Check DNS, Urls + Redirects, Certificates and Content of your Website

0 in Queue, 0 of max. 4 Checks (09:54:13)
Why should you only use Prefix - Cookies? |
Hall of Fame - A+ and A


Shortcuts: 1. IP-Addresses | 2. DNSSEC | 3. Name Servers | 4. SOA-Entries | 5. Screenshots | 6. Url-Checks | 7. Comments | 8. Connections | 9. Certificates | 10. CT-Logs | 11. Html-Content | 12. NameServer-IPAddresses | 13. CAA | 14. TXT | 15. DomainServiceEntries | 16. Cipher Suites | 17. Portchecks |


R

Redirect to not existing domain

Checked:
25.05.2023 20:51:21


Older results

R - 24.05.2023 21:27:25


1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
posdocs.fisica.unam.mx
CNAME
apps.fisica.unam.mx
yes
2
1

A
132.248.7.233
Ensenada/Baja California/Mexico (MX) - Universidad Nacional Autonoma de Mexico
Hostname: apps.fisica.unam.mx
yes


www.posdocs.fisica.unam.mx

Name Error
yes
2
1
*.fisica.unam.mx
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


*.posdocs.fisica.unam.mx
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes



2. DNSSEC

Zone (*)DNSSEC - Informations

Zone: (root)
(root)
1 DS RR published



DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=



• Status: Valid because published



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 60955, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 11.06.2023, 00:00:00 +, Signature-Inception: 21.05.2023, 00:00:00 +, KeyTag 20326, Signer-Name: (root)



• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: mx
mx
1 DS RR in the parent zone found



DS with Algorithm 8, KeyTag 61885, DigestType 2 and Digest vTTcetddlBJYEDN3AMbQ+e5dv9TVLRPC2IrF5w3rj3k=



2 RRSIG RR to validate DS RR found



RRSIG-Owner mx., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 07.06.2023, 17:00:00 +, Signature-Inception: 25.05.2023, 16:00:00 +, KeyTag 60955, Signer-Name: (root)



• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 60955 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 46303, Flags 256



Public Key with Algorithm 8, KeyTag 61885, Flags 257 (SEP = Secure Entry Point)



2 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner mx., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 23.06.2023, 00:00:00 +, Signature-Inception: 24.05.2023, 00:00:00 +, KeyTag 46303, Signer-Name: mx



RRSIG-Owner mx., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 01.07.2023, 15:00:00 +, Signature-Inception: 02.05.2023, 15:00:00 +, KeyTag 61885, Signer-Name: mx



• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 46303 used to validate the DNSKEY RRSet



• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61885 used to validate the DNSKEY RRSet



• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 61885, DigestType 2 and Digest "vTTcetddlBJYEDN3AMbQ+e5dv9TVLRPC2IrF5w3rj3k=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: unam.mx
unam.mx
1 DS RR in the parent zone found



DS with Algorithm 13, KeyTag 54058, DigestType 2 and Digest 6j6wEYPlvBOsrEaSgx6oHam22PQCqzq0+hpcHvUoaeA=



2 RRSIG RR to validate DS RR found



RRSIG-Owner unam.mx., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 23.06.2023, 00:00:00 +, Signature-Inception: 24.05.2023, 00:00:00 +, KeyTag 46303, Signer-Name: mx



• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 46303 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 13, KeyTag 42326, Flags 256



Public Key with Algorithm 13, KeyTag 54058, Flags 257 (SEP = Secure Entry Point)



2 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner unam.mx., Algorithm: 13, 2 Labels, original TTL: 7200 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 25.05.2023, 14:50:20 +, KeyTag 42326, Signer-Name: unam.mx



RRSIG-Owner unam.mx., Algorithm: 13, 2 Labels, original TTL: 7200 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 25.05.2023, 14:50:20 +, KeyTag 54058, Signer-Name: unam.mx



• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 42326 used to validate the DNSKEY RRSet



• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 54058 used to validate the DNSKEY RRSet



• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 54058, DigestType 2 and Digest "6j6wEYPlvBOsrEaSgx6oHam22PQCqzq0+hpcHvUoaeA=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: fisica.unam.mx
fisica.unam.mx
2 DS RR in the parent zone found



DS with Algorithm 13, KeyTag 4517, DigestType 1 and Digest 5Un/HN6AiqARMxsmc047i7aoZ8c=



DS with Algorithm 13, KeyTag 4517, DigestType 2 and Digest lT3WMzhj1kSjS/LdpEy+kLcJx5OGnTGPKAclv2qOqu0=



2 RRSIG RR to validate DS RR found



RRSIG-Owner fisica.unam.mx., Algorithm: 13, 3 Labels, original TTL: 7200 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 25.05.2023, 14:50:20 +, KeyTag 42326, Signer-Name: unam.mx



• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 42326 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 13, KeyTag 4517, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 13, KeyTag 31410, Flags 256



2 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner fisica.unam.mx., Algorithm: 13, 3 Labels, original TTL: 7200 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 08.03.2023, 19:12:51 +, KeyTag 4517, Signer-Name: fisica.unam.mx



RRSIG-Owner fisica.unam.mx., Algorithm: 13, 3 Labels, original TTL: 7200 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 08.03.2023, 19:12:51 +, KeyTag 31410, Signer-Name: fisica.unam.mx



• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 4517 used to validate the DNSKEY RRSet



• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 31410 used to validate the DNSKEY RRSet



• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 4517, DigestType 1 and Digest "5Un/HN6AiqARMxsmc047i7aoZ8c=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 4517, DigestType 2 and Digest "lT3WMzhj1kSjS/LdpEy+kLcJx5OGnTGPKAclv2qOqu0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: posdocs.fisica.unam.mx
posdocs.fisica.unam.mx
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "apps.fisica.unam.mx" and the NextOwner "ararat.fisica.unam.mx". So the parent zone confirmes the non-existence of a DS RR.
Bitmap: A, RRSIG, NSEC



RRSIG Type 5 validates the CNAME - Result: apps.fisica.unam.mx
Validated: RRSIG-Owner posdocs.fisica.unam.mx., Algorithm: 13, 4 Labels, original TTL: 7200 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 08.03.2023, 19:12:51 +, KeyTag 31410, Signer-Name: fisica.unam.mx

Zone: www.posdocs.fisica.unam.mx
www.posdocs.fisica.unam.mx
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "posdocs.fisica.unam.mx" and the NextOwner "posgrado.fisica.unam.mx". So the parent zone confirmes the non-existence of a DS RR.
Bitmap: CNAME, RRSIG, NSEC

Zone: (root)
(root)
1 DS RR published



DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=



• Status: Valid because published



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 60955, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 11.06.2023, 00:00:00 +, Signature-Inception: 21.05.2023, 00:00:00 +, KeyTag 20326, Signer-Name: (root)



• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: mx
mx
1 DS RR in the parent zone found



DS with Algorithm 8, KeyTag 61885, DigestType 2 and Digest vTTcetddlBJYEDN3AMbQ+e5dv9TVLRPC2IrF5w3rj3k=



2 RRSIG RR to validate DS RR found



RRSIG-Owner mx., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 07.06.2023, 17:00:00 +, Signature-Inception: 25.05.2023, 16:00:00 +, KeyTag 60955, Signer-Name: (root)



• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 60955 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 46303, Flags 256



Public Key with Algorithm 8, KeyTag 61885, Flags 257 (SEP = Secure Entry Point)



2 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner mx., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 23.06.2023, 00:00:00 +, Signature-Inception: 24.05.2023, 00:00:00 +, KeyTag 46303, Signer-Name: mx



RRSIG-Owner mx., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 01.07.2023, 15:00:00 +, Signature-Inception: 02.05.2023, 15:00:00 +, KeyTag 61885, Signer-Name: mx



• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 46303 used to validate the DNSKEY RRSet



• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61885 used to validate the DNSKEY RRSet



• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 61885, DigestType 2 and Digest "vTTcetddlBJYEDN3AMbQ+e5dv9TVLRPC2IrF5w3rj3k=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: unam.mx
unam.mx
1 DS RR in the parent zone found



DS with Algorithm 13, KeyTag 54058, DigestType 2 and Digest 6j6wEYPlvBOsrEaSgx6oHam22PQCqzq0+hpcHvUoaeA=



2 RRSIG RR to validate DS RR found



RRSIG-Owner unam.mx., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 23.06.2023, 00:00:00 +, Signature-Inception: 24.05.2023, 00:00:00 +, KeyTag 46303, Signer-Name: mx



• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 46303 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 13, KeyTag 42326, Flags 256



Public Key with Algorithm 13, KeyTag 54058, Flags 257 (SEP = Secure Entry Point)



2 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner unam.mx., Algorithm: 13, 2 Labels, original TTL: 7200 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 25.05.2023, 14:50:20 +, KeyTag 42326, Signer-Name: unam.mx



RRSIG-Owner unam.mx., Algorithm: 13, 2 Labels, original TTL: 7200 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 25.05.2023, 14:50:20 +, KeyTag 54058, Signer-Name: unam.mx



• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 42326 used to validate the DNSKEY RRSet



• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 54058 used to validate the DNSKEY RRSet



• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 54058, DigestType 2 and Digest "6j6wEYPlvBOsrEaSgx6oHam22PQCqzq0+hpcHvUoaeA=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: fisica.unam.mx
fisica.unam.mx
2 DS RR in the parent zone found



DS with Algorithm 13, KeyTag 4517, DigestType 1 and Digest 5Un/HN6AiqARMxsmc047i7aoZ8c=



DS with Algorithm 13, KeyTag 4517, DigestType 2 and Digest lT3WMzhj1kSjS/LdpEy+kLcJx5OGnTGPKAclv2qOqu0=



2 RRSIG RR to validate DS RR found



RRSIG-Owner fisica.unam.mx., Algorithm: 13, 3 Labels, original TTL: 7200 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 25.05.2023, 14:50:20 +, KeyTag 42326, Signer-Name: unam.mx



• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 42326 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 13, KeyTag 4517, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 13, KeyTag 31410, Flags 256



2 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner fisica.unam.mx., Algorithm: 13, 3 Labels, original TTL: 7200 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 08.03.2023, 19:12:51 +, KeyTag 4517, Signer-Name: fisica.unam.mx



RRSIG-Owner fisica.unam.mx., Algorithm: 13, 3 Labels, original TTL: 7200 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 08.03.2023, 19:12:51 +, KeyTag 31410, Signer-Name: fisica.unam.mx



• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 4517 used to validate the DNSKEY RRSet



• Status: Good - Algorithmus 13 and DNSKEY with KeyTag 31410 used to validate the DNSKEY RRSet



• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 4517, DigestType 1 and Digest "5Un/HN6AiqARMxsmc047i7aoZ8c=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



• Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 4517, DigestType 2 and Digest "lT3WMzhj1kSjS/LdpEy+kLcJx5OGnTGPKAclv2qOqu0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: apps.fisica.unam.mx
apps.fisica.unam.mx
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "apps.fisica.unam.mx" and the NextOwner "ararat.fisica.unam.mx". So the parent zone confirmes the non-existence of a DS RR.
Bitmap: A, RRSIG, NSEC



0 DNSKEY RR found






RRSIG Type 1 validates the A - Result: 132.248.7.233
Validated: RRSIG-Owner apps.fisica.unam.mx., Algorithm: 13, 4 Labels, original TTL: 7200 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 08.03.2023, 19:12:51 +, KeyTag 31410, Signer-Name: fisica.unam.mx



CNAME-Query sends a valid NSEC RR as result with the query name "apps.fisica.unam.mx" equal the NSEC-owner "apps.fisica.unam.mx" and the NextOwner "ararat.fisica.unam.mx". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, RRSIG, NSEC Validated: RRSIG-Owner apps.fisica.unam.mx., Algorithm: 13, 4 Labels, original TTL: 86400 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 08.03.2023, 19:12:51 +, KeyTag 31410, Signer-Name: fisica.unam.mx



Status: Good. NoData-Proof required and found.



TXT-Query sends a valid NSEC RR as result with the query name "apps.fisica.unam.mx" equal the NSEC-owner "apps.fisica.unam.mx" and the NextOwner "ararat.fisica.unam.mx". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, RRSIG, NSEC Validated: RRSIG-Owner apps.fisica.unam.mx., Algorithm: 13, 4 Labels, original TTL: 86400 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 08.03.2023, 19:12:51 +, KeyTag 31410, Signer-Name: fisica.unam.mx



Status: Good. NoData-Proof required and found.



AAAA-Query sends a valid NSEC RR as result with the query name "apps.fisica.unam.mx" equal the NSEC-owner "apps.fisica.unam.mx" and the NextOwner "ararat.fisica.unam.mx". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, RRSIG, NSEC Validated: RRSIG-Owner apps.fisica.unam.mx., Algorithm: 13, 4 Labels, original TTL: 86400 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 08.03.2023, 19:12:51 +, KeyTag 31410, Signer-Name: fisica.unam.mx



Status: Good. NoData-Proof required and found.



TLSA-Query (_443._tcp.apps.fisica.unam.mx) sends a valid NSEC RR as result with the owner name apps.fisica.unam.mx. So that's the Closest Encloser of the query name. TLSA-Query sends a valid NSEC RR as result and covers the Wildcard expansion of the ClosestEncloser with the owner "apps.fisica.unam.mx" and the NextOwner "ararat.fisica.unam.mx". So that NSEC confirms the not-existence of the Wildcard expansion. TLSA-Query (_443._tcp.apps.fisica.unam.mx) sends a valid NSEC RR as result with the query name "_443._tcp.apps.fisica.unam.mx" between the NSEC-owner "apps.fisica.unam.mx" and the NextOwner "ararat.fisica.unam.mx". So the zone confirmes the not-existence of that TLSA RR.TLSA-Query (_443._tcp.apps.fisica.unam.mx) sends a valid NSEC RR as result with the parent Wildcard "*._tcp.apps.fisica.unam.mx" between the NSEC-owner "apps.fisica.unam.mx" and the NextOwner "ararat.fisica.unam.mx". So the zone confirmes the not-existence of that Wildcard-expansion.
Bitmap: A, RRSIG, NSEC Validated: RRSIG-Owner apps.fisica.unam.mx., Algorithm: 13, 4 Labels, original TTL: 86400 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 08.03.2023, 19:12:51 +, KeyTag 31410, Signer-Name: fisica.unam.mx



Status: Good. NXDomain-Proof required and found.



CAA-Query sends a valid NSEC RR as result with the query name "apps.fisica.unam.mx" equal the NSEC-owner "apps.fisica.unam.mx" and the NextOwner "ararat.fisica.unam.mx". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, RRSIG, NSEC Validated: RRSIG-Owner apps.fisica.unam.mx., Algorithm: 13, 4 Labels, original TTL: 86400 sec, Signature-expiration: 15.01.2024, 12:00:00 +, Signature-Inception: 08.03.2023, 19:12:51 +, KeyTag 31410, Signer-Name: fisica.unam.mx



Status: Good. NoData-Proof required and found.


3. Name Servers

DomainNameserverNS-IP
www.posdocs.fisica.unam.mx
•  ns1.unam.mx

fisica.unam.mx
•  ns1.unam.mx
132.248.108.221
Coyoacán/Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

T  ns2.unam.mx
132.248.204.25
Cuernavaca/Morelos/Mexico (MX) - Universidad Nacional Autonoma de Mexico

•  ns3.unam.mx
132.248.108.215
Coyoacán/Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

• 
2001:1218:100:10a:108::215
Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

•  ns4.unam.mx
132.248.204.32
Cuernavaca/Morelos/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

• 
2001:1218:403:203:204::32
Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

•  ns5.unam.mx
132.248.243.37
Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•
unam.mx
•  ns1.unam.mx
132.248.108.221
Coyoacán/Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

T  ns2.unam.mx
132.248.204.25
Cuernavaca/Morelos/Mexico (MX) - Universidad Nacional Autonoma de Mexico

•  ns3.unam.mx
132.248.108.215
Coyoacán/Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

• 
2001:1218:100:10a:108::215
Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

•  ns4.unam.mx
132.248.204.32
Cuernavaca/Morelos/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

• 
2001:1218:403:203:204::32
Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

•  ns5.unam.mx
132.248.243.37
Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•
mx
•  c.mx-ns.mx
•

•  e.mx-ns.mx / 2.ber.pch
•

•  i.mx-ns.mx / TLD_Host1.Amsterdam_Node1
•

•  m.mx-ns.mx
•

•  o.mx-ns.mx
•

•  x.mx-ns.mx / TLD_Host2.Amsterdam_Node1
•
apps.fisica.unam.mx
•  ns1.unam.mx
132.248.108.221
Coyoacán/Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•
fisica.unam.mx
•  ns1.unam.mx
132.248.108.221
Coyoacán/Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

T  ns2.unam.mx
132.248.204.25
Cuernavaca/Morelos/Mexico (MX) - Universidad Nacional Autonoma de Mexico

•  ns3.unam.mx
132.248.108.215
Coyoacán/Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

• 
2001:1218:100:10a:108::215
Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

•  ns4.unam.mx
132.248.204.32
Cuernavaca/Morelos/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

• 
2001:1218:403:203:204::32
Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

•  ns5.unam.mx
132.248.243.37
Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•
unam.mx
•  ns1.unam.mx
132.248.108.221
Coyoacán/Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

T  ns2.unam.mx
132.248.204.25
Cuernavaca/Morelos/Mexico (MX) - Universidad Nacional Autonoma de Mexico

•  ns3.unam.mx
132.248.108.215
Coyoacán/Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

• 
2001:1218:100:10a:108::215
Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

•  ns4.unam.mx
132.248.204.32
Cuernavaca/Morelos/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

• 
2001:1218:403:203:204::32
Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•

•  ns5.unam.mx
132.248.243.37
Mexico City/Mexico (MX) - Universidad Nacional Autonoma de Mexico		•
mx
•  c.mx-ns.mx
•

•  e.mx-ns.mx / 2.ber.pch
•

•  i.mx-ns.mx / TLD_Host1.Amsterdam_Node1
•

•  m.mx-ns.mx
•

•  o.mx-ns.mx
•

•  x.mx-ns.mx / TLD_Host1.Amsterdam_Node1
•


4. SOA-Entries


Domain:mx
Zone-Name:mx
Primary:m.mx-ns.mx
Mail:hostmaster.nic.mx
Serial:1685039843
Refresh:900
Retry:900
Expire:604800
TTL:1800
num Entries:1


Domain:mx
Zone-Name:mx
Primary:m.mx-ns.mx
Mail:hostmaster.nic.mx
Serial:1685040563
Refresh:900
Retry:900
Expire:604800
TTL:1800
num Entries:5


Domain:unam.mx
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:unam.mx
Zone-Name:unam.mx
Primary:ns1.unam.mx
Mail:dns.unam.mx
Serial:2023052501
Refresh:3600
Retry:1200
Expire:1814400
TTL:300
num Entries:6


Domain:fisica.unam.mx
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:fisica.unam.mx
Zone-Name:fisica.unam.mx
Primary:ns1.unam.mx
Mail:dns.unam.mx
Serial:2023030800
Refresh:3600
Retry:1200
Expire:604800
TTL:86400
num Entries:6


Domain:www.posdocs.fisica.unam.mx
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:mx
Zone-Name:mx
Primary:m.mx-ns.mx
Mail:hostmaster.nic.mx
Serial:1685040563
Refresh:900
Retry:900
Expire:604800
TTL:1800
num Entries:1


Domain:mx
Zone-Name:mx
Primary:m.mx-ns.mx
Mail:hostmaster.nic.mx
Serial:1685040743
Refresh:900
Retry:900
Expire:604800
TTL:1800
num Entries:5


Domain:unam.mx
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:unam.mx
Zone-Name:unam.mx
Primary:ns1.unam.mx
Mail:dns.unam.mx
Serial:2023052501
Refresh:3600
Retry:1200
Expire:1814400
TTL:300
num Entries:6


Domain:fisica.unam.mx
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:fisica.unam.mx
Zone-Name:fisica.unam.mx
Primary:ns1.unam.mx
Mail:dns.unam.mx
Serial:2023030800
Refresh:3600
Retry:1200
Expire:604800
TTL:86400
num Entries:6


Domain:apps.fisica.unam.mx
Zone-Name:fisica.unam.mx
Primary:ns1.unam.mx
Mail:dns.unam.mx
Serial:2023030800
Refresh:3600
Retry:1200
Expire:604800
TTL:86400
num Entries:1


5. Screenshots

Startaddress: https://posdocs.fisica.unam.mx/.well-known/acme-challenge, address used: https://posdocs.fisica.unam.mx/.well-known/acme-challenge, Screenshot created 2023-05-25 21:02:54 +00:0 url is insecure, certificate invalid

Mobil (412px x 732px)

260 milliseconds

Screenshot mobile - https://posdocs.fisica.unam.mx/.well-known/acme-challenge
Mobil + Landscape (732px x 412px)

248 milliseconds

Screenshot mobile landscape - https://posdocs.fisica.unam.mx/.well-known/acme-challenge
Screen (1280px x 1680px)

883 milliseconds

Screenshot Desktop - https://posdocs.fisica.unam.mx/.well-known/acme-challenge

Mobile- and other Chrome-Checks

widthheight
visual Viewport412716
content Size538716

Fatal: Horizontal scrollbar detected. Content-size width is greater then visual Viewport width.

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://posdocs.fisica.unam.mx/.well-known/acme-challenge
132.248.7.233
301
https://posdocs.fisica.unam.mx.well-known/acme-challenge
Html is minified: 100.00 %		0.343
A
Date: Thu, 25 May 2023 18:48:19 GMT
Server: Apache/2.4.7 (Ubuntu)
Location: https://posdocs.fisica.unam.mx.well-known/acme-challenge
Content-Length: 351
Connection: close
Content-Type: text/html; charset=iso-8859-1

• https://posdocs.fisica.unam.mx/.well-known/acme-challenge
132.248.7.233
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/356		404

Html is minified: 269.63 %		6.200
N
Not Found
Certificate error: RemoteCertificateChainErrors
small visible content (num chars: 106)
The page you were looking for doesn't exist. You may have mistyped the address or the page may have moved.
Date: Thu, 25 May 2023 18:48:20 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Runtime: 0.001930
X-Powered-By: Phusion Passenger 5.0.27
Content-Length: 728
Status: 404 Not Found
Connection: close
Content-Type: text/html

• https://posdocs.fisica.unam.mx.well-known/acme-challenge

-1

0.017
R
NameResolutionFailure - The remote name could not be resolved: 'posdocs.fisica.unam.mx.well-known'

• http://posdocs.fisica.unam.mx/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
132.248.7.233
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://posdocs.fisica.unam.mx.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 100.00 %		0.353
A
Visible Content: Moved Permanently The document has moved here . Apache/2.4.7 (Ubuntu) Server at posdocs.fisica.unam.mx Port 80
Date: Thu, 25 May 2023 18:48:27 GMT
Server: Apache/2.4.7 (Ubuntu)
Location: https://posdocs.fisica.unam.mx.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Length: 394
Connection: close
Content-Type: text/html; charset=iso-8859-1

• https://posdocs.fisica.unam.mx.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

-1

0.010
R
NameResolutionFailure - The remote name could not be resolved: 'posdocs.fisica.unam.mx.well-known'
Visible Content:

• https://132.248.7.233/.well-known/acme-challenge
132.248.7.233
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/356		404

Html is minified: 269.63 %		5.913
N
Not Found
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
small visible content (num chars: 106)
The page you were looking for doesn't exist. You may have mistyped the address or the page may have moved.
Date: Thu, 25 May 2023 18:48:28 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Runtime: 0.000673
X-Powered-By: Phusion Passenger 5.0.27
Content-Length: 728
Status: 404 Not Found
Connection: close
Content-Type: text/html

7. Comments


1. General Results, most used to calculate the result

Aname "posdocs.fisica.unam.mx" is subdomain, public suffix is ".mx", top-level-domain is ".mx", top-level-domain-type is "country-code", Country is Mexico, tld-manager is "NIC-Mexico ITESM - Campus Monterrey", num .mx-domains preloaded: 342 (complete: 221801)
AGood: All ip addresses are public addresses
Warning: Only one ip address found: posdocs.fisica.unam.mx has only one ip address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: posdocs.fisica.unam.mx has no ipv6 address.
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):0 complete Content-Type - header (2 urls)
https://posdocs.fisica.unam.mx/.well-known/acme-challenge 132.248.7.233


Url with incomplete Content-Type - header - missing charset
https://132.248.7.233/.well-known/acme-challenge 132.248.7.233


Url with incomplete Content-Type - header - missing charset
Bhttps://posdocs.fisica.unam.mx/.well-known/acme-challenge 132.248.7.233
404

Missing HSTS-Header
CError - no version with Http-Status 200
HFatal error: No https - result with http-status 200, no encryption
Mhttps://posdocs.fisica.unam.mx/.well-known/acme-challenge 132.248.7.233
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://132.248.7.233/.well-known/acme-challenge 132.248.7.233
404

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://posdocs.fisica.unam.mx/.well-known/acme-challenge 132.248.7.233
404

Error - Certificate isn't trusted, RemoteCertificateChainErrors
Nhttps://132.248.7.233/.well-known/acme-challenge 132.248.7.233
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Rhttp://posdocs.fisica.unam.mx/.well-known/acme-challenge 132.248.7.233
301
https://posdocs.fisica.unam.mx.well-known/acme-challenge
Redirect to not existing domain
Rhttp://posdocs.fisica.unam.mx/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 132.248.7.233
301
https://posdocs.fisica.unam.mx.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Redirect to not existing domain
XFatal error: Nameserver doesn't support TCP connection: ns2.unam.mx / 132.248.204.25: Timeout
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are the same. So that domain doesn't require Server Name Indication (SNI), it's the primary certificate of that set of ip addresses.: Domain posdocs.fisica.unam.mx, 1 ip addresses, 1 different http results.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.posdocs.fisica.unam.mx

2. Header-Checks (alpha, started 2022-10-23, may be buggy / incomplete)

Fposdocs.fisica.unam.mx 132.248.7.233
Content-Security-Policy
Critical: Missing Header:
Fposdocs.fisica.unam.mx 132.248.7.233
X-Content-Type-Options
Critical: Missing Header:
Fposdocs.fisica.unam.mx 132.248.7.233
Referrer-Policy
Critical: Missing Header:
Fposdocs.fisica.unam.mx 132.248.7.233
Permissions-Policy
Critical: Missing Header:

3. DNS- and NameServer - Checks

AInfo:: 10 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 5 Name Servers.
AInfo:: 10 Queries complete, 10 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
AGood: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.ns3.unam.mx (132.248.108.215, 2001:1218:100:10a:108::215), ns4.unam.mx (132.248.204.32, 2001:1218:403:203:204::32)
AGood (1 - 3.0):: An average of 2.0 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 5 different Name Servers found: ns1.unam.mx, ns2.unam.mx, ns3.unam.mx, ns4.unam.mx, ns5.unam.mx, 5 Name Servers included in Delegation: ns1.unam.mx, ns2.unam.mx, ns3.unam.mx, ns4.unam.mx, ns5.unam.mx, 5 Name Servers included in 2 Zone definitions: ns1.unam.mx, ns2.unam.mx, ns3.unam.mx, ns4.unam.mx, ns5.unam.mx, 1 Name Servers listed in SOA.Primary: ns1.unam.mx.
AGood: Only one SOA.Primary Name Server found.: ns1.unam.mx.
AGood: SOA.Primary Name Server included in the delegation set.: ns1.unam.mx.
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AInfo: Ipv4-Subnet-list: 5 Name Servers, 1 different subnets (first Byte): 132., 1 different subnets (first two Bytes): 132.248., 3 different subnets (first three Bytes): 132.248.108., 132.248.204., 132.248.243.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 2 Name Servers with IPv6, 1 different subnets (first block): 2001:, 1 different subnets (first two blocks): 2001:1218:, 2 different subnets (first three blocks): 2001:1218:0100:, 2001:1218:0403:, 2 different subnets (first four blocks): 2001:1218:0100:010a:, 2001:1218:0403:0203:
AGood: Name Server IPv6 addresses from different subnets found.
XNameserver Timeout checking Echo Capitalization: ns2.unam.mx / 132.248.204.25
XNameserver Timeout checking EDNS512: ns2.unam.mx / 132.248.204.25
Nameserver doesn't pass all EDNS-Checks: ns1.unam.mx: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns2.unam.mx / 132.248.204.25: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: ns2.unam.mx / 132.248.204.25: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: ns2.unam.mx / 132.248.204.25: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: ns2.unam.mx / 132.248.204.25: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

https://posdocs.fisica.unam.mx.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
-1

Fatal: Check of /.well-known/acme-challenge/random-filename redirects to not-existing domain. Creating a Letsencrypt certificate via http-01 challenge can't work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://posdocs.fisica.unam.mx/.well-known/acme-challenge 132.248.7.233
404
6.200 seconds
Warning: 404 needs more then one second
https://132.248.7.233/.well-known/acme-challenge 132.248.7.233
404
5.913 seconds
Warning: 404 needs more then one second
ADuration: 705006 milliseconds, 705.006 seconds


8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
posdocs.fisica.unam.mx
132.248.7.233
443
Certificate/chain invalid
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
not supported
ok
posdocs.fisica.unam.mx
132.248.7.233
443
Certificate/chain invalid
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
 Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates
1CN=posdocs.fisica.unam.mx

2CN=R3, O=Let's Encrypt, C=US

3CN=ISRG Root X1, O=Internet Security Research Group, C=US


132.248.7.233
132.248.7.233
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
not supported
ok

132.248.7.233
132.248.7.233
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates
1CN=posdocs.fisica.unam.mx

2CN=R3, O=Let's Encrypt, C=US

3CN=ISRG Root X1, O=Internet Security Research Group, C=US


9. Certificates

1.
1.
CN=posdocs.fisica.unam.mx
20.02.2023
21.05.2023
14 days expired		posdocs.fisica.unam.mx - 1 entry
1.
1.
CN=posdocs.fisica.unam.mx
20.02.2023

21.05.2023
14 days expired
posdocs.fisica.unam.mx - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:03EC877D836ECDF1E038EF16BDD91666D84D
Thumbprint:235078A3E4CE0DBA519D553795EB62F8ADD06BFD
SHA256 / Certificate:90+zVXUM3kQJxZDN1ne5uvFhmpwZA+qEjE3RJTPEMdg=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):beaf36cd8511c07265952f0b42ff3a4cb6fb758186b3042bf327495a1b6eec36
SHA256 hex / Subject Public Key Information (SPKI):beaf36cd8511c07265952f0b42ff3a4cb6fb758186b3042bf327495a1b6eec36 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://r3.o.lencr.org
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
OfflineRevocation: The revocation function was unable to check revocation because the revocation server was offline.

2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020
15.09.2025
expires in 834 days

2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020

15.09.2025
expires in 834 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:00912B084ACF0C18A753F6D62E25A75F5A
Thumbprint:A053375BFE84E8B748782C7CEE15827A6AF5A405
SHA256 / Certificate:Z63RFmsCCuYbj1/JaBPATCqliZYHloZVcqPH5zdhPf0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SHA256 hex / Subject Public Key Information (SPKI):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 4383 days

3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 4383 days


KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:



10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found


2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuerlast 7 daysactivenum Certs
CN=R3, O=Let's Encrypt, C=US
0 /0 new
0
6

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
8771178299
leaf cert		CN=R3, O=Let's Encrypt, C=US
2023-02-20 16:49:19
2023-05-21 15:49:18
posdocs.fisica.unam.mx
1 entries


8038566550
leaf cert		CN=R3, O=Let's Encrypt, C=US
2022-11-22 16:25:36
2023-02-20 16:25:35
posdocs.fisica.unam.mx
1 entries


7414545036
leaf cert		CN=R3, O=Let's Encrypt, C=US
2022-08-26 14:42:00
2022-11-24 15:41:59
posdocs.fisica.unam.mx
1 entries


6881532415
leaf cert		CN=R3, O=Let's Encrypt, C=US
2022-06-06 13:32:03
2022-09-04 13:32:02
posdocs.fisica.unam.mx
1 entries


6305120004
leaf cert		CN=R3, O=Let's Encrypt, C=US
2022-03-08 15:13:20
2022-06-06 14:13:19
posdocs.fisica.unam.mx
1 entries


5812841660
leaf cert		CN=R3, O=Let's Encrypt, C=US
2021-12-16 15:54:07
2022-03-16 15:54:06
posdocs.fisica.unam.mx
1 entries



11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404


12. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns1.unam.mx, ns2.unam.mx, ns3.unam.mx, ns4.unam.mx, ns5.unam.mx

QNr.DomainTypeNS used
1
mx
NS
a.root-servers.net (2001:503:ba3e::2:30)

Answer: c.mx-ns.mx, e.mx-ns.mx, i.mx-ns.mx, m.mx-ns.mx, o.mx-ns.mx, x.mx-ns.mx
2
ns1.unam.mx
NS
c.mx-ns.mx (2001:1258::1)

Answer: ns3.unam.mx, ns4.unam.mx

Answer: ns3.unam.mx
132.248.108.215, 2001:1218:100:10a:108::215

Answer: ns4.unam.mx
132.248.204.32, 2001:1218:403:203:204::32
3
ns2.unam.mx
NS
c.mx-ns.mx (2001:1258::1)

Answer: ns3.unam.mx, ns4.unam.mx

Answer: ns3.unam.mx
132.248.108.215, 2001:1218:100:10a:108::215

Answer: ns4.unam.mx
132.248.204.32, 2001:1218:403:203:204::32
4
ns5.unam.mx
NS
c.mx-ns.mx (2001:1258::1)

Answer: ns3.unam.mx, ns4.unam.mx

Answer: ns3.unam.mx
132.248.108.215, 2001:1218:100:10a:108::215

Answer: ns4.unam.mx
132.248.204.32, 2001:1218:403:203:204::32
5
ns1.unam.mx: 132.248.108.221
A
ns3.unam.mx (2001:1218:100:10a:108::215)
6
ns1.unam.mx: No AAAA record found
AAAA
ns3.unam.mx (2001:1218:100:10a:108::215)
7
ns2.unam.mx: 132.248.204.25
A
ns3.unam.mx (2001:1218:100:10a:108::215)
8
ns2.unam.mx: No AAAA record found
AAAA
ns3.unam.mx (2001:1218:100:10a:108::215)
9
ns5.unam.mx: 132.248.243.37
A
ns3.unam.mx (2001:1218:100:10a:108::215)
10
ns5.unam.mx: No AAAA record found
AAAA
ns3.unam.mx (2001:1218:100:10a:108::215)


13. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
posdocs.fisica.unam.mx



2
1
apps.fisica.unam.mx
0

no CAA entry found
1
0
fisica.unam.mx
0

no CAA entry found
1
0

0

no CAA entry found
2
1
unam.mx
0

no CAA entry found
1
0

0

no CAA entry found
1
0
mx
0

no CAA entry found
1
0

0

no CAA entry found
1
0


14. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
fisica.unam.mx
v=spf1 include:_spf.google.com ~all
ok
2
1
posdocs.fisica.unam.mx


2
1
_acme-challenge.apps.fisica.unam.mx

Name Error - The domain name does not exist
1
0
_acme-challenge.posdocs.fisica.unam.mx

Name Error - The domain name does not exist
2
1
_acme-challenge.posdocs.fisica.unam.mx.fisica.unam.mx

Name Error - The domain name does not exist
2
1
_acme-challenge.apps.fisica.unam.mx.apps.fisica.unam.mx

Name Error - The domain name does not exist
1
0
_acme-challenge.posdocs.fisica.unam.mx.posdocs.fisica.unam.mx

Name Error - The domain name does not exist
2
1


15. DomainService - Entries (SSHFP Check is new - 2022-09-24, may be incomplete, alpha, some results are required)

No DomainServiceEntries entries found



16. Cipher Suites

DomainIPPortCipher (OpenSsl / IANA)
posdocs.fisica.unam.mx
132.248.7.233
443
ECDHE-RSA-AES256-GCM-SHA384
 (Secure)
TLSv1.2
0xC0,0x30
 FS
4 Ciphers, 91.78 sec
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDH
RSA
AESGCM(256)
AEAD



DHE-RSA-AES256-GCM-SHA384
 (Secure)
TLSv1.2
0x00,0x9F
 FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
DH
RSA
AESGCM(256)
AEAD



ECDHE-RSA-AES128-GCM-SHA256
 (Secure)
TLSv1.2
0xC0,0x2F
 FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDH
RSA
AESGCM(128)
AEAD



DHE-RSA-AES128-GCM-SHA256
 (Secure)
TLSv1.2
0x00,0x9E
 FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
DH
RSA
AESGCM(128)
AEAD


17. Portchecks

DomainIPPortDescriptionResultAnswer
posdocs.fisica.unam.mx
132.248.7.233
21
FTP



posdocs.fisica.unam.mx
132.248.7.233
21
FTP



posdocs.fisica.unam.mx
132.248.7.233
22
SSH
open
SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2

posdocs.fisica.unam.mx
132.248.7.233
22
SSH
open
SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2
Bad: SSH without DNS SSHFP Record found
Possible DNS SSHFP Entries:
posdocs.fisica.unam.mx IN SSHFP 1 2 454f35e6f2448f26bbd3844b2aa666e18a984be7dca3cc4ffe941553c48f0717
posdocs.fisica.unam.mx IN SSHFP 3 2 02b61b7d656fdb65020e3b9812172d497380228090f485b8cdf2b76af03130be
posdocs.fisica.unam.mx IN SSHFP 4 2 85b131218666879dc6d09a33ce5b2c38dc6b7c2e396c83572e0b5dab43970b4c
posdocs.fisica.unam.mx
132.248.7.233
25
SMTP



posdocs.fisica.unam.mx
132.248.7.233
25
SMTP



posdocs.fisica.unam.mx
132.248.7.233
53
DNS



posdocs.fisica.unam.mx
132.248.7.233
53
DNS



posdocs.fisica.unam.mx
132.248.7.233
110
POP3



posdocs.fisica.unam.mx
132.248.7.233
110
POP3



posdocs.fisica.unam.mx
132.248.7.233
143
IMAP



posdocs.fisica.unam.mx
132.248.7.233
143
IMAP



posdocs.fisica.unam.mx
132.248.7.233
465
SMTP (encrypted)



posdocs.fisica.unam.mx
132.248.7.233
465
SMTP (encrypted)



posdocs.fisica.unam.mx
132.248.7.233
587
SMTP (encrypted, submission)



posdocs.fisica.unam.mx
132.248.7.233
587
SMTP (encrypted, submission)



posdocs.fisica.unam.mx
132.248.7.233
993
IMAP (encrypted)



posdocs.fisica.unam.mx
132.248.7.233
993
IMAP (encrypted)



posdocs.fisica.unam.mx
132.248.7.233
995
POP3 (encrypted)



posdocs.fisica.unam.mx
132.248.7.233
995
POP3 (encrypted)



posdocs.fisica.unam.mx
132.248.7.233
1433
MS SQL



posdocs.fisica.unam.mx
132.248.7.233
1433
MS SQL



posdocs.fisica.unam.mx
132.248.7.233
2082
cPanel (http)



posdocs.fisica.unam.mx
132.248.7.233
2082
cPanel (http)



posdocs.fisica.unam.mx
132.248.7.233
2083
cPanel (https)



posdocs.fisica.unam.mx
132.248.7.233
2083
cPanel (https)



posdocs.fisica.unam.mx
132.248.7.233
2086
WHM (http)



posdocs.fisica.unam.mx
132.248.7.233
2086
WHM (http)



posdocs.fisica.unam.mx
132.248.7.233
2087
WHM (https)



posdocs.fisica.unam.mx
132.248.7.233
2087
WHM (https)



posdocs.fisica.unam.mx
132.248.7.233
2089
cPanel Licensing



posdocs.fisica.unam.mx
132.248.7.233
2089
cPanel Licensing



posdocs.fisica.unam.mx
132.248.7.233
2095
cPanel Webmail (http)



posdocs.fisica.unam.mx
132.248.7.233
2095
cPanel Webmail (http)



posdocs.fisica.unam.mx
132.248.7.233
2096
cPanel Webmail (https)



posdocs.fisica.unam.mx
132.248.7.233
2096
cPanel Webmail (https)



posdocs.fisica.unam.mx
132.248.7.233
2222
DirectAdmin (http)



posdocs.fisica.unam.mx
132.248.7.233
2222
DirectAdmin (http)



posdocs.fisica.unam.mx
132.248.7.233
2222
DirectAdmin (https)



posdocs.fisica.unam.mx
132.248.7.233
2222
DirectAdmin (https)



posdocs.fisica.unam.mx
132.248.7.233
3306
mySql



posdocs.fisica.unam.mx
132.248.7.233
3306
mySql



posdocs.fisica.unam.mx
132.248.7.233
5224
Plesk Licensing



posdocs.fisica.unam.mx
132.248.7.233
5224
Plesk Licensing



posdocs.fisica.unam.mx
132.248.7.233
5432
PostgreSQL



posdocs.fisica.unam.mx
132.248.7.233
5432
PostgreSQL



posdocs.fisica.unam.mx
132.248.7.233
8080
Ookla Speedtest (http)



posdocs.fisica.unam.mx
132.248.7.233
8080
Ookla Speedtest (http)



posdocs.fisica.unam.mx
132.248.7.233
8080
Ookla Speedtest (https)



posdocs.fisica.unam.mx
132.248.7.233
8080
Ookla Speedtest (https)



posdocs.fisica.unam.mx
132.248.7.233
8083
VestaCP http



posdocs.fisica.unam.mx
132.248.7.233
8083
VestaCP http



posdocs.fisica.unam.mx
132.248.7.233
8083
VestaCP https



posdocs.fisica.unam.mx
132.248.7.233
8083
VestaCP https



posdocs.fisica.unam.mx
132.248.7.233
8443
Plesk Administration (https)



posdocs.fisica.unam.mx
132.248.7.233
8443
Plesk Administration (https)



posdocs.fisica.unam.mx
132.248.7.233
8447
Plesk Installer + Updates



posdocs.fisica.unam.mx
132.248.7.233
8447
Plesk Installer + Updates



posdocs.fisica.unam.mx
132.248.7.233
8880
Plesk Administration (http)



posdocs.fisica.unam.mx
132.248.7.233
8880
Plesk Administration (http)



posdocs.fisica.unam.mx
132.248.7.233
10000
Webmin (http)



posdocs.fisica.unam.mx
132.248.7.233
10000
Webmin (http)



posdocs.fisica.unam.mx
132.248.7.233
10000
Webmin (https)



posdocs.fisica.unam.mx
132.248.7.233
10000
Webmin (https)





Permalink: https://check-your-website.server-daten.de/?i=c1160f30-9f7d-426e-91fe-9aa815f16338


Last Result: https://check-your-website.server-daten.de/?q=posdocs.fisica.unam.mx%2f.well-known%2facme-challenge - 2023-05-25 20:51:21


Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=posdocs.fisica.unam.mx%2f.well-known%2facme-challenge" target="_blank">Check this Site: posdocs.fisica.unam.mx/.well-known/acme-challenge</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro


Jürgen Auer • Friedenstr. 37 • 10249 Berlin • +49(0)30 420 200 60 • info@sql-und-xml.de • USt-IdNr.: DE221734518

Errors, ideas, questions? Use the Contact form • A project using Server-Daten - Web Database solutions