Shortcuts: 1. Basic DNS | 2. Url-Checks | 3. Comments | 4. Connections | 5. Certificates | 6. CT-Logs | 7. Html-Content | 8. CAA | 9. TXT |


B

Missing HSTS or Cookie-warnings

Checked:
15.05.2019 10:36:30


Older results

No older results found

1. Basic DNS and Nameserver Checks

HostTIP-Addressis auth.∑ Queries∑ Timeout
micland.cogitis.fr
A
185.50.53.215
yes
1
0

AAAA

yes


www.micland.cogitis.fr

Name Error
yes
1
0


Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2019, 00:00:00, Signature-Inception: 11.05.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
fr
2 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 28.05.2019, 05:00:00, Signature-Inception: 15.05.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

3 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 24135, Flags 256

Public Key with Algorithm 8, KeyTag 42104, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 50650, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 1 Labels, original TTL: 172800 sec, Signature-expiration: 07.07.2019, 19:11:34, Signature-Inception: 08.05.2019, 19:11:34, KeyTag 42104, Signer-Name: fr

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 42104 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 42104, DigestType 2 and Digest "jZE6ScP6Kjm6AGW04Yunk+OtEo98bIqgCK7+ChRDXdU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
cogitis.fr
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


micland.cogitis.fr
0 DS RR in the parent zone found

0 DNSKEY RR found


www.micland.cogitis.fr
0 DS RR in the parent zone found


DomainNameserverNS-IP
www.micland.cogitis.fr
  ns3.rmi.fr

micland.cogitis.fr
  ns3.rmi.fr
212.51.161.18

 
2a01:728:0:1::3
cogitis.fr
  ns3.rmi.fr


  ns4.rmi.fr

fr
  d.ext.nic.fr


  d.nic.fr / dns.fra.nic.fr


  e.ext.nic.fr / ns-ext1a.sidn.nl


  f.ext.nic.fr / s2.amx


  g.ext.nic.fr / 1.ber.pch



SOA - records (beta)

Domain:fr
Primary:nsmaster.nic.fr
Mail:hostmaster.nic.fr
Serial:2225168634
Refresh:3600
Retry:1800
Expire:3600000
TTL:5400
num Entries:5


Domain:cogitis.fr
Primary:ns3.rmi.fr
Mail:ndd.adista.fr
Serial:2019041601
Refresh:3600
Retry:3600
Expire:604800
TTL:86400
num Entries:2


Domain:micland.cogitis.fr
Primary:ns3.rmi.fr
Mail:ndd.adista.fr
Serial:2019041601
Refresh:3600
Retry:3600
Expire:604800
TTL:86400
num Entries:2


2. Url-Checks


show header:
Domainname Http-StatusredirectSec.G
• http://micland.cogitis.fr/
185.50.53.215
301
https://micland.cogitis.fr/
0.100
A
Date: Wed, 15 May 2019 08:36:47 GMT
Server: Apache/2.4.7 (Ubuntu)
Location: https://micland.cogitis.fr/
Content-Length: 318
Connection: close
Content-Type: text/html; charset=iso-8859-1

• https://micland.cogitis.fr/
185.50.53.215
302
https://micland.cogitis.fr/connexion.php
1.110
B
Date: Wed, 15 May 2019 08:36:48 GMT
Server: Apache/2.4.7 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
location: /connexion.php
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Set-Cookie: PHPSESSID=4vp9372veuoc4qdt8qirm9vpu3; Path=/; Domain=micland.cogitis.fr
Via: 1.1 micland.cogitis.fr (Apache/2.4.7)
Connection: close

• https://micland.cogitis.fr/connexion.php

200

0.480
B
Date: Wed, 15 May 2019 08:36:49 GMT
Server: Apache/2.4.7 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Length: 3159
Content-Type: text/html; charset=UTF-8
Set-Cookie: PHPSESSID=3u0qvtvdsjbb43r29361v07jn2; Path=/; Domain=micland.cogitis.fr
Via: 1.1 micland.cogitis.fr (Apache/2.4.7)
Connection: close

• http://micland.cogitis.fr/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
185.50.53.215
404

0.100
A
Not Found
Visible Content: Not Found The requested URL /.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de was not found on this server. Apache/2.4.10 (Debian) Server at 192.168.129.100 Port 80
Date: Wed, 15 May 2019 08:36:49 GMT
Server: Apache/2.4.10 (Debian)
Content-Length: 348
Content-Type: text/html; charset=iso-8859-1
Connection: close

3. Comments

Aname "micland.cogitis.fr" is subdomain, public suffix is "fr", top-level-domain-type is "country-code", Country is France, tld-manager is "Association Française pour le Nommage Internet en Coopération (A.F.N.I.C.)"
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
Ahttps://micland.cogitis.fr/ 185.50.53.215
302
https://micland.cogitis.fr/connexion.php
correct redirect https to https
Agood: destination is https
Agood - only one version with Http-Status 200
Agood: one preferred version: non-www is preferred
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
Ahttp://micland.cogitis.fr/ 185.50.53.215
301
https://micland.cogitis.fr/
correct redirect http - https with the same domain name
Bhttps://micland.cogitis.fr/ 185.50.53.215
302

Missing HSTS-Header
Bhttps://micland.cogitis.fr/connexion.php
200

Missing HSTS-Header
AGood: Nameserver supports TCP connections: 2 good Nameserver
AGood: Nameserver supports Echo Capitalization: 2 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 2 good Nameserver
Nameserver doesn't pass all EDNS-Checks: d.ext.nic.fr: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. COOKIE: fatal timeout. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: d.nic.fr: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found (dns.fra.nic.fr). COOKIE: SOA expected, but NOT found, NOERR expected, BADVER found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.rmi.fr: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
AInfo: Different Server-Headers found
ADuration: 25860 milliseconds, 25.860 seconds


4. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
micland.cogitis.fr
micland.cogitis.fr
443
ok
Tls12
DiffieHellman
4096
Aes128
128
Sha256
error checking OCSP stapling
ok
Chain (complete)
1CN=micland.cogitis.fr

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
micland.cogitis.fr
185.50.53.215
443
ok
Tls12
DiffieHellman
4096
Aes128
128
Sha256
error checking OCSP stapling
ok
Chain (complete)
1CN=micland.cogitis.fr

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


5. Certificates

1.
1.
CN=micland.cogitis.fr
28.03.2019
26.06.2019
expires in 31 days
micland.cogitis.fr - 1 entry

KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:03028C7E246C16947B2ABECED5F9AACB90F6
Thumbprint:AC147512BD65E45A4760083222C3FFD798523DA8
SHA256 / Certificate:ekirvIwTrSiM0/3+a64FwGCev2PRF3JVlXGy6h9hDNo=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):d6f3175add307eeb49852168021366031ccedefe13a26259554a2cb455fca4ed
OCSP - Url:http://ocsp.int-x3.letsencrypt.org
OCSP - must staple:no
Certificate Transparency:yes


2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
17.03.2016
17.03.2021
expires in 661 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0A0141420000015385736A0B85ECA708
Thumbprint:E6A3B45B062D509B3382282D196EFE97D5956CCB
SHA256 / Certificate:JYR9Zo608E/dQLErawdAxWfafQJDCOtsLJb+QdneIY0=
SHA256 hex / Cert (DANE * 0 1):25847d668eb4f04fdd40b12b6b0740c567da7d024308eb6c2c96fe41d9de218d
SHA256 hex / PublicKey (DANE * 1 1):60b87575447dcba2a36b7d11ac09fb24a9db406fee12d2cc90180517616e8a18
OCSP - Url:http://isrg.trustid.ocsp.identrust.com
OCSP - must staple:no
Certificate Transparency:no


3.
CN=DST Root CA X3, O=Digital Signature Trust Co.
30.09.2000
30.09.2021
expires in 858 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:44AFB080D6A327BA893039862EF8406B
Thumbprint:DAC9024F54D8F6DF94935FB1732638CA6AD77C13
SHA256 / Certificate:BocmAzGnJAPZCfEF5pvPDTLhvSST/8bZIG0RvNZ3Bzk=
SHA256 hex / Cert (DANE * 0 1):0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739
SHA256 hex / PublicKey (DANE * 1 1):563b3caf8cfef34c2335caf560a7a95906e8488462eb75ac59784830df9e5b2b
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no



6. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
834394558
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-28 08:00:40
2019-06-26 08:00:40
micland.cogitis.fr
1 entries



2. Source crt.sh - old and new certificates, sometimes very slow.

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
1
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1348207769
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-28 07:00:40
2019-06-26 06:00:40
micland.cogitis.fr
1 entries



7. Html-Content - Entries (BETA - mixed content and other checks)

Summary

Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://micland.cogitis.fr/connexion.php
form

1

0
1
0





link
stylesheet
5
233,114 Bytes
0
4
1
1
0
0
-1

link
other
1
948 Bytes
0
1
0





meta
other
4

0







script

6
191,490 Bytes
0
6
0




Details

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://micland.cogitis.fr/connexion.php

form
post
/login.php
302
0 Bytes
/connexion.php?connexion=er1
1
ok



link
shortcut icon
favicon.png
200
948 Bytes

1
ok



link
stylesheet
/css/fontastic.css
200
2347 Bytes

1
ok


Content loaded via url("...")

../fonts/dashboard.eot
1
../fonts/dashboard.eot?#iefix
1
../fonts/dashboard.svg#dashboard
1
../fonts/dashboard.ttf
1
../fonts/dashboard.woff
1

link
stylesheet
/css/style.css
200
58827 Bytes

1
ok


Content loaded via url("...")

../img/bg.jpg
1
/img/searchicon.png
1
/include/tree/images/application.png
2
/include/tree/images/bat.png
2
/include/tree/images/code.png
12
/include/tree/images/css.png
1
/include/tree/images/db.png
1
/include/tree/images/directory.png
1
/include/tree/images/doc.png
2
/include/tree/images/file.png
1
/include/tree/images/film.png
7
/include/tree/images/flash.png
2
/include/tree/images/folder_open.png
1
/include/tree/images/html.png
3
/include/tree/images/java.png
1
/include/tree/images/linux.png
1
/include/tree/images/music.png
4
/include/tree/images/pdf.png
1
/include/tree/images/php.png
1
/include/tree/images/picture.png
9
/include/tree/images/ppt.png
2
/include/tree/images/psd.png
1
/include/tree/images/ruby.png
4
/include/tree/images/script.png
3
/include/tree/images/spinner.gif
1
/include/tree/images/txt.png
3
/include/tree/images/xls.png
2
/include/tree/images/zip.png
1
data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='rgba(0, 0, 0, 0.5)' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E
1
data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='rgba(255, 255, 255, 0.5)' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E
1

link
stylesheet
/vendor/bootstrap4/css/bootstrap.min.css
200
140936 Bytes

1
ok


Content loaded via url("...")

data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='rgba(0, 0, 0, 0.5)' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E
1
data:image/svg+xml;charset=utf8,%3Csvg viewBox='0 0 30 30' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath stroke='rgba(255, 255, 255, 0.5)' stroke-width='2' stroke-linecap='round' stroke-miterlimit='10' d='M4 7h22M4 15h22M4 23h22'/%3E%3C/svg%3E
1
data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 8 8'%3E%3Cpath d='M2.75 0l-1.5 1.5 2.5 2.5-2.5 2.5 1.5 1.5 4-4-4-4z'/%3E%3C/svg%3E
1
data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 8 8'%3E%3Cpath d='M5.25 0l-4 4 4 4 1.5-1.5-2.5-2.5 2.5-2.5-1.5-1.5z'/%3E%3C/svg%3E
1
data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 4'%3E%3Cpath stroke='%23fff' d='M0 2h4'/%3E%3C/svg%3E
1
data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 5'%3E%3Cpath fill='%23343a40' d='M2 0L0 2h4zm0 5L0 3h4z'/%3E%3C/svg%3E
1
data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 8 8'%3E%3Cpath fill='%23fff' d='M6.564.75l-3.59 3.612-1.538-1.55L0 4.26 2.974 7.25 8 2.193z'/%3E%3C/svg%3E
1
data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='-4 -4 8 8'%3E%3Ccircle r='3' fill='%23fff'/%3E%3C/svg%3E
1

link
stylesheet
/vendor/font-awesome/css/font-awesome.min.css
200
31004 Bytes

1
ok


Content loaded via url("...")

../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0
1
../fonts/fontawesome-webfont.eot?v=4.7.0
1
../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular
1
../fonts/fontawesome-webfont.ttf?v=4.7.0
1
../fonts/fontawesome-webfont.woff?v=4.7.0
1
../fonts/fontawesome-webfont.woff2?v=4.7.0
1

link
stylesheet
https://fonts.googleapis.com/css?family=Poppins:300,400,700
200

1
ok

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:
sha256-qG/pq4VIWJeacNdqEH/h1oxyuroJCaCpsGdgo0rjrn4=
sha384-xDXOQsrn4pbD2vUqeKslfNV9acPijz1dOcABWBSX73n61iIsjMr855B5CVIXEZo+
sha512-rdFPRnP3ZdCWUmtnJzwbUYNlUAAx8HKRojgCm4o9bWPJmuxZgQvakncqKYM+cfmS04XnyX+YrC/rsZpsXZfH6A==

<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Poppins:300,400,700" crossorigin="anonymous" integrity="sha256-qG/pq4VIWJeacNdqEH/h1oxyuroJCaCpsGdgo0rjrn4= " />



Content loaded via url("...")

https://fonts.gstatic.com/s/poppins/v6/pxiByp8kv8JHgFVrLCz7Z11lFc-K.woff2
1
https://fonts.gstatic.com/s/poppins/v6/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2
1
https://fonts.gstatic.com/s/poppins/v6/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
1
https://fonts.gstatic.com/s/poppins/v6/pxiByp8kv8JHgFVrLDz8Z11lFc-K.woff2
1
https://fonts.gstatic.com/s/poppins/v6/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2
1
https://fonts.gstatic.com/s/poppins/v6/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
1
https://fonts.gstatic.com/s/poppins/v6/pxiEyp8kv8JHgFVrJJbecmNE.woff2
1
https://fonts.gstatic.com/s/poppins/v6/pxiEyp8kv8JHgFVrJJfecg.woff2
1
https://fonts.gstatic.com/s/poppins/v6/pxiEyp8kv8JHgFVrJJnecmNE.woff2
1

meta

utf-8


1
ok



meta
X-UA-Compatible
IE=edge


1
ok



meta
description
Portail MIC


1
ok



meta
viewport
width=device-width, initial-scale=1


1
ok



script
src
/js/front.js
200
6982 Bytes

1
ok



script
src
/vendor/bootstrap4/js/bootstrap.min.js
200
50737 Bytes

1
ok



script
src
/vendor/jquery.cookie/jquery.cookie.js
200
3238 Bytes

1
ok



script
src
/vendor/jquery/jquery-3.3.1.min.js
200
86927 Bytes

1
ok



script
src
/vendor/jquery-validation/jquery.validate.min.js
200
23264 Bytes

1
ok



script
src
/vendor/popper.js.2018/popper.min.js
200
20342 Bytes

1
ok



8. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
micland.cogitis.fr
0

no CAA entry found
1
0
cogitis.fr
0

no CAA entry found
1
0
fr
0

no CAA entry found
1
0


9. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
micland.cogitis.fr

ok
1
0
_acme-challenge.micland.cogitis.fr

Name Error - The domain name does not exist
1
0
_acme-challenge.micland.cogitis.fr.cogitis.fr

Name Error - The domain name does not exist
1
0
_acme-challenge.micland.cogitis.fr.micland.cogitis.fr

Name Error - The domain name does not exist
1
0



Permalink: https://check-your-website.server-daten.de/?i=3fdd8991-2e19-40d5-b09f-8b3544d99d56


Last Result: https://check-your-website.server-daten.de/?q=micland.cogitis.fr - 2019-05-15 10:36:30