4dba-a34b-e67b4b53643c


Last Result: https://check-your-website.server-daten.de/?q=lms.edop.com.tr - 2020-04-06 23:39:35


Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=lms.edop.com.tr" target="_blank">Check this Site: lms.edop.com.tr</a>