Check DNS, Urls + Redirects, Certificates and Content of your Website

0 in Queue, 0 of max. 8 Checks (15:21:32)
Why should you only use Prefix - Cookies? |
Hall of Fame - A+ and A

 

Shortcuts: 1. IP-Addresses | 2. DNSSEC | 3. Name Servers | 4. SOA-Entries | 5. Screenshots | 6. Url-Checks | 7. Comments | 8. Connections | 9. Certificates | 10. CT-Logs | 11. Html-Content | 12. Html-Parsing | 13. NameServer-IPAddresses | 14. CAA | 15. TXT | 16. DomainServiceEntries | 17. Cipher Suites | 18. Portchecks |

 

A+

 

Top configuration, no warnings +Preload

 

Checked:
30.08.2026 11:56:17

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
packages.codeberg.org
CNAME
vip3.s.codeberg.org
yes
1
0

A
217.197.84.142
Berlin/State of Berlin/Germany (DE) - IN-BERLIN
Hostname: codeberg-142.in-berlin.de
yes



AAAA
2a0a:4580:103f:c0de::3
Berlin/State of Berlin/Germany (DE) - Individual Network Berlin e.V.

yes


www.packages.codeberg.org

Name Error
yes
1
0
*.codeberg.org
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


*.packages.codeberg.org
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






• Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 57780, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2026, 00:00:00 +, Signature-Inception: 30.08.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: org

org
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=






2 RRSIG RR to validate DS RR found






RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2026, 05:00:00 +, Signature-Inception: 30.08.2026, 04:00:00 +, KeyTag 57780, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 25488, Flags 256






Public Key with Algorithm 8, KeyTag 26974, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 44925, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 15.09.2026, 15:35:41 +, Signature-Inception: 25.08.2026, 14:35:41 +, KeyTag 26974, Signer-Name: org






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26974 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest "T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: codeberg.org

codeberg.org
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 31439, DigestType 2 and Digest hu9/fSOa0yiMj6To0gBreiynb9m3xdkRSjlFV2KV40E=






2 RRSIG RR to validate DS RR found






RRSIG-Owner codeberg.org., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 15.09.2026, 15:35:41 +, Signature-Inception: 25.08.2026, 14:35:41 +, KeyTag 44925, Signer-Name: org






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 44925 used to validate the DS RRSet in the parent zone






1 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 31439, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner codeberg.org., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 31439 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 31439, DigestType 2 and Digest "hu9/fSOa0yiMj6To0gBreiynb9m3xdkRSjlFV2KV40E=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: packages.codeberg.org

packages.codeberg.org
0 DS RR in the parent zone found






RRSIG Type 5 validates the CNAME - Result: vip3.s.codeberg.org
Validated: RRSIG-Owner packages.codeberg.org., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org



Zone: www.packages.codeberg.org

www.packages.codeberg.org
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "g77oeav0e11vaughug8hfe3fjm3ukcqt" between the hashed NSEC3-owner "fgc1a0kjkv8blj8g0lihog3mto2ctilh" and the hashed NextOwner "gib7m1fuj6bfqjfce6kvis2a8rktjigo". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner fgc1a0kjkv8blj8g0lihog3mto2ctilh.codeberg.org., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "7no3mfonfaoec7eq0mfk5g2gmfphh0fv" as Owner. That's the Hash of "packages.codeberg.org" with the NextHashedOwnerName "83pa6tu8j2c2h1fgp01fpjdos0hdrkct". So that domain name is the Closest Encloser of "www.packages.codeberg.org". Opt-Out: False.
Bitmap: CNAME, RRSIG Validated: RRSIG-Owner 7no3mfonfaoec7eq0mfk5g2gmfphh0fv.codeberg.org., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






The ClosestEncloser says, that "*.packages.codeberg.org" with the Hash "26e0d33n6nsag706ub58rvocqan9ib77" is a possible Wildcard of the DS Query Name. But the DS-Query in the parent zone sends a valid NSEC3 RR With the owner "10ov4bik475k37r0kpejmv5b0350d8m5" and the Next Owner "2an8th9v8gh8j6o9hj5gakqcm7lfmpjj", so the Hash of the wildcard is between these hashes. So that NSEC3 proves the Not-existence of that wildcard expansion. Opt-Out: False.
Bitmap: CNAME, RRSIG Validated: RRSIG-Owner 10ov4bik475k37r0kpejmv5b0350d8m5.codeberg.org., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org



Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






• Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 57780, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2026, 00:00:00 +, Signature-Inception: 30.08.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: org

org
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=






2 RRSIG RR to validate DS RR found






RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2026, 05:00:00 +, Signature-Inception: 30.08.2026, 04:00:00 +, KeyTag 57780, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 25488, Flags 256






Public Key with Algorithm 8, KeyTag 26974, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 44925, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner org., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 15.09.2026, 15:35:41 +, Signature-Inception: 25.08.2026, 14:35:41 +, KeyTag 26974, Signer-Name: org






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26974 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 26974, DigestType 2 and Digest "T+3ilMU/Q4oVjEHTlInNeKhr6w2KCur/FHRcDRbh3jI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: codeberg.org

codeberg.org
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 31439, DigestType 2 and Digest hu9/fSOa0yiMj6To0gBreiynb9m3xdkRSjlFV2KV40E=






2 RRSIG RR to validate DS RR found






RRSIG-Owner codeberg.org., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 15.09.2026, 15:35:41 +, Signature-Inception: 25.08.2026, 14:35:41 +, KeyTag 44925, Signer-Name: org






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 44925 used to validate the DS RRSet in the parent zone






1 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 31439, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner codeberg.org., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 31439 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 31439, DigestType 2 and Digest "hu9/fSOa0yiMj6To0gBreiynb9m3xdkRSjlFV2KV40E=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: s.codeberg.org

s.codeberg.org
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "e3js9vpd92l3j15mb5pgkuv1v08kln2i" between the hashed NSEC3-owner "e3js9vpd92l3j15mb5pgkuv1v08kln2i" and the hashed NextOwner "e62b3nvj530n1868e41bttvs28lavs1c". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: No Bitmap? Validated: RRSIG-Owner e3js9vpd92l3j15mb5pgkuv1v08kln2i.codeberg.org., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






0 DNSKEY RR found









Zone: vip3.s.codeberg.org

vip3.s.codeberg.org
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "52sqaav5qo91h2brvnmpd3bn8t53jepv" between the hashed NSEC3-owner "52sqaav5qo91h2brvnmpd3bn8t53jepv" and the hashed NextOwner "59va113ual1k0dpt68ttcmabkbvbdqnk". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A, AAAA, RRSIG, CAA Validated: RRSIG-Owner 52sqaav5qo91h2brvnmpd3bn8t53jepv.codeberg.org., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






0 DNSKEY RR found












RRSIG Type 1 validates the A - Result: 217.197.84.142
Validated: RRSIG-Owner vip3.s.codeberg.org., Algorithm: 13, 4 Labels, original TTL: 3600 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






RRSIG Type 28 validates the AAAA - Result: 2A0A:4580:103F:C0DE:0000:0000:0000:0003
Validated: RRSIG-Owner vip3.s.codeberg.org., Algorithm: 13, 4 Labels, original TTL: 3600 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






RRSIG Type 257 validates the CAA - Result: 32773|issueletsencrypt.org;accounturi=https://acme-staging-v02.api.letsencrypt.org/acme/acct/193562844;validationmethods=tls-alpn-01,http-01 32773|issueletsencrypt.org;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/3580806161;validationmethods=tls-alpn-01,http-01
Validated: RRSIG-Owner vip3.s.codeberg.org., Algorithm: 13, 4 Labels, original TTL: 3600 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






CNAME-Query sends a valid NSEC3 RR as result with the hashed query name "52sqaav5qo91h2brvnmpd3bn8t53jepv" equal the hashed NSEC3-owner "52sqaav5qo91h2brvnmpd3bn8t53jepv" and the hashed NextOwner "59va113ual1k0dpt68ttcmabkbvbdqnk". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, AAAA, RRSIG, CAA Validated: RRSIG-Owner 52sqaav5qo91h2brvnmpd3bn8t53jepv.codeberg.org., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






Status: Good. NoData-Proof required and found.






TXT-Query sends a valid NSEC3 RR as result with the hashed query name "52sqaav5qo91h2brvnmpd3bn8t53jepv" equal the hashed NSEC3-owner "52sqaav5qo91h2brvnmpd3bn8t53jepv" and the hashed NextOwner "59va113ual1k0dpt68ttcmabkbvbdqnk". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, AAAA, RRSIG, CAA Validated: RRSIG-Owner 52sqaav5qo91h2brvnmpd3bn8t53jepv.codeberg.org., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






Status: Good. NoData-Proof required and found.






TLSA-Query (_443._tcp.vip3.s.codeberg.org) sends a valid NSEC3 RR as result with the hashed owner name "52sqaav5qo91h2brvnmpd3bn8t53jepv" (unhashed: vip3.s.codeberg.org). So that's the Closest Encloser of the query name.
Bitmap: A, AAAA, RRSIG, CAA Validated: RRSIG-Owner 52sqaav5qo91h2brvnmpd3bn8t53jepv.codeberg.org., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






Status: Good. NXDomain-Proof required and found.






TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Next Closer Name "vvqca81v430hhcp1m4ico0fqqc3jcthc" (unhashed: _tcp.vip3.s.codeberg.org) with the owner "v9a5ir7boq4db2r8kl4q9dr7fepd6uqi" and the NextOwner "0ne8h5oa1p4gqqh45p39fkht6hbpq5s9". So that NSEC3 confirms the not-existence of the Next Closer Name.
Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner v9a5ir7boq4db2r8kl4q9dr7fepd6uqi.codeberg.org., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






Status: Good. NXDomain-Proof required and found.






TLSA-Query sends a valid NSEC3 RR as result and covers the hashed Wildcard expansion of the ClosestEncloser "ocuvbknhlm6od3dofo2m8vfm5r40g6p6" (unhashed: *.vip3.s.codeberg.org) with the owner "nr83valfto5lq5nlnl82gbi5o7g1nb3m" and the NextOwner "psqqcnqlktppv2o6ifjr09amt67jlg53". So that NSEC3 confirms the not-existence of the Wildcard expansion.
Bitmap: No Bitmap? Validated: RRSIG-Owner nr83valfto5lq5nlnl82gbi5o7g1nb3m.codeberg.org., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 10.09.2026, 00:00:00 +, Signature-Inception: 20.08.2026, 00:00:00 +, KeyTag 31439, Signer-Name: codeberg.org






Status: Good. NXDomain-Proof required and found.

 

3. Name Servers

DomainNameserverNS-IP
www.packages.codeberg.org
•  get.desec.io

codeberg.org
•  get.desec.io


•  ns1.desec.io / 50b6d9c5bf32
45.54.76.1
Dallas/Texas/United States (US) - NetActuate, Inc		•

• 
2607:f740:e633:deec::2
Dallas/Texas/United States (US) - NetActuate, Inc		•

•  ns2.desec.org / e098cc4d852c
157.53.224.1
New York/United States (US) - NetActuate, Inc		•

• 
2607:f740:e00a:deec::2
New York/United States (US) - NetActuate, Inc		•
org
•  a0.org.afilias-nst.info / app14.lax1.hosts.meta.redstone.afilias-nst.info-1633102198
•

•  a2.org.afilias-nst.info / FRA4
•

•  b0.org.afilias-nst.org / app10.lax1.hosts.meta.redstone.afilias-nst.info-1633102198
•

•  b2.org.afilias-nst.org / FRA3
•

•  c0.org.afilias-nst.info / app10.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861
•

•  d0.org.afilias-nst.org / app22.lax1.hosts.meta.redstone.afilias-nst.info-1633102198
•
vip3.s.codeberg.org
•  get.desec.io

s.codeberg.org
X  get.desec.io
88.99.64.5
Falkenstein/Saxony/Germany (DE) - Hetzner Online GmbH		•

T 
2a01:4f8:10a:1044:deec:642:ac10:80
Falkenstein/Saxony/Germany (DE) - Hetzner Online GmbH
codeberg.org
•  get.desec.io


•  ns1.desec.io / 50b6d9c5bf32
45.54.76.1
Dallas/Texas/United States (US) - NetActuate, Inc		•

• 
2607:f740:e633:deec::2
Dallas/Texas/United States (US) - NetActuate, Inc		•

•  ns2.desec.org / e098cc4d852c
157.53.224.1
New York/United States (US) - NetActuate, Inc		•

• 
2607:f740:e00a:deec::2
New York/United States (US) - NetActuate, Inc		•
org
•  a0.org.afilias-nst.info / app5.lax1.hosts.meta.redstone.afilias-nst.info-1633102198
•

•  a2.org.afilias-nst.info / FRA3
•

•  b0.org.afilias-nst.org / app20.lax1.hosts.meta.redstone.afilias-nst.info-1633102198
•

•  b2.org.afilias-nst.org / FRA4
•

•  c0.org.afilias-nst.info / app13.nrt1.hosts.meta.redstone.afilias-nst.info-1615580861
•

•  d0.org.afilias-nst.org / app20.lax1.hosts.meta.redstone.afilias-nst.info-1633102198
•

 

4. SOA-Entries


Domain:org
Zone-Name:org
Primary:a0.org.afilias-nst.info
Mail:hostmaster.donuts.email
Serial:1788083273
Refresh:7200
Retry:900
Expire:1209600
TTL:3600
num Entries:6


Domain:codeberg.org
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:codeberg.org
Zone-Name:codeberg.org
Primary:get.desec.io
Mail:get.desec.io
Serial:2026084557
Refresh:86400
Retry:3600
Expire:2419200
TTL:3600
num Entries:4


Domain:www.packages.codeberg.org
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:org
Zone-Name:org
Primary:a0.org.afilias-nst.info
Mail:hostmaster.donuts.email
Serial:1788083273
Refresh:7200
Retry:900
Expire:1209600
TTL:3600
num Entries:6


Domain:codeberg.org
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:codeberg.org
Zone-Name:codeberg.org
Primary:get.desec.io
Mail:get.desec.io
Serial:2026084557
Refresh:86400
Retry:3600
Expire:2419200
TTL:3600
num Entries:4


Domain:s.codeberg.org
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:2


Domain:vip3.s.codeberg.org
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


5. Screenshots

Startaddress: https://packages.codeberg.org/, address used: https://packages.codeberg.org/, Screenshot created 2026-08-30 12:00:01 +00:0

 

Mobil (412px x 732px)

 

730 milliseconds

 

Screenshot mobile - https://packages.codeberg.org/
Mobil + Landscape (732px x 412px)

 

735 milliseconds

 

Screenshot mobile landscape - https://packages.codeberg.org/
Screen (1280px x 1680px)

 

795 milliseconds

 

Screenshot Desktop - https://packages.codeberg.org/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport412732
content Size412732

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://packages.codeberg.org/
217.197.84.142
302
https://packages.codeberg.org/

0.030
A
Location: https://packages.codeberg.org/
Cache-Control: no-cache
Content-Length: 0

• http://packages.codeberg.org/
2a0a:4580:103f:c0de::3
302
https://packages.codeberg.org/

0.017
A
Location: https://packages.codeberg.org/
Cache-Control: no-cache
Content-Length: 0

• https://packages.codeberg.org/
217.197.84.142 No Compression used - 2761 / 6323 - 43.67 % possible
Inline-JavaScript (∑/total): 1/2 Inline-CSS (∑/total): 0/0		200

Html is minified: 1293.05 %
Other inline scripts (∑/total): 0/0		1.874
A
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Alt-Svc: h3=":443"; ma=2592000,h3=":443"; ma=2592000
Date: Sun, 30 Aug 2026 09:58:37 GMT
Permissions-Policy: interest-cohort=()
Server: lighttpd/1.4.79
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Via: 1.1 Caddy
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Length: 6323
Content-Type: text/html; charset=utf-8

• https://packages.codeberg.org/
2a0a:4580:103f:c0de::3 No Compression used - 2761 / 6323 - 43.67 % possible
Inline-JavaScript (∑/total): 1/2 Inline-CSS (∑/total): 0/0		200

Html is minified: 1293.05 %
Other inline scripts (∑/total): 0/0		1.826
A
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Alt-Svc: h3=":443"; ma=2592000,h3=":443"; ma=2592000
Date: Sun, 30 Aug 2026 09:58:41 GMT
Permissions-Policy: interest-cohort=()
Server: lighttpd/1.4.79
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Via: 1.1 Caddy
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Length: 6323
Content-Type: text/html; charset=utf-8

• http://packages.codeberg.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
217.197.84.142
302
https://packages.codeberg.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.000
A
Visible Content:
Location: https://packages.codeberg.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-cache
Content-Length: 0

• http://packages.codeberg.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a0a:4580:103f:c0de::3
302
https://packages.codeberg.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.017
A
Visible Content:
Location: https://packages.codeberg.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-cache
Content-Length: 0

• https://packages.codeberg.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		404

Html is minified: 114.49 %
Other inline scripts (∑/total): 0/0		1.843
A
Not Found
Visible Content:
Access-Control-Allow-Origin: *
Alt-Svc: h3=":443"; ma=2592000,h3=":443"; ma=2592000
Date: Sun, 30 Aug 2026 09:58:47 GMT
Permissions-Policy: interest-cohort=()
Server: lighttpd/1.4.79
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Via: 1.1 Caddy
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Length: 158
Content-Type: text/html

• https://217.197.84.142/
217.197.84.142
-103


0.030
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'InternalError' (FF: SSL_ERROR_INTERNAL_ERROR_ALERT)

• https://[2a0a:4580:103f:c0de:0000:0000:0000:0003]/
2a0a:4580:103f:c0de::3
-103


0.014
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'InternalError' (FF: SSL_ERROR_INTERNAL_ERROR_ALERT)

 

7. Comments


1. General Results, most used to calculate the result

Aname "packages.codeberg.org" is subdomain, public suffix is ".org", top-level-domain is ".org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)", num .org-domains preloaded: 10357 (complete: 276475)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: packages.codeberg.org has 2 different ip addresses (authoritative).
AGood: Ipv4 and Ipv6 addresses per domain name found: packages.codeberg.org has 1 ipv4, 1 ipv6 addresses
AGood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: non-www is preferred
AGood: No cookie sent via http.
AGood: HSTS has preload directive
AExcellent: Main Domain is in the Google-Preload-List
AExcellent: Main Domain is in the Mozilla/Firefox-Preload-List
AHSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):2 complete Content-Type - header (3 urls)
https://packages.codeberg.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Url with incomplete Content-Type - header - missing charset
Ahttp://packages.codeberg.org/ 217.197.84.142
302
https://packages.codeberg.org/
Correct redirect http - https with the same domain name
Ahttp://packages.codeberg.org/ 2a0a:4580:103f:c0de::3
302
https://packages.codeberg.org/
Correct redirect http - https with the same domain name
XFatal error: Nameserver doesn't support TCP connection: get.desec.io / 2a01:4f8:10a:1044:deec:642:ac10:80: Timeout
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain packages.codeberg.org, 2 ip addresses.
Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain packages.codeberg.org, 2 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.packages.codeberg.org

2. Header-Checks

Apackages.codeberg.org 217.197.84.142
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Permissions-Policy
Ok: Header without syntax errors found: interest-cohort=()
A
X-Frame-Options
Ok: Header without syntax errors found: sameorigin
B

Info: Header is deprecated. May not longer work in modern browsers. sameorigin. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
Apackages.codeberg.org 2a0a:4580:103f:c0de::3
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Permissions-Policy
Ok: Header without syntax errors found: interest-cohort=()
A
X-Frame-Options
Ok: Header without syntax errors found: sameorigin
B

Info: Header is deprecated. May not longer work in modern browsers. sameorigin. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
Fpackages.codeberg.org 217.197.84.142
Content-Security-Policy
Critical: Missing Header:
Fpackages.codeberg.org 217.197.84.142
Referrer-Policy
Critical: Missing Header:
Bpackages.codeberg.org 217.197.84.142
Cross-Origin-Embedder-Policy
Info: Missing Header
Bpackages.codeberg.org 217.197.84.142
Cross-Origin-Opener-Policy
Info: Missing Header
Bpackages.codeberg.org 217.197.84.142
Cross-Origin-Resource-Policy
Info: Missing Header
Fpackages.codeberg.org 2a0a:4580:103f:c0de::3
Content-Security-Policy
Critical: Missing Header:
Fpackages.codeberg.org 2a0a:4580:103f:c0de::3
Referrer-Policy
Critical: Missing Header:
Bpackages.codeberg.org 2a0a:4580:103f:c0de::3
Cross-Origin-Embedder-Policy
Info: Missing Header
Bpackages.codeberg.org 2a0a:4580:103f:c0de::3
Cross-Origin-Opener-Policy
Info: Missing Header
Bpackages.codeberg.org 2a0a:4580:103f:c0de::3
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks

AInfo:: 4 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 4 Queries complete, 4 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
AGood: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.ns1.desec.io (2607:f740:e633:deec::2, 45.54.76.1), ns2.desec.org (157.53.224.1, 2607:f740:e00a:deec::2)
AGood (1 - 3.0):: An average of 2.0 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 3 different Name Servers found: get.desec.io, ns1.desec.io, ns2.desec.org, 2 Name Servers included in Delegation: ns1.desec.io, ns2.desec.org, 2 Name Servers included in 2 Zone definitions: ns1.desec.io, ns2.desec.org, 1 Name Servers listed in SOA.Primary: get.desec.io.
AGood: Only one SOA.Primary Name Server found.: get.desec.io.
Error: SOA.Primary Name Server not included in the delegation set.: get.desec.io.
AGood: All Name Server Domain Names have a Public Suffix.
Error: Name Server Domain Names with Public Suffix and without ip address found.: 1 Name Servers without ipv4 and ipv6: 1

AInfo: Ipv4-Subnet-list: 2 Name Servers, 2 different subnets (first Byte): 157., 45., 2 different subnets (first two Bytes): 157.53., 45.54., 2 different subnets (first three Bytes): 157.53.224., 45.54.76.
AExcellent: Every Name Server IPv4-address starts with an unique Byte.
AInfo: IPv6-Subnet-list: 2 Name Servers with IPv6, 1 different subnets (first block): 2607:, 1 different subnets (first two blocks): 2607:f740:, 2 different subnets (first three blocks): 2607:f740:e00a:, 2607:f740:e633:, 2 different subnets (first four blocks): 2607:f740:e00a:deec:, 2607:f740:e633:deec:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 8 good Nameserver
AGood: Nameserver supports Echo Capitalization: 8 good Nameserver
XNameserver Timeout checking Echo Capitalization: get.desec.io / 2a01:4f8:10a:1044:deec:642:ac10:80
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 8 good Nameserver
Nameserver doesn't pass all EDNS-Checks: a2.org.afilias-nst.info: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (FRA3). COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: get.desec.io: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: get.desec.io: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: get.desec.io: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: get.desec.io: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: get.desec.io / 88.99.64.5: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: get.desec.io / 2a01:4f8:10a:1044:deec:642:ac10:80: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: ns1.desec.io / 45.54.76.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (50b6d9c5bf32). COOKIE: SOA expected, but NOT found, NOERR expected, BADVER found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.desec.io / 45.54.76.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (50b6d9c5bf32). COOKIE: SOA expected, but NOT found, NOERR expected, BADVER found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.desec.io / 2607:f740:e633:deec::2: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (50b6d9c5bf32). COOKIE: SOA expected, but NOT found, NOERR expected, BADVER found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.desec.io / 2607:f740:e633:deec::2: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (50b6d9c5bf32). COOKIE: SOA expected, but NOT found, NOERR expected, BADVER found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.desec.org / 157.53.224.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (e098cc4d852c). COOKIE: SOA expected, but NOT found, NOERR expected, BADVER found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.desec.org / 157.53.224.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (e098cc4d852c). COOKIE: SOA expected, but NOT found, NOERR expected, BADVER found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.desec.org / 2607:f740:e00a:deec::2: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (e098cc4d852c). COOKIE: SOA expected, but NOT found, NOERR expected, BADVER found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.desec.org / 2607:f740:e00a:deec::2: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (e098cc4d852c). COOKIE: SOA expected, but NOT found, NOERR expected, BADVER found, Version 0 expectend and found. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
AGood: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: mail is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: vmc is allowed to create certificates
Warning: Unknown CAA found: mail isn't defined. Unknown entry. May be wrong written, may be not longer valid. May be a missing entry in this tool.
Warning: Unknown CAA found: vmc isn't defined. Unknown entry. May be wrong written, may be not longer valid. May be a missing entry in this tool.

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
https://packages.codeberg.org/ 217.197.84.142
200

Warning: https result with status 200 and size greater then 1024 Bytes without Compression found. Add Compression support (gzip, deflate, br - these are checked) so the html content is compressed.
https://packages.codeberg.org/ 2a0a:4580:103f:c0de::3
200

Warning: https result with status 200 and size greater then 1024 Bytes without Compression found. Add Compression support (gzip, deflate, br - these are checked) so the html content is compressed.
https://packages.codeberg.org/ 217.197.84.142
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://packages.codeberg.org/ 2a0a:4580:103f:c0de::3
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://packages.codeberg.org/ 217.197.84.142
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://packages.codeberg.org/ 2a0a:4580:103f:c0de::3
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://packages.codeberg.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
1.843 seconds
Warning: 404 needs more then one second
ADuration: 228633 milliseconds, 228.633 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
packages.codeberg.org
217.197.84.142
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
packages.codeberg.org
217.197.84.142
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=packages.codeberg.org


2CN=YE1, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


packages.codeberg.org
2a0a:4580:103f:c0de::3
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

packages.codeberg.org
2a0a:4580:103f:c0de::3
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=packages.codeberg.org


2CN=YE1, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US


packages.codeberg.org
packages.codeberg.org
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

packages.codeberg.org
packages.codeberg.org
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=packages.codeberg.org


2CN=YE1, O=Let's Encrypt, C=US


3CN=Root YE, O=ISRG, C=US


4CN=ISRG Root X2, O=Internet Security Research Group, C=US

 

9. Certificates

1.
1.
CN=packages.codeberg.org
29.07.2026
27.10.2026
expires in 20 days		packages.codeberg.org - 1 entry
1.
1.
CN=packages.codeberg.org
29.07.2026

27.10.2026
expires in 20 days


packages.codeberg.org - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:05BCFB00BF83EB33225B88066C1D37B20238
Thumbprint:E155CBF1B753951E1C8C9D25211486F336D08644
SHA256 / Certificate:O8M1CDFsBor6+fE/WpLGaGx6J0uMiNGFtmvfdOMKoqY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e115bc8cbf90adc2558610af4795524689726f1e17f45be78e805344a2e5ebbc
SHA256 hex / Subject Public Key Information (SPKI):e115bc8cbf90adc2558610af4795524689726f1e17f45be78e805344a2e5ebbc (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




2.
CN=packages.codeberg.org
29.07.2026
27.10.2026
expires in 20 days		packages.codeberg.org - 1 entry

2.
CN=packages.codeberg.org
29.07.2026

27.10.2026
expires in 20 days


packages.codeberg.org - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:05BCFB00BF83EB33225B88066C1D37B20238
Thumbprint:E155CBF1B753951E1C8C9D25211486F336D08644
SHA256 / Certificate:O8M1CDFsBor6+fE/WpLGaGx6J0uMiNGFtmvfdOMKoqY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e115bc8cbf90adc2558610af4795524689726f1e17f45be78e805344a2e5ebbc
SHA256 hex / Subject Public Key Information (SPKI):e115bc8cbf90adc2558610af4795524689726f1e17f45be78e805344a2e5ebbc (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=packages.codeberg.org
29.07.2026
27.10.2026
expires in 20 days		packages.codeberg.org - 1 entry

3.
CN=packages.codeberg.org
29.07.2026

27.10.2026
expires in 20 days


packages.codeberg.org - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:05BCFB00BF83EB33225B88066C1D37B20238
Thumbprint:E155CBF1B753951E1C8C9D25211486F336D08644
SHA256 / Certificate:O8M1CDFsBor6+fE/WpLGaGx6J0uMiNGFtmvfdOMKoqY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e115bc8cbf90adc2558610af4795524689726f1e17f45be78e805344a2e5ebbc
SHA256 hex / Subject Public Key Information (SPKI):e115bc8cbf90adc2558610af4795524689726f1e17f45be78e805344a2e5ebbc (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




4.
CN=packages.codeberg.org
29.07.2026
27.10.2026
expires in 20 days		packages.codeberg.org - 1 entry

4.
CN=packages.codeberg.org
29.07.2026

27.10.2026
expires in 20 days


packages.codeberg.org - 1 entry

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:05BCFB00BF83EB33225B88066C1D37B20238
Thumbprint:E155CBF1B753951E1C8C9D25211486F336D08644
SHA256 / Certificate:O8M1CDFsBor6+fE/WpLGaGx6J0uMiNGFtmvfdOMKoqY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e115bc8cbf90adc2558610af4795524689726f1e17f45be78e805344a2e5ebbc
SHA256 hex / Subject Public Key Information (SPKI):e115bc8cbf90adc2558610af4795524689726f1e17f45be78e805344a2e5ebbc (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




5.
CN=YE1, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 697 days

5.
CN=YE1, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 697 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:5DDD70DD31F801C85C186A7A04B80AFE
Thumbprint:D09370A9864982A5047DA46373540256D08A3C81
SHA256 / Certificate:ojctBkMelxY2Xu7UfsAgNRSX0YL8wDjkV+WBaKA8rAc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):6ebcefb4210b088654a38b03fea3d7d1c711b4fb1ddc363a45f9b1a4e53da01e
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




6.
CN=YE1, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 697 days

6.
CN=YE1, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 697 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:5DDD70DD31F801C85C186A7A04B80AFE
Thumbprint:D09370A9864982A5047DA46373540256D08A3C81
SHA256 / Certificate:ojctBkMelxY2Xu7UfsAgNRSX0YL8wDjkV+WBaKA8rAc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):6ebcefb4210b088654a38b03fea3d7d1c711b4fb1ddc363a45f9b1a4e53da01e
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




7.
CN=YE1, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 697 days

7.
CN=YE1, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 697 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:5DDD70DD31F801C85C186A7A04B80AFE
Thumbprint:D09370A9864982A5047DA46373540256D08A3C81
SHA256 / Certificate:ojctBkMelxY2Xu7UfsAgNRSX0YL8wDjkV+WBaKA8rAc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):6ebcefb4210b088654a38b03fea3d7d1c711b4fb1ddc363a45f9b1a4e53da01e
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




8.
CN=YE1, O=Let's Encrypt, C=US
03.09.2025
03.09.2028
expires in 697 days

8.
CN=YE1, O=Let's Encrypt, C=US
03.09.2025

03.09.2028
expires in 697 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:5DDD70DD31F801C85C186A7A04B80AFE
Thumbprint:D09370A9864982A5047DA46373540256D08A3C81
SHA256 / Certificate:ojctBkMelxY2Xu7UfsAgNRSX0YL8wDjkV+WBaKA8rAc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):6ebcefb4210b088654a38b03fea3d7d1c711b4fb1ddc363a45f9b1a4e53da01e
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




9.
CN=Root YE, O=ISRG, C=US
03.09.2025
03.09.2032
expires in 2158 days

9.
CN=Root YE, O=ISRG, C=US
03.09.2025

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:6F5E60E69C3A7469906619D56E4F499A
Thumbprint:40050D482E5AC1271EE1FE5D06F542A498145B0C
SHA256 / Certificate:LXtbQp+AwPCgMqAFH2lqD40LmJgOcfbyROrGNnvEyRc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




10.
CN=Root YE, O=ISRG, C=US
03.09.2025
03.09.2032
expires in 2158 days

10.
CN=Root YE, O=ISRG, C=US
03.09.2025

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:6F5E60E69C3A7469906619D56E4F499A
Thumbprint:40050D482E5AC1271EE1FE5D06F542A498145B0C
SHA256 / Certificate:LXtbQp+AwPCgMqAFH2lqD40LmJgOcfbyROrGNnvEyRc=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




11.
CN=Root YE, O=ISRG, C=US
13.05.2026
03.09.2032
expires in 2158 days

11.
CN=Root YE, O=ISRG, C=US
13.05.2026

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:00872165FC34B6E5FBA8ADD5B3705FB53A
Thumbprint:F37620FC4B1CDDD2A3D74B1D5E8DB42E244CA006
SHA256 / Certificate:D8CQHMorrp6f27AtUNAvEJT3s2ZyCGmRueiXYm3EhfA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




12.
CN=Root YE, O=ISRG, C=US
13.05.2026
03.09.2032
expires in 2158 days

12.
CN=Root YE, O=ISRG, C=US
13.05.2026

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:00872165FC34B6E5FBA8ADD5B3705FB53A
Thumbprint:F37620FC4B1CDDD2A3D74B1D5E8DB42E244CA006
SHA256 / Certificate:D8CQHMorrp6f27AtUNAvEJT3s2ZyCGmRueiXYm3EhfA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b0292ae545978e0fbb98abbd94c861605e5b18bb32ed523f50d5b7b5c71d47bc
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




13.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
03.09.2025
03.09.2032
expires in 2158 days

13.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
03.09.2025

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:7F2AB707B5BDD93C9FD48B7C6029DB33
Thumbprint:B8FB05664499509659A0C8F081816C473824AD1D
SHA256 / Certificate:AL6u8oAnfjiZnTxgsnc26PIeeCw9S0RKw01GWnqyh8U=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




14.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020
17.09.2040
expires in 5094 days

14.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020

17.09.2040
expires in 5094 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:41D29DD172EAEEA780C12C6CE92F8752
Thumbprint:BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA256 / Certificate:aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





15.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020
17.09.2040
expires in 5094 days

15.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
04.09.2020

17.09.2040
expires in 5094 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:41D29DD172EAEEA780C12C6CE92F8752
Thumbprint:BDB1B93CD5978D45C6261455F8DB95C75AD153AF
SHA256 / Certificate:aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





16.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
13.05.2026
03.09.2032
expires in 2158 days

16.
CN=ISRG Root X2, O=Internet Security Research Group, C=US
13.05.2026

03.09.2032
expires in 2158 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:6C8F1DC727C7117F7BAF853AC980F9CD
Thumbprint:3C34E356C7FC17F5ACF04824BC587C6C623951A2
SHA256 / Certificate:7l96vWmBuwJVYyzY9JKDRRtLGIRNEgQLRO4A8HuP4sY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):762195c225586ee6c0237456e2107dc54f1efc21f61a792ebd515913cce68332
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)



 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=YE1, O=Let's Encrypt, C=US
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
16162196057
leaf cert		CN=YE1, O=Let's Encrypt, C=US
2026-07-29 18:47:05
2026-10-27 18:47:04
packages.codeberg.org - 1 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://packages.codeberg.org/
217.197.84.142		meta
other
2

0


0
0
0

https://packages.codeberg.org/
2a0a:4580:103f:c0de::3		meta
other
2

0


0
0
0

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsg∑Status
https://packages.codeberg.org/
217.197.84.142
meta
charset
 utf-8


1
ok















meta
color-scheme
light dark


1
ok














2a0a:4580:103f:c0de::3
meta
charset
 utf-8


1
ok















meta
color-scheme
light dark


1
ok














 

12. Html-Parsing via https://validator.w3.org/nu/

Url used (first standard-https-result with http status 200): https://packages.codeberg.org/

Summary

Good: No non-document-errors
0 errors
7 warnings

TypeMessagenum found
1.warningConsider adding a lang attribute to the html start tag to declare the language of this document.1
2.warningThe type attribute for the style element is not needed and should be omitted.1
3.warningThis document has heading elements but none of them has a computed heading level of 1.1
4.warningThe cellpadding attribute on the table element is obsolete. Use CSS instead.1
5.warningThe cellspacing attribute on the table element is obsolete. Use CSS instead.1
6.warningThe summary attribute on the table element is obsolete. Consider describing the structure of the table in a caption element or in a figure element containing the table; or, simplify the structure of the table so that no description is needed.1
7.warningThe type attribute is unnecessary for JavaScript resources.1

Details


TypeMessage + Sample
1warningConsider adding a lang attribute to the html start tag to declare the language of this document.

From line 1, column 16 to line 2, column 6

TYPE html> <html> <head
2warningThe type attribute for the style element is not needed and should be omitted.

From line 6, column 1 to line 6, column 23

/</title> <style type="text/css"> a, a:
3warningThis document has heading elements but none of them has a computed heading level of 1.

From line 29, column 1 to line 29, column 4

d> <body> <h2>Index
4warningThe summary attribute on the table element is obsolete. Consider describing the structure of the table in a caption element or in a figure element containing the table; or, simplify the structure of the table so that no description is needed.

From line 31, column 1 to line 31, column 67

s="list"> <table summary="Directory Listing" cellpadding="0" cellspacing="0"> <thea
5warningThe cellpadding attribute on the table element is obsolete. Use CSS instead.

From line 31, column 1 to line 31, column 67

s="list"> <table summary="Directory Listing" cellpadding="0" cellspacing="0"> <thea
6warningThe cellspacing attribute on the table element is obsolete. Use CSS instead.

From line 31, column 1 to line 31, column 67

s="list"> <table summary="Directory Listing" cellpadding="0" cellspacing="0"> <thea
7warningThe type attribute is unnecessary for JavaScript resources.

From line 39, column 1 to line 39, column 31

79</div> <script type="text/javascript"> // <!

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns1.desec.io, ns2.desec.org

 

QNr.DomainTypeNS used
1
io
NS
k.root-servers.net (2001:7fd::1)

Answer: a0.nic.io, a2.nic.io, b0.nic.io, c0.nic.io
2
ns1.desec.io: 2607:f740:e633:deec::2, 45.54.76.1
NS
a0.nic.io (2a01:8840:9e::17)
3
org
NS
a.root-servers.net (2001:503:ba3e::2:30)

Answer: a0.org.afilias-nst.info, a2.org.afilias-nst.info, b0.org.afilias-nst.org, b2.org.afilias-nst.org, c0.org.afilias-nst.info, d0.org.afilias-nst.org
4
ns2.desec.org: 157.53.224.1, 2607:f740:e00a:deec::2
NS
a0.org.afilias-nst.info (2001:500:e::1)

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
packages.codeberg.org
32773
issue
letsencrypt.org;accounturi=https://acme-staging-v02.api.letsencrypt.org/acme/acct/193562844;validationmethods=tls-alpn-01,http-01
1
0

32773
issue
letsencrypt.org;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/3580806161;validationmethods=tls-alpn-01,http-01
1
0
vip3.s.codeberg.org
32773
issue
letsencrypt.org;accounturi=https://acme-staging-v02.api.letsencrypt.org/acme/acct/193562844;validationmethods=tls-alpn-01,http-01
1
0

32773
issue
letsencrypt.org;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/3580806161;validationmethods=tls-alpn-01,http-01
1
0
s.codeberg.org
0

no CAA entry found
1
0
codeberg.org
32773
issue
letsencrypt.org;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/3240266871;validationmethods=dns-01
1
0

32773
issue
letsencrypt.org;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/3240266871;validationmethods=dns-01
1
0

32777
issue
mail;
1
0

32777
issue
mail;
1
0

32773
iodef
mailto:codeberg@codeberg.org
1
0

32773
iodef
mailto:codeberg@codeberg.org
1
0

32776
issue
vmc;
1
0

32776
issue
vmc;
1
0
org
0

no CAA entry found
1
0

0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
codeberg.org
abuseipdb-verification=V28CJUPq
ok
1
0
codeberg.org
v=spf1 mx a:mail.codeberg.eu -all
ok
1
0
packages.codeberg.org


1
0
_acme-challenge.vip3.s.codeberg.org

Name Error - The domain name does not exist
1
0
_acme-challenge.packages.codeberg.org

Name Error - The domain name does not exist
1
0
_acme-challenge.packages.codeberg.org.codeberg.org

Name Error - The domain name does not exist
1
0
_acme-challenge.vip3.s.codeberg.org.vip3.s.codeberg.org

Name Error - The domain name does not exist
1
0
_acme-challenge.packages.codeberg.org.packages.codeberg.org

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
SPF
TXT
packages.codeberg.org

32768TXT expected, but CNAME found. CNAME not allowed, only TXT queries are allowed. See RFC 7208, 4.4.

				 
			

				 
			
17. Cipher Suites
Summary
DomainIPPortnum CipherstimeStd.ProtocolForward Secrecy
packages.codeberg.org
217.197.84.142
443
3 Ciphers23.44 sec
0 without, 3 FS
100.00 %
packages.codeberg.org
2a0a:4580:103f:c0de::3
443
3 Ciphers19.93 sec
0 without, 3 FS
100.00 %
Complete

2
6 Ciphers
3.00 Ciphers/Check		43.37 sec21.69 sec/Check
0 without, 6 FS
100.00 %

Details
DomainIPPortCipher (OpenSsl / IANA)
packages.codeberg.org
217.197.84.142
443
ECDHE-ECDSA-CHACHA20-POLY1305
 (Recommended)
TLSv1.2
0xCC,0xA9
 FS
3 Ciphers, 

23.44 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
 (Recommended)
TLSv1.2
0xC0,0x2C
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
 (Recommended)
TLSv1.2
0xC0,0x2B
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD


2a0a:4580:103f:c0de::3
443
ECDHE-ECDSA-CHACHA20-POLY1305
 (Recommended)
TLSv1.2
0xCC,0xA9
 FS
3 Ciphers, 

19.93 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
 (Recommended)
TLSv1.2
0xC0,0x2C
 FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
 (Recommended)
TLSv1.2
0xC0,0x2B
 FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD


				 
			
18. Portchecks



No open Ports <> 80 / 443 found, so no additional Ports checked.



				 
			

				 
			

Permalink: https://check-your-website.server-daten.de/?i=ac8389a1-ce11-40fa-aecf-e8044c59ef08

				 
			


Last Result: https://check-your-website.server-daten.de/?q=packages.codeberg.org - 2026-08-30 11:56:17

				 
			
Do you like this page? Support this tool, add a link on your page:

				 
			
<a href="https://check-your-website.server-daten.de/?q=packages.codeberg.org" target="_blank">Check this Site: packages.codeberg.org</a>

				 
			

				 
			


Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

				 
			
QR-Code of this page - https://check-your-website.server-daten.de/?d=packages.codeberg.org

				 
			

				 
			



Jürgen Auer • Friedenstr. 37 • 10249 Berlin • +49(0)30 420 200 60 • info@sql-und-xml.de • 
USt-IdNr.: DE221734518

				 
			


Errors, ideas, questions? Use the 
Contact form • A project using

Server-Daten - Web Database solutions