Shortcuts: 1. Basic DNS | 2. Url-Checks | 3. Comments | 4. Connections | 5. Certificates | 6. CT-Logs | 7. Html-Content | 8. CAA | 9. TXT |


X

DNS-problem - authoritative Nameserver refused, not defined or timeout

Checked:
15.05.2019 12:44:49


Older results

1. Basic DNS and Nameserver Checks

HostTIP-Addressis auth.∑ Queries∑ Timeout
rb.net
A

yes
1
0

AAAA

yes


www.rb.net

Name Error
yes
1
0


Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2019, 00:00:00, Signature-Inception: 11.05.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
net
1 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 28.05.2019, 05:00:00, Signature-Inception: 15.05.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 2129, Flags 256

Public Key with Algorithm 8, KeyTag 35886, Flags 257 (SEP = Secure Entry Point)

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 25.05.2019, 15:38:57, Signature-Inception: 10.05.2019, 15:33:57, KeyTag 35886, Signer-Name: net

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 35886 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 35886, DigestType 2 and Digest "eGKyf19Rbr4ZaARE1M5edimBkxhCxGXwAjZAHYvZc+4=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
rb.net
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


www.rb.net
0 DS RR in the parent zone found


DomainNameserverNS-IP
www.rb.net
  a4.nstld.com

rb.net
  a4.nstld.com
209.112.113.33

 
2001:500:7967::2:33

  f4.nstld.com
209.112.114.33

 
2620:74:19::33

  g4.nstld.com
69.36.145.33

 
2001:502:cbe4::33

  l4.nstld.com
209.112.113.33

 
2001:500:7967::2:33
net
  a.gtld-servers.net


  b.gtld-servers.net


  c.gtld-servers.net


  d.gtld-servers.net


  e.gtld-servers.net


  f.gtld-servers.net


  g.gtld-servers.net


  h.gtld-servers.net


  i.gtld-servers.net


  j.gtld-servers.net


  k.gtld-servers.net


  l.gtld-servers.net


  m.gtld-servers.net



SOA - records (beta)

Domain:net
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1557917070
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:11


Domain:net
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1557917085
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:2


Domain:rb.net
Primary:a4.nstld.com
Mail:dnssupport.verisign-grs.com
Serial:2013121214
Refresh:28800
Retry:7200
Expire:1209600
TTL:86400
num Entries:8


2. Url-Checks

Domainname Http-StatusredirectSec.G







3. Comments

Aname "rb.net" is domain, public suffix is "net", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services"
Agood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
AGood: Nameserver supports TCP connections: 8 good Nameserver
AGood: Nameserver supports Echo Capitalization: 8 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 8 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 8 good Nameserver
Nameserver doesn't pass all EDNS-Checks: a4.nstld.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
ADuration: 28720 milliseconds, 28.720 seconds


4. Connections

No connection informations found. Perhaps only http - connections.


5. Certificates

No certificate informations found. Perhaps only http - connections.


6. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

Issuerlast 7 daysactivenum Certs
CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
0
5
5
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
0
3
3

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
843714023
CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2019-04-02 00:00:00
2021-04-01 12:00:00
monitoringcitrix.rb.net
1 entries


843715100
CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2019-04-02 00:00:00
2021-04-01 12:00:00
vibecitrix.rb.net
1 entries


721132324
CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2019-01-18 00:00:00
2021-01-17 12:00:00
assist-yourself.rb.net
1 entries


408119368
CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2018-06-01 00:00:00
2019-06-01 12:00:00
evl3301839.idc.rb.net
1 entries


399389500
CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2018-05-24 00:00:00
2020-05-23 12:00:00
dcamisepsn01.idc.rb.net, dcamvirlpisea01.idc.rb.net, dcamvirlpisem01.idc.rb.net, dcasisepsn01.idc.rb.net, dcsgisepsn01.idc.rb.net, dcslisepsn01.idc.rb.net, dcslvirlpisea01.idc.rb.net, dcslvirlpisem01.idc.rb.net
8 entries


191216652
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2017-09-05 00:00:00
2019-09-05 23:59:59
gerpprdpas.idc.rb.net
1 entries


191169177
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2017-09-05 00:00:00
2019-09-05 23:59:59
gerpqaspas.idc.rb.net
1 entries


180303794
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2017-08-18 00:00:00
2019-08-18 23:59:59
gerpdevpas.idc.rb.net
1 entries



2. Source crt.sh - old and new certificates, sometimes very slow.

Issuerlast 7 daysactivenum Certs
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
0
3
10
CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
0
5
5
CN=thawte SSL CA - G2, O="thawte, Inc.", C=US
0
0
2

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1341736119
CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2019-04-01 22:00:00
2021-04-01 10:00:00
monitoringcitrix.rb.net, RECKITT BENCKISER PLC
1 entries


1341748171
CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2019-04-01 22:00:00
2021-04-01 10:00:00
RECKITT BENCKISER PLC, vibecitrix.rb.net
1 entries


1153521500
CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2019-01-17 23:00:00
2021-01-17 11:00:00
assist-yourself.rb.net, RECKITT BENCKISER PLC
1 entries


499673477
CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2018-05-31 22:00:00
2019-06-01 10:00:00
evl3301839.idc.rb.net, IS, Reckitt Benckiser Plc
1 entries


482352350
CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2018-05-23 22:00:00
2020-05-23 10:00:00
dcamisepsn01.idc.rb.net, dcamvirlpisea01.idc.rb.net, dcamvirlpisem01.idc.rb.net, dcasisepsn01.idc.rb.net, dcsgisepsn01.idc.rb.net, dcslisepsn01.idc.rb.net, dcslvirlpisea01.idc.rb.net, dcslvirlpisem01.idc.rb.net, IS, Reckitt Benckiser Plc
8 entries


204707969
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2017-09-04 22:00:00
2019-09-05 21:59:59
gerpprdpas.idc.rb.net, Reckitt Benckiser Corporate Services Limited
1 entries


204660674
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2017-09-04 22:00:00
2019-09-05 21:59:59
gerpqaspas.idc.rb.net, Reckitt Benckiser Corporate Services Limited
1 entries


193283812
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2017-08-17 22:00:00
2019-08-18 21:59:59
gerpdevpas.idc.rb.net, Reckitt Benckiser Corporate Services Limited
1 entries


55283305
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2016-11-24 23:00:00
2018-11-25 22:59:59
gpicsu.idc.rb.net, RECKITT BENCKISER CORPORATE SERVICES LIMITED
1 entries


55283309
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2016-11-24 23:00:00
2018-11-25 22:59:59
gqase.idc.rb.net, RECKITT BENCKISER CORPORATE SERVICES LIMITED
1 entries


55283304
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2016-11-24 23:00:00
2018-11-25 22:59:59
gerpcsu.idc.rb.net, RECKITT BENCKISER CORPORATE SERVICES LIMITED
1 entries


32022903
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2016-09-13 22:00:00
2018-09-14 21:59:59
gpiqaspas.idc.rb.net, RECKITT BENCKISER CORPORATE SERVICES LIMITED
1 entries


30364721
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2016-08-30 22:00:00
2018-08-31 21:59:59
gqasi.idc.rb.net, RECKITT BENCKISER CORPORATE SERVICES LIMITED
1 entries


27923935
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2016-08-10 22:00:00
2018-08-11 21:59:59
gpidevpas.idc.rb.net, Reckitt Benckiser Corporate Services
1 entries


27923337
CN=Symantec Class 3 Secure Server CA - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
2016-08-10 22:00:00
2018-08-11 21:59:59
gerpqaspas.idc.rb.net, Reckitt Benckiser Corporate Services, Reckitt Benckiser Corporate Services Limited
1 entries


16248042
CN=thawte SSL CA - G2, O="thawte, Inc.", C=US
2016-04-05 22:00:00
2018-04-06 21:59:59
assist-yourself-uat.rb.net, IS, Reckitt Benckiser Plc
1 entries


16248045
CN=thawte SSL CA - G2, O="thawte, Inc.", C=US
2016-04-05 22:00:00
2018-04-06 21:59:59
assist-yourself.rb.net, IS, Reckitt Benckiser Plc
1 entries



7. Html-Content - Entries (BETA - mixed content and other checks)

No Html-Content entries found. Only checked if https + status 200/401/403/404


8. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
rb.net
0

no CAA entry found
1
0
net
0

no CAA entry found
1
0


9. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
rb.net

ok
1
0
_acme-challenge.rb.net

Name Error - The domain name does not exist
1
0
_acme-challenge.rb.net.rb.net

Name Error - The domain name does not exist
1
0



Permalink: https://check-your-website.server-daten.de/?i=77c44e1e-b4ce-446b-a69a-ee468b5460cd


Last Result: https://check-your-website.server-daten.de/?q=rb.net - 2019-05-15 12:44:49