Check DNS, Urls + Redirects, Certificates and Content of your Website

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
mlstav.sk	A	92.240.253.18 Bratislava/Slovakia (SK) - LSC-EXOTECHNOLOGIES Hostname: cluster3s19.dnsserver.eu	yes	1	0
	AAAA		yes
www.mlstav.sk	A	92.240.253.18 Bratislava/Slovakia (SK) - LSC-EXOTECHNOLOGIES Hostname: cluster3s19.dnsserver.eu	yes	1	0
	AAAA		yes
*.mlstav.sk	A	92.240.253.18	yes
	AAAA		yes
	CNAME		yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 14748, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.11.2021, 00:00:00 +, Signature-Inception: 31.10.2021, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: sk
sk	1 DS RR in the parent zone found


	DS with Algorithm 13, KeyTag 2324, DigestType 2 and Digest Pn5PYOzMStj5bGVFYyZcmk5WufGsmY6I4c+BUP8aUgU=


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner sk., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 19.11.2021, 05:00:00 +, Signature-Inception: 06.11.2021, 04:00:00 +, KeyTag 14748, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 14748 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 13, KeyTag 2324, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 13, KeyTag 39267, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner sk., Algorithm: 13, 1 Labels, original TTL: 3600 sec, Signature-expiration: 04.12.2021, 13:10:00 +, Signature-Inception: 04.11.2021, 19:12:43 +, KeyTag 2324, Signer-Name: sk


	• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 2324 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 2324, DigestType 2 and Digest "Pn5PYOzMStj5bGVFYyZcmk5WufGsmY6I4c+BUP8aUgU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: mlstav.sk
mlstav.sk	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "k7bo00l1os00t81st2elc7q4jr9i3u3j" between the hashed NSEC3-owner "k7bhv0oq9m4o1avnvg74e98jub0mtns5" and the hashed NextOwner "k7bo188eapja1ta34uqu25cqbq9s0ci9". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner k7bhv0oq9m4o1avnvg74e98jub0mtns5.sk., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 04.12.2021, 09:39:33 +, Signature-Inception: 04.11.2021, 08:42:45 +, KeyTag 39267, Signer-Name: sk


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "97iomm39jdqnuedfjpmusaj6ga11997n" as Owner. That's the Hash of "sk" with the NextHashedOwnerName "97ippbal4t7uaf2r69jpmno2hjq8npdu". So that domain name is the Closest Encloser of "mlstav.sk". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner 97iomm39jdqnuedfjpmusaj6ga11997n.sk., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 05.12.2021, 06:09:01 +, Signature-Inception: 04.11.2021, 23:45:43 +, KeyTag 39267, Signer-Name: sk


	0 DNSKEY RR found




Zone: www.mlstav.sk
www.mlstav.sk	0 DS RR in the parent zone found

3. Name Servers

Domain	Nameserver	NS-IP
www.mlstav.sk	• ns.exohosting.sk / off		•
mlstav.sk	• ns.exohosting.sk / off	185.184.28.9 Bratislava/Slovakia (SK) - VNET a.s.	•
	• ns1.exohosting.eu	92.240.235.93 Bratislava/Slovakia (SK) - VNET a.s.	•
	• ns3.exohosting.cz / off	45.32.153.34 Frankfurt am Main/Hesse/Germany (DE) - Choopa	•
	•	2001:19f0:6c01:81c:5400:3ff:fe32:f748 Frankfurt am Main/Hesse/Germany (DE) - The Constant Company	•
sk	• a.tld.sk		•
	• b.tld.sk		•
	• c.tld.sk		•
	• e.tld.sk / CEQY-QU41GH-6UZLZF		•
	• f.tld.sk / TAGD-KTE43F-5A9QX6		•
	• g.tld.sk / PGXL-PS5KRW-2C7ZTP		•
	• h.tld.sk / JGAB-L6C9EK-PH9YUA		•
	• m.tld.sk

4. SOA-Entries

Domain:	sk
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1

Domain:	sk
Zone-Name:	sk
Primary:	m.tld.sk
Mail:	hostmaster.sk-nic.sk
Serial:	2017881878
Refresh:	60
Retry:	300
Expire:	3600000
TTL:	3600
num Entries:	1

Domain:	sk
Zone-Name:	sk
Primary:	m.tld.sk
Mail:	hostmaster.sk-nic.sk
Serial:	2017881879
Refresh:	60
Retry:	300
Expire:	3600000
TTL:	3600
num Entries:	6

Domain:	mlstav.sk
Zone-Name:	mlstav.sk
Primary:	ns.exohosting.sk
Mail:	ns.exohosting.sk
Serial:	2021102417
Refresh:	10800
Retry:	1800
Expire:	604800
TTL:	3600
num Entries:	4

Domain:	www.mlstav.sk
Zone-Name:	mlstav.sk
Primary:	ns.exohosting.sk
Mail:	ns.exohosting.sk
Serial:	2021102417
Refresh:	10800
Retry:	1800
Expire:	604800
TTL:	3600
num Entries:	1

5. Screenshots

Startaddress: https://www.mlstav.sk, address used: https://www.mlstav.sk/, Screenshot created 2021-11-06 15:05:34 +00:0

Mobil (412px x 732px)

411 milliseconds

Screenshot mobile - https://www.mlstav.sk/

Mobil + Landscape (732px x 412px)

435 milliseconds

Screenshot mobile landscape - https://www.mlstav.sk/

Screen (1280px x 1680px)

831 milliseconds

Screenshot Desktop - https://www.mlstav.sk/

Mobile- and other Chrome-Checks

	width	height
visual Viewport	396	732
content Size	396	6487

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

Chrome-Connection: secure. secure connection settings. The connection to this site is encrypted and authenticated using TLS 1.2, ECDHE_RSA with P-256, and AES_256_GCM.

Chrome-Resources : secure. all served securely. All resources on this page are served securely.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://mlstav.sk/ 92.240.253.18	301	https://mlstav.sk/ Html is minified: 100.00 %	0.130	A
date: Sat, 06 Nov 2021 14:04:41 GMT
permissions-policy: microphone=(), camera=()
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'none'; report-uri https://www.mlstav.sk; form-action 'self';
expect-ct: enforce,max-age=86400,report-uri="https://www.mlstav.sk/r/d/ct/enforce"
location: https://mlstav.sk/
cache-control: max-age=172800
expires: Mon, 08 Nov 2021 14:04:41 GMT
content-length: 226
content-type: text/html; charset=iso-8859-1
x-bver: v2
connection: close

• http://www.mlstav.sk/ 92.240.253.18	301	https://www.mlstav.sk/ Html is minified: 100.00 %	0.086	A
date: Sat, 06 Nov 2021 14:04:41 GMT
permissions-policy: microphone=(), camera=()
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'none'; report-uri https://www.mlstav.sk; form-action 'self';
expect-ct: enforce,max-age=86400,report-uri="https://www.mlstav.sk/r/d/ct/enforce"
location: https://www.mlstav.sk/
cache-control: max-age=172800
expires: Mon, 08 Nov 2021 14:04:41 GMT
content-length: 230
content-type: text/html; charset=iso-8859-1
x-bver: v2
connection: close

• https://mlstav.sk/ 92.240.253.18	301	https://www.mlstav.sk/ Html is minified: 100.00 %	4.727	A
date: Sat, 06 Nov 2021 14:04:42 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
permissions-policy: microphone=(), camera=()
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'none'; report-uri https://www.mlstav.sk; form-action 'self';
expect-ct: enforce,max-age=86400,report-uri="https://www.mlstav.sk/r/d/ct/enforce"
location: https://www.mlstav.sk/
cache-control: max-age=172800
expires: Mon, 08 Nov 2021 14:04:42 GMT
content-length: 230
content-type: text/html; charset=iso-8859-1
x-bver: v2
connection: close

• https://www.mlstav.sk/ 92.240.253.18 Inline-JavaScript (∑/total): 10/381 Inline-CSS (∑/total): 0/0	200	Html is minified: 107.92 % Other inline scripts (∑/total): 2/1686	4.704	A
date: Sat, 06 Nov 2021 14:04:47 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
permissions-policy: microphone=(), camera=()
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: upgrade-insecure-requests; object-src 'none'; base-uri 'none'; report-uri https://www.mlstav.sk; form-action 'self';
expect-ct: enforce,max-age=86400,report-uri="https://www.mlstav.sk/r/d/ct/enforce"
last-modified: Sat, 06 Nov 2021 14:04:47 GMT
cache-control: max-age=172800
expires: Mon, 08 Nov 2021 14:04:47 GMT
content-encoding: gzip
x-request-received: t=1636207487157721
accept-ranges: bytes
content-length: 5833
content-type: text/html; charset=UTF-8
content-language: sk-SK
x-bver: v2
connection: close

• http://mlstav.sk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 92.240.253.18	200		0.076
Visible Content:
date: Sat, 06 Nov 2021 14:04:52 GMT
content-type: text/plain;charset=UTF-8
transfer-encoding: chunked
x-bver: v2
content-encoding: gzip
vary: Accept-Encoding
connection: close

• http://www.mlstav.sk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 92.240.253.18	200		0.080
Visible Content:
date: Sat, 06 Nov 2021 14:04:53 GMT
content-type: text/plain;charset=UTF-8
transfer-encoding: chunked
x-bver: v2
content-encoding: gzip
vary: Accept-Encoding
connection: close

• https://92.240.253.18/ 92.240.253.18	200		2.490	N
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
small visible content (num chars: 0)
date: Sat, 06 Nov 2021 14:04:33 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
x-bver: v2
content-encoding: gzip
vary: Accept-Encoding
connection: close

7. Comments

	1. General Results, most used to calculate the result
A	name "mlstav.sk" is domain, public suffix is ".sk", top-level-domain is ".sk", top-level-domain-type is "country-code", Country is Slovakia, tld-manager is "SK-NIC, a.s.", num .sk-domains preloaded: 277 (complete: 168171)
A	Good: All ip addresses are public addresses
	Warning: Only one ip address found: mlstav.sk has only one ip address.
	Warning: Only one ip address found: www.mlstav.sk has only one ip address.
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: mlstav.sk has no ipv6 address.
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: www.mlstav.sk has no ipv6 address.
A	Good: No asked Authoritative Name Server had a timeout
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: www is preferred
A	Good: No cookie sent via http.
A	Good: HSTS has preload directive
A	Excellent: Domain is in the Google-Preload-List
A	Excellent: Domain is in the Mozilla/Firefox-Preload-List
A	HSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
A	http://mlstav.sk/ 92.240.253.18	301	https://mlstav.sk/	Correct redirect http - https with the same domain name
A	http://www.mlstav.sk/ 92.240.253.18	301	https://www.mlstav.sk/	Correct redirect http - https with the same domain name
N	https://92.240.253.18/ 92.240.253.18	200		Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain mlstav.sk, 1 ip addresses.
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain www.mlstav.sk, 1 ip addresses.
	2. Header-Checks
	3. DNS- and NameServer - Checks
A	Info:: 14 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 3 Name Servers.
A	Info:: 14 Queries complete, 8 with IPv6, 6 with IPv4.
	Warning: Only some DNS Queries done via ipv6. IPv6 is the future, so the name servers of your name servers should have ipv6 addresses.
A	Good: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.ns.exohosting.sk (185.184.28.9), ns3.exohosting.cz (2001:19f0:6c01:81c:5400:3ff:fe32:f748, 45.32.153.34)
	Ok (4 - 8):: An average of 4.7 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 3 different Name Servers found: ns.exohosting.sk, ns1.exohosting.eu, ns3.exohosting.cz, 3 Name Servers included in Delegation: ns.exohosting.sk, ns1.exohosting.eu, ns3.exohosting.cz, 3 Name Servers included in 1 Zone definitions: ns.exohosting.sk, ns1.exohosting.eu, ns3.exohosting.cz, 1 Name Servers listed in SOA.Primary: ns.exohosting.sk.
A	Good: Only one SOA.Primary Name Server found.: ns.exohosting.sk.
A	Good: SOA.Primary Name Server included in the delegation set.: ns.exohosting.sk.
A	Good: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: ns.exohosting.sk, ns1.exohosting.eu, ns3.exohosting.cz
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Good: Minimal 2 different name servers (public suffix and public ip address) found: 3 different Name Servers found
A	Good: Some Name Servers have IPv6 addresses: 1 Name Servers with IPv6 found (2 Name Servers without IPv6)
A	Good: Name servers with different Top Level Domains / Public Suffix List entries found: 3 Name Servers, 3 Top Level Domains: sk, eu, cz
A	Good: Name Servers with different domain names found.: 3 different Domains found
A	Good: Name servers with different Country locations found: 3 Name Servers, 2 Countries: DE, SK
A	Info: Ipv4-Subnet-list: 3 Name Servers, 3 different subnets (first Byte): 185., 45., 92., 3 different subnets (first two Bytes): 185.184., 45.32., 92.240., 3 different subnets (first three Bytes): 185.184.28., 45.32.153., 92.240.235.
A	Excellent: Every Name Server IPv4-address starts with an unique Byte.
A	Info: IPv6-Subnet-list: 1 Name Servers with IPv6, 1 different subnets (first block): 2001:, 1 different subnets (first two blocks): 2001:19f0:, 1 different subnets (first three blocks): 2001:19f0:6c01:, 1 different subnets (first four blocks): 2001:19f0:6c01:081c:
	Fatal: All Name Server IPv6 addresses from the same subnet.
A	Good: Nameserver supports TCP connections: 4 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 4 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 4 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 4 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: m.tld.sk: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
A	Good: All SOA have the same Serial Number
	Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.
	4. Content- and Performance-critical Checks
	http://mlstav.sk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 92.240.253.18	200		Warning: Not existing ACME-file, but Server sends 200, not 404 or redirect. May be a problem creating a Letsencrypt certificate. Checking /.well-known/acme-challenge/random-filename - a http status 404 - Not Found - is expected. If your server sends content and a http status 200, the validation file (87 bytes, token, dot and the hash of the public part of the account key) may be invisible, so Letsencrypt can't validate your domain. If it is an application that sends this content, perhaps create an exception, so /.well-known/acme-challenge sends raw files. Or create a redirect to another domain and / or port 443, but your Letsencrypt client must support such a solution. Certbot: Use webroot as authenticator - https://certbot.eff.org/docs/using.html Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	http://www.mlstav.sk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 92.240.253.18	200		Warning: Not existing ACME-file, but Server sends 200, not 404 or redirect. May be a problem creating a Letsencrypt certificate. Checking /.well-known/acme-challenge/random-filename - a http status 404 - Not Found - is expected. If your server sends content and a http status 200, the validation file (87 bytes, token, dot and the hash of the public part of the account key) may be invisible, so Letsencrypt can't validate your domain. If it is an application that sends this content, perhaps create an exception, so /.well-known/acme-challenge sends raw files. Or create a redirect to another domain and / or port 443, but your Letsencrypt client must support such a solution. Certbot: Use webroot as authenticator - https://certbot.eff.org/docs/using.html Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
	https://www.mlstav.sk/ 92.240.253.18	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
A	Good: Every https result with status 200 has a minified Html-Content with a quota lower then 110 %.
	https://92.240.253.18/ 92.240.253.18	200		Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
	https://www.mlstav.sk/ 92.240.253.18	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 9 script elements without defer/async.
A	Good: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 12 external CSS / JavaScript files found
	Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 12 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 12 complete.
	Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 9 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 9 complete.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Good: All img-elements have a valid alt-attribute.: 9 img-elements found.
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Duration: 96136 milliseconds, 96.136 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

mlstav.sk

92.240.253.18

443

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

mlstav.sk

92.240.253.18

443

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0

Chain (complete)	1	CN=www.mlstav.sk, O=Mihai Lauriuc - MLstav, L=Bratislava - Petrzalka, C=SK
	2	CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, C=GB, ST=Greater Manchester
	3	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, C=US, ST=New Jersey

www.mlstav.sk

92.240.253.18

443

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

www.mlstav.sk

92.240.253.18

443

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0

Chain (complete)	1	CN=www.mlstav.sk, O=Mihai Lauriuc - MLstav, L=Bratislava - Petrzalka, C=SK
	2	CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, C=GB, ST=Greater Manchester
	3	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, C=US, ST=New Jersey

92.240.253.18

443

Certificate/chain invalid and wrong name

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

92.240.253.18

443

Certificate/chain invalid and wrong name

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no http/2 via ALPN
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0

no http/2 via ALPN
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0

9. Certificates

CN=www.mlstav.sk, O=Mihai Lauriuc - MLstav, L=Bratislava - Petrzalka, C=SK

19.07.2021

20.08.2022
1423 days expired

www.mlstav.sk, mlstav.sk - 2 entries

CN=www.mlstav.sk, O=Mihai Lauriuc - MLstav, L=Bratislava - Petrzalka, C=SK

19.07.2021

20.08.2022
1423 days expired

www.mlstav.sk, mlstav.sk - 2 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	24287253E8EC9B37521D4C0E878CF421
Thumbprint:	E96E4F94F838DF205C36E46C1B07AAC332CB36BC
SHA256 / Certificate:	X+5KTU0J6wIm+6JyXpE4RxnW0R2Qdr9sUeWTVwAGA6U=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	8d1194e14b8fddff0e3ec4ff9d3b2c32a716926067d4fd44a191743fc1d25984
SHA256 hex / Subject Public Key Information (SPKI):	8d1194e14b8fddff0e3ec4ff9d3b2c32a716926067d4fd44a191743fc1d25984 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.sectigo.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=www.mlstav.sk, O=Mihai Lauriuc - MLstav, L=Bratislava - Petrzalka, C=SK

19.07.2021

20.08.2022
1423 days expired

www.mlstav.sk, mlstav.sk - 2 entries

CN=www.mlstav.sk, O=Mihai Lauriuc - MLstav, L=Bratislava - Petrzalka, C=SK

19.07.2021

20.08.2022
1423 days expired

www.mlstav.sk, mlstav.sk - 2 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	24287253E8EC9B37521D4C0E878CF421
Thumbprint:	E96E4F94F838DF205C36E46C1B07AAC332CB36BC
SHA256 / Certificate:	X+5KTU0J6wIm+6JyXpE4RxnW0R2Qdr9sUeWTVwAGA6U=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	8d1194e14b8fddff0e3ec4ff9d3b2c32a716926067d4fd44a191743fc1d25984
SHA256 hex / Subject Public Key Information (SPKI):	8d1194e14b8fddff0e3ec4ff9d3b2c32a716926067d4fd44a191743fc1d25984 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.sectigo.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

02.11.2018

01.01.2031
expires in 1633 days

CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

02.11.2018

01.01.2031
expires in 1633 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	137D539CAA7C31A9A433701968847A8D
Thumbprint:	40CEF3046C916ED7AE557F60E76842828B51DE53
SHA256 / Certificate:	cqNKwrQkrtP2sLBHVbiMwCfczIBv3bIrTNfEd3OXPsA=
SHA256 hex / Cert (DANE * 0 1):	72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
SHA256 hex / PublicKey (DANE * 1 1):	4648564dc7c901037f631391d765643e8f8f86622849f59dfc9564838e1e8a76
SHA256 hex / Subject Public Key Information (SPKI):	4648564dc7c901037f631391d765643e8f8f86622849f59dfc9564838e1e8a76
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp.usertrust.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Server Authentication (1.3.6.1.5.5.7.3.1), Client Authentication (1.3.6.1.5.5.7.3.2)

CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

02.11.2018

01.01.2031
expires in 1633 days

CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

02.11.2018

01.01.2031
expires in 1633 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	137D539CAA7C31A9A433701968847A8D
Thumbprint:	40CEF3046C916ED7AE557F60E76842828B51DE53
SHA256 / Certificate:	cqNKwrQkrtP2sLBHVbiMwCfczIBv3bIrTNfEd3OXPsA=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	4648564dc7c901037f631391d765643e8f8f86622849f59dfc9564838e1e8a76
SHA256 hex / Subject Public Key Information (SPKI):	4648564dc7c901037f631391d765643e8f8f86622849f59dfc9564838e1e8a76
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.usertrust.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

01.02.2010

19.01.2038
expires in 4208 days

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

01.02.2010

19.01.2038
expires in 4208 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	01FD6D30FCA3CA51A81BBC640E35032D
Thumbprint:	2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E
SHA256 / Certificate:	55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I=
SHA256 hex / Cert (DANE * 0 1):	e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
SHA256 hex / PublicKey (DANE * 1 1):	c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SHA256 hex / Subject Public Key Information (SPKI):	c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

12.03.2019

01.01.2029
expires in 903 days

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

12.03.2019

01.01.2029
expires in 903 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	3972443AF922B751D7D36C10DD313595
Thumbprint:	D89E3BD43D5D909B47A18977AA9D5CE36CEE184C
SHA256 / Certificate:	aLnHYSGaWx8BMXhEdGZdthu9sQngDwXKn3QkTuX19Ss=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SHA256 hex / Subject Public Key Information (SPKI):	c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp.comodoca.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB

01.01.2004

01.01.2029
expires in 903 days

CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB

01.01.2004

01.01.2029
expires in 903 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA-1 with RSA Encryption
Serial Number:	01
Thumbprint:	D1EB23A46D17D68FD92564C2F1F1601764D8E349
SHA256 / Certificate:	16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SHA256 hex / Subject Public Key Information (SPKI):	bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=*, O=0default, S=Some-State, C=SK

02.02.2012

31.01.2017
3450 days expired

CN=*, O=0default, S=Some-State, C=SK

02.02.2012

31.01.2017
3450 days expired

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA-1 with RSA Encryption
Serial Number:	0080866C09B8ECBFD0
Thumbprint:	6EA488FFE2751CA67F4B37E42D781D385DAE0C89
SHA256 / Certificate:	1HPdMsNlkBhCxMlMXGoeqa6F94EAxNxogR3k2CnoX/U=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	13333198d46dd684207005b4d3dbbc397da8940e9ca5eccdf3338591e5d65f50
SHA256 hex / Subject Public Key Information (SPKI):	Error parsing Certificate - _AL.Count = 6
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

UntrustedRoot: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Small Code Update - wait one minute

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Small Code Update - wait one minute

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://www.mlstav.sk/ 92.240.253.18	a		29		0			0	0	0
	img		9		0	9	0	0	0	0
	link	stylesheet	3		0	3	0	0	0	0
	link	other	8		0	6	0	0	0	0
	meta	twitter	6		0	1	0	0	0	0
	meta	apple	1		0			0	0	0
	meta	og	9		0	2	0	0	0	0
	meta	other	15		0	1	0	0	0	0
	script		9		0	9	0	0	0	0

Details (currently limited to 500 rows - some problems with spam users)

Domainname

Html-Element

name/equiv/ property/rel

href/src/content

HttpStatus

msg

∑

Status

https://www.mlstav.sk/
92.240.253.18

https://secure.trust-provider.com/ttb_searcher/trustlogo?v_querytype=W&v_shortname=SC5&v_search=https://www.mlstav.sk/&x=6&y=5

https://twitter.com/mlstav

https://www.facebook.com/mlstav

https://www.mlstav.sk

https://www.mlstav.sk/cennik

https://www.mlstav.sk/kontakt

https://www.mlstav.sk/mapa-stranok

https://www.mlstav.sk/ochrana-osobnych-udajov

https://www.mlstav.sk/o-nas

https://www.mlstav.sk/referencie

https://www.mlstav.sk/sluzby

https://www.mlstav.sk/zasady-pouzivania-suborov-cookie

mailto:mlstav@mlstav.sk

sluzby

tel:+421948333182

img

src

https://www.mlstav.sk/Logo.png

200

alt: Logo - MLstav

missing X-Content-Type-Options nosniff

2099 Bytes

img

src

https://www.mlstav.sk/maliarske-prace.jpg

200

alt: Maliarske práce

missing X-Content-Type-Options nosniff

7144 Bytes

img

src

https://www.mlstav.sk/murarske-prace.jpg

200

alt: Murárske práce

missing X-Content-Type-Options nosniff

27676 Bytes

img

src

https://www.mlstav.sk/rekonstrukcia-kupelne.jpg

200

alt: Rekonštrukcia kúpeľne

missing X-Content-Type-Options nosniff

20624 Bytes

img

src

https://www.mlstav.sk/rekonstrukcie-bytov.jpg

200

alt: Rekonštrukcie bytov

missing X-Content-Type-Options nosniff

10302 Bytes

img

src

https://www.mlstav.sk/sectigo.png

200

alt: Certifikát web stránky

missing X-Content-Type-Options nosniff

1026 Bytes

img

src

https://www.mlstav.sk/slider-1.jpg

200

alt: slidebg1

missing X-Content-Type-Options nosniff

58325 Bytes

img

src

https://www.mlstav.sk/slider-2.jpg

200

alt: slidebg2

missing X-Content-Type-Options nosniff

34119 Bytes

img

src

https://www.mlstav.sk/stavebne-sluzby.jpg

200

alt: Stavebné služby

missing X-Content-Type-Options nosniff

95763 Bytes

link

apple-touch-icon

https://www.mlstav.sk/apple-touch-icon.png

200

missing X-Content-Type-Options nosniff

3165 Bytes

link

canonical

https://www.mlstav.sk/

link

icon

https://www.mlstav.sk/android-chrome-192x192.png

200

missing X-Content-Type-Options nosniff

4075 Bytes

link

icon

https://www.mlstav.sk/favicon-16x16.png

200

missing X-Content-Type-Options nosniff

714 Bytes

link

icon

https://www.mlstav.sk/favicon-32x32.png

200

missing X-Content-Type-Options nosniff

1566 Bytes

link

manifest

https://www.mlstav.sk/manifest.json

link

mask-icon

https://www.mlstav.sk/safari-pinned-tab.svg

200

missing X-Content-Type-Options nosniff

1262 Bytes

link

shortcut icon

https://www.mlstav.sk/favicon.ico

200

missing X-Content-Type-Options nosniff

15086 Bytes

link

stylesheet

https://www.mlstav.sk/bootstrap.min.css

200

missing X-Content-Type-Options nosniff

No Cache-Control - header

19480 Bytes

local SRI possible, possible hash-values:

sha256-wbHr/IQJfmz1eWeYG4mbEYCEM9R9azEJYHMbDQehBKg=
sha384-RYHwgktEVg2JhZrZZ99rpe1nqAkpSYIH8vX5VZNQ87izvuYouJkiFBP7KW6B7S3s
sha512-+RoXGMYe3QSO7dXee02uP279g8vp87Cd1x/QwPlZoVRuhZ1SWaJk80qOOPerzZKquXoE3Tgv6vNk76HAH5EXlw==

Content loaded via url("...")

../fonts/glyphicons-halflings-regular.eot

../fonts/glyphicons-halflings-regular.eot?#iefix

../fonts/glyphicons-halflings-regular.svg#glyphicons_halflingsregular

../fonts/glyphicons-halflings-regular.ttf

../fonts/glyphicons-halflings-regular.woff

../fonts/glyphicons-halflings-regular.woff2

link

stylesheet

https://www.mlstav.sk/mega_menu.css

200

missing X-Content-Type-Options nosniff

No Cache-Control - header

6989 Bytes

local SRI possible, possible hash-values:

sha256-QsrF3iIGHHB/05XkKqrOc9tGrGNSaR5L9j6x0I0De0E=
sha384-V3YiZ+W9kBR7lbkQr0g07/7GyP+D3YZ6lL6954lOI5UIhsR9g3+G/Got1aTnuVll
sha512-06VxZs4x75VrH0YN89lJa4QYzdcWuHMebLC8xCA8Gi36ugL2NDbDsI6mzZpWEWO/l3x//OzueTU/IUCi/Tc9rQ==

link

stylesheet

https://www.mlstav.sk/style.css

200

missing X-Content-Type-Options nosniff

No Cache-Control - header

27160 Bytes

local SRI possible, possible hash-values:

sha256-hI/DwgWTjgvKK5pd03Z1BIHe7ZgTQ11O18ci8e2Nw1g=
sha384-7vKpDGzBFi2lMGmNGuHSrkYsK8Uj7nqhYIVksliX9+GOi6tDqq06nhYj9K9dNzqA
sha512-O/SP57nn+NmxcOBgcWQgTr03Wa3t3YEM/XwqAFS3a7/lh2OWfu3Kv1J9hyLAQZeXrRNgztO9rnxZ6GFGuZObFg==

Content loaded via url("...")

../fonts/Flaticon.eot

../fonts/Flaticon.eot?#iefix

../fonts/Flaticon.svg#Flaticon

../fonts/Flaticon.ttf

../fonts/Flaticon.woff

../fonts/fontawesome-webfont.eot?#iefix&v=4.6.3

../fonts/fontawesome-webfont.eot?v=4.6.3

../fonts/fontawesome-webfont.svg?v=4.6.3#fontawesomeregular

../fonts/fontawesome-webfont.ttf?v=4.6.3

../fonts/fontawesome-webfont.woff?v=4.6.3

../fonts/fontawesome-webfont.woff2?v=4.6.3

../images/bg/gradient-overlay.png

../images/close.png

../images/element/02.png

../images/element/03.png

../images/pattern/pattern1.png

../images/pattern/pattern2.jpg

../images/pattern/pattern3.png

../images/pattern/pattern4.png

https://fonts.gstatic.com/s/raleway/v11/0dTEPzkLWceF7z0koJaX1A.woff2

https://fonts.gstatic.com/s/raleway/v11/CcKI4k9un7TZVWzRVT-T8_k_vArhqVIZ0nv9q090hN8.woff2

https://fonts.gstatic.com/s/raleway/v11/Li18TEFObx_yGdzKDoI_ciEAvth_LlrfE80CYdSH47w.woff2

https://fonts.gstatic.com/s/raleway/v11/STBOO2waD2LpX45SXYjQBSEAvth_LlrfE80CYdSH47w.woff2

https://fonts.gstatic.com/s/raleway/v11/xkvoNo9fC8O2RDydKj12b_k_vArhqVIZ0nv9q090hN8.woff2

https://fonts.gstatic.com/s/raleway/v11/yQiAaD56cjx1AooMTSghGfY6323mHUZFJMgTvxaG2iE.woff2

meta

charset

UTF-8

meta

fb:app_id

966242223397117

meta

og:description

Rekonštrukcie bytov, murárske práce, rekonštrukcie interiérov, maliarske práce, elektroinštalácie, vodoinštalácie, montáž sadrokartónu, stavebné práce.

meta

og:image

https://www.mlstav.sk/MLstav-facebook.jpg

200

missing X-Content-Type-Options nosniff

253133 Bytes

meta

og:image:height

628

meta

og:image:width

1200

meta

og:locale

sk_SK

meta

og:site_name

MLstav

meta

og:title

Rekonštrukcie bytov Murárske práce Maliarske práce - MLstav

meta

og:type

website

meta

og:url

https://www.mlstav.sk

200

missing X-Content-Type-Options nosniff

5833 Bytes

meta

apple-mobile-web-app-title

MLstav

meta

application-name

MLstav

meta

author

mlstav.sk

meta

description

Rekonštrukcie bytov, murárske práce, rekonštrukcie interiérov, maliarske práce, elektroinštalácie, vodoinštalácie, montáž sadrokartónu, stavebné práce.

meta

facebook-domain-verification

4pa7k0tua6v0hy39i1mnrkpe32lts6

meta

geo.placename

Furdekova 1615/14, 851 03 Bratislava, Slovakia

meta

geo.position

48.1235660;17.1192370

meta

geo.region

SK-BL

meta

ICBM

48.1235660, 17.1192370

meta

keywords

rekonštrukcie bytov, murárske práce, maliarske práce, stavebné práce

meta

msapplication-TileImage

mstile-144x144.png

200

missing X-Content-Type-Options nosniff

10509 Bytes

meta

robots

index, follow

meta

theme-color

#ffffff

meta

twitter:card

summary_large_image

meta

twitter:creator

@mlstav

meta

twitter:description

Rekonštrukcie bytov, murárske práce, rekonštrukcie interiérov, maliarske práce, elektroinštalácie, vodoinštalácie, montáž sadrokartónu, stavebné práce.

meta

twitter:image

https://www.mlstav.sk/MLstav-facebook.jpg

200

missing X-Content-Type-Options nosniff

253133 Bytes

meta

twitter:site

@mlstav

meta

twitter:title

Rekonštrukcie bytov Murárske práce Maliarske práce - MLstav

meta

viewport

width=device-width, initial-scale=1

script

src

js/bootstrap.min.js

200

Missing defer / async attribute.

missing X-Content-Type-Options nosniff

No Cache-Control - header

9833 Bytes

local SRI possible, possible hash-values:

sha256-U5ZEeKfGNOja007MMD3YBI0A3OSZOQbeG6z2f2Y0hu8=
sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa
sha512-iztkobsvnjKfAtTNdHkGVjAYTrrtlC7mGp/54c40wowO7LhURYl3gVzzcEqGl/qKXQltJ2HwMrdLcNUdo+N/RQ==

script

src

js/counter/jquery.countTo.js

200

Missing defer / async attribute.

missing X-Content-Type-Options nosniff

No Cache-Control - header

1128 Bytes

local SRI possible, possible hash-values:

sha256-AGGYFLOyVnIKn/2UCDl9D/5VWf8wHWCOtm9YU0P9g6I=
sha384-sl6fWi0bp5KXc00aG2fDWf72ayT2YZhakZgi1nKQy0znI/fQFdFARb7vKGTklab1
sha512-W+fE2PngAaUn114foOtj7bJNDqrqANLKjGb6gyz159hoF1+NnEWRfgQtEpn3kCLjQlUQ/FAhTsmmqQNOx/RBOw==

script

src

js/custom.js

200

Missing defer / async attribute.

missing X-Content-Type-Options nosniff

No Cache-Control - header

4505 Bytes

local SRI possible, possible hash-values:

sha256-XhlP+2MiiAV0ANJX+bAX95CxGS8mVbNl44RvG0L0SHc=
sha384-fWrTLl1tX/uue1ZjR4/jvhQYHfb0SAMv7sZFXyjfGnA8G474klr3BQR5Z+FFVglx
sha512-yrkniesi3il9xpaXY536ccwUCJq9tH8SyevKd7fCsS4hXdYWNkxyJXFEh0Ta0rIjIofhO83H6TEhWhrJFfHiew==

script

src

js/jquery.appear.js

200

Missing defer / async attribute.

missing X-Content-Type-Options nosniff

No Cache-Control - header

1294 Bytes

local SRI possible, possible hash-values:

sha256-ULClEKnVqbatvYUgkD8rNs2Oe1YuKcEieBb/7aujoag=
sha384-4diQ6B+01vRXtEcP55bpb1j8p6b1RuRphkVHHdyLrH/Z4INlWgYLAZNvZDTVCM60
sha512-Lr0OlOEBN2tVBgAwBNA0e7Fc5GrJPxTzUpKhN9/0ypt352HxVA/X2iZxh8Sc9mO/RhtAsZEiSmksBcvNeKzdaw==

script

src

js/jquery.min.js

200

Missing defer / async attribute.

missing X-Content-Type-Options nosniff

No Cache-Control - header

33844 Bytes

local SRI possible, possible hash-values:

sha256-wmz86cr3uWWGGVbB8XOCH0Xx4fYapL0Z3dSyZyNBHJ0=
sha384-Z8lFkhqYqTzJz5G0LtmoqyyEfPgT+RtvYXVzOZv2ktaPLxAOqPu5G5EhmzJRxgqH
sha512-P9JQcZbiHJziO9KB3/TO9JplGKwqwHQZOkgbYPy2/E578ZMyOMuL0AVa5n/WA6yZDQphAwCfgWB18y+tMI7iow==

script

src

js/mega-menu/mega_menu.js

200

Missing defer / async attribute.

missing X-Content-Type-Options nosniff

No Cache-Control - header

3360 Bytes

local SRI possible, possible hash-values:

sha256-tQ12eFjCJBB9V1d7PrOAzG/7+0OOODgIuPhJAZJEeFk=
sha384-n/5sCWGnWTE+KqenDmP0h/P3TOovv57KKqnShFEf4sbykXFaGjKN0mALtZw1oFRi
sha512-VQR6tYJOiXXbjdmwaZI0FcdjIV6SEz/PUKBSMIRqzoUau9ZTAe8m/LUQMJgHLuJwLhPwyPYowPGF+a+zs4jk8g==

script

src

js/owl-carousel/owl.carousel.min.js

200

Missing defer / async attribute.

missing X-Content-Type-Options nosniff

No Cache-Control - header

10522 Bytes

local SRI possible, possible hash-values:

sha256-g1U9IszVblV21UT2upNHXHErPALTEok+6irMFt5fz5E=
sha384-fHRZ/BnbZiOVCdwRiM+FDEJNTP/eJCF/DwHH++AVtmMrdBRY3ia7WqFEy0iTiMIa
sha512-TcGVyneWuYD0/x//7H7AaZEFARFrgm4jZR6uTcixVKzECnQBHriq+2CzDQKTV7AHEWpRyQxD2EuRSWxQ1yTeqg==

script

src

revolution/js/jquery.themepunch.revolution.min.js

200

Missing defer / async attribute.

missing X-Content-Type-Options nosniff

No Cache-Control - header

16589 Bytes

local SRI possible, possible hash-values:

sha256-MPPAuV+3ztGRga6PhJCJiUl5kXiiSE54d6CBoNnMUzM=
sha384-YdNQQtsFx5JRrisbEgHqvjLthjIssedxjHj/ozYeGCH74TLgcdBhUDEyk5jUDB7f
sha512-KW0xySQMXC/qxz7OpShz/KYIEPwdR9DQ+BCxPXGQtjBQScb2pD7wBSu6NfxFG7OdcuHpFoyK3dzstO9/qZyV+g==

script

src

revolution/js/jquery.themepunch.tools.min.js

200

Missing defer / async attribute.

missing X-Content-Type-Options nosniff

No Cache-Control - header

37333 Bytes

local SRI possible, possible hash-values:

sha256-j8Fz8PvtN3KxSJkTV8M1m54aHmfoB9Ht+p747QBQ9wE=
sha384-hXAyxd2wZtqvYCPiDclJQ/Q5I1FCPUmgXbiMl7Mu+YU6auR1HvFw9d8RBVlF1SYW
sha512-bJ7EAAAQqzhLzYTIttrVQlwf16DqWFnuCOxumGpkNuVY7n1l0yEHJuJVsEAu0d3CXhWBGtrlfd+n3So/hkyh7w==

12. Html-Parsing via https://validator.w3.org/nu/

Small Code update, wait one minute

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns.exohosting.sk, ns1.exohosting.eu, ns3.exohosting.cz

QNr.	Domain	Type	NS used
1	sk	NS	b.root-servers.net (2001:500:200::b)
	Answer: a.tld.sk, b.tld.sk, c.tld.sk, e.tld.sk, f.tld.sk, g.tld.sk, h.tld.sk
2	ns.exohosting.sk: 185.184.28.9	NS	a.tld.sk (2001:678:70::1)
3	eu	NS	d.root-servers.net (2001:500:2d::d)
	Answer: be.dns.eu, si.dns.eu, w.dns.eu, x.dns.eu, y.dns.eu
4	ns1.exohosting.eu	NS	si.dns.eu (2001:1470:8000:100::1)
	Answer: ns.exohosting.sk, ns1.exohosting.eu, ns1.exohosting.sk, ns3.exohosting.cz, ns3.exohosting.sk
5	cz	NS	a.root-servers.net (2001:503:ba3e::2:30)
	Answer: a.ns.nic.cz, b.ns.nic.cz, c.ns.nic.cz, d.ns.nic.cz
6	ns3.exohosting.cz: 2001:19f0:6c01:81c:5400:3ff:fe32:f748, 45.32.153.34	NS	a.ns.nic.cz (2001:678:f::1)
7	ns1.exohosting.sk	NS	a.tld.sk (2001:678:70::1)
	Answer: ns.exohosting.sk, ns1.exohosting.eu, ns3.exohosting.cz
	Answer: ns.exohosting.sk 185.184.28.9
8	ns3.exohosting.sk	NS	a.tld.sk (2001:678:70::1)
	Answer: ns.exohosting.sk, ns1.exohosting.eu, ns3.exohosting.cz
	Answer: ns.exohosting.sk 185.184.28.9
9	ns1.exohosting.sk: 92.240.235.93	A	ns.exohosting.sk (185.184.28.9)
10	ns1.exohosting.sk: No AAAA record found	AAAA	ns.exohosting.sk (185.184.28.9)
11	ns3.exohosting.sk: 45.32.153.34	A	ns.exohosting.sk (185.184.28.9)
12	ns3.exohosting.sk: 2001:19f0:6c01:81c:5400:3ff:fe32:f748	AAAA	ns.exohosting.sk (185.184.28.9)
13	ns1.exohosting.eu: 92.240.235.93	A	ns.exohosting.sk (185.184.28.9)
14	ns1.exohosting.eu: No AAAA record found	AAAA	ns.exohosting.sk (185.184.28.9)

14. CAA - Entries

Domainname	Value	∑ Queries
www.mlstav.sk	no CAA entry found	1
mlstav.sk	no CAA entry found	1
sk	no CAA entry found	1

15. TXT - Entries

Domainname	TXT Entry	Status	∑ Queries
mlstav.sk	google-site-verification=sZXhwLOZQorz4YZbwPHHhULzX_Ml1WqXA42H_qBzLBQ	ok	1
mlstav.sk	v=spf1 a mx ip4:92.240.234.68 ip4:92.240.253.0/24 -all	ok	1
www.mlstav.sk		ok	1
_acme-challenge.mlstav.sk		missing entry or wrong length	1
_acme-challenge.www.mlstav.sk		missing entry or wrong length	1
_acme-challenge.mlstav.sk.mlstav.sk		perhaps wrong	1
_acme-challenge.www.mlstav.sk.mlstav.sk		perhaps wrong	1
_acme-challenge.www.mlstav.sk.www.mlstav.sk		perhaps wrong	1

16. DomainService - Entries

No DomainServiceEntries entries found

17. Cipher Suites

No Ciphers found

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

Permalink: https://check-your-website.server-daten.de/?i=3f84001f-93e4-4675-98aa-85967b50d886

Last Result: https://check-your-website.server-daten.de/?q=mlstav.sk - 2021-11-06 15:04:06

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=mlstav.sk" target="_blank">Check this Site: mlstav.sk</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=mlstav.sk

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details (currently limited to 500 rows - some problems with spam users)

12. Html-Parsing via https://validator.w3.org/nu/

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks