Check DNS, Urls + Redirects, Certificates and Content of your Website

0 in Queue, 0 of max. 8 Checks (17:37:37)
Why should you only use Prefix - Cookies? |
Hall of Fame - A+ and A

 

Shortcuts: 1. IP-Addresses | 2. DNSSEC | 3. Name Servers | 4. SOA-Entries | 5. Screenshots | 6. Url-Checks | 7. Comments | 8. Connections | 9. Certificates | 10. CT-Logs | 11. Html-Content | 12. Html-Parsing | 13. NameServer-IPAddresses | 14. CAA | 15. TXT | 16. DomainServiceEntries | 17. Cipher Suites | 18. Portchecks |

 

A

 

Top config

 

Checked:
01.04.2020 14:34:51

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
rdm.volvocars.biz
CNAME
gripprod.trafficmanager.net
yes
1
0

CNAME
emea-grip-prod.westeurope.cloudapp.azure.com
yes


www.rdm.volvocars.biz

Name Error
yes
1
0
rdm.volvocars.biz
A
40.115.18.67
Amsterdam/North Holland/Netherlands (NL) - Microsoft Corporation
No Hostname found
no


gripprod.trafficmanager.net
A
40.115.18.67
Amsterdam/North Holland/Netherlands (NL) - Microsoft Corporation
No Hostname found
no


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






• Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 33853, Flags 256






Public Key with Algorithm 8, KeyTag 48903, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 11.04.2020, 00:00:00 +, Signature-Inception: 21.03.2020, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: biz

biz
4 DS RR in the parent zone found






1 RRSIG RR to validate DS RR found






RRSIG-Owner biz., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.04.2020, 21:00:00 +, Signature-Inception: 31.03.2020, 20:00:00 +, KeyTag 33853, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 33853 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 24963, Flags 256






Public Key with Algorithm 8, KeyTag 28450, Flags 257 (SEP = Secure Entry Point)






2 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner biz., Algorithm: 8, 1 Labels, original TTL: 900 sec, Signature-expiration: 26.04.2020, 13:33:41 +, Signature-Inception: 27.03.2020, 13:07:01 +, KeyTag 24963, Signer-Name: biz






RRSIG-Owner biz., Algorithm: 8, 1 Labels, original TTL: 900 sec, Signature-expiration: 26.04.2020, 13:33:41 +, Signature-Inception: 27.03.2020, 13:07:01 +, KeyTag 28450, Signer-Name: biz






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 24963 used to validate the DNSKEY RRSet






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 28450 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 28450, DigestType 1 and Digest "2cL5EsZX5ABc8ME7pVxaqika71Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 28450, DigestType 2 and Digest "QD8jRgnFazoiG8TPtpSUirXd9KJq4XQ5vxJ5z8XPIas=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: volvocars.biz

volvocars.biz
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "i6bsr533uiti32gbc17dvrbrkfbn8bf8" between the hashed NSEC3-owner "i6ak66p3v6hren2sgjq8v3otq5i6udru" and the hashed NextOwner "i6d135rn4qcdk70pa9kq5ngjs0kbksu1". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner i6ak66p3v6hren2sgjq8v3otq5i6udru.biz., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 25.04.2020, 09:18:14 +, Signature-Inception: 26.03.2020, 09:04:25 +, KeyTag 24963, Signer-Name: biz






0 DNSKEY RR found









Zone: rdm.volvocars.biz

rdm.volvocars.biz
0 DS RR in the parent zone found



Zone: www.rdm.volvocars.biz

www.rdm.volvocars.biz
0 DS RR in the parent zone found



Zone: (root)

(root)
1 DS RR published






• Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 33853, Flags 256






Public Key with Algorithm 8, KeyTag 48903, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 11.04.2020, 00:00:00 +, Signature-Inception: 21.03.2020, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: net

net
1 DS RR in the parent zone found






1 RRSIG RR to validate DS RR found






RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.04.2020, 21:00:00 +, Signature-Inception: 31.03.2020, 20:00:00 +, KeyTag 33853, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 33853 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 24512, Flags 256






Public Key with Algorithm 8, KeyTag 35886, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 09.04.2020, 16:28:30 +, Signature-Inception: 25.03.2020, 16:23:30 +, KeyTag 35886, Signer-Name: net






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 35886 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 35886, DigestType 2 and Digest "eGKyf19Rbr4ZaARE1M5edimBkxhCxGXwAjZAHYvZc+4=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: trafficmanager.net

trafficmanager.net
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "cs4320kto8kf7vh8q5kagd3lpf228uql" between the hashed NSEC3-owner "cs431ss8cti7m6jhmn592grli9t17ok7" and the hashed NextOwner "cs49egn3atpo6m7fblhased3j00k92nb". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner cs431ss8cti7m6jhmn592grli9t17ok7.net., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 06.04.2020, 06:41:48 +, Signature-Inception: 30.03.2020, 05:31:48 +, KeyTag 24512, Signer-Name: net






0 DNSKEY RR found









Zone: gripprod.trafficmanager.net

gripprod.trafficmanager.net
0 DS RR in the parent zone found

 

3. Name Servers

DomainNameserverNS-IP
www.rdm.volvocars.biz
•  dns1.cscdns.net

volvocars.biz
•  ns.domainnetwork.se
•

•  ns2.domainnetwork.se
•

•  ns3.domainnetwork.com
•
biz
•  a.gtld.biz
•

•  b.gtld.biz
•

•  c.gtld.biz
•

•  e.gtld.biz
•

•  f.gtld.biz
•

•  k.gtld.biz
•
trafficmanager.net
•  tm1.edgedns-tm.info
•

•  tm1.msft.net


•  tm2.edgedns-tm.info
•

•  tm2.msft.net

net
•  a.gtld-servers.net
•

•  b.gtld-servers.net
•

•  c.gtld-servers.net
•

•  d.gtld-servers.net
•

•  e.gtld-servers.net
•

•  f.gtld-servers.net
•

•  g.gtld-servers.net
•

•  h.gtld-servers.net
•

•  i.gtld-servers.net
•

•  j.gtld-servers.net
•

•  k.gtld-servers.net
•

•  l.gtld-servers.net
•

•  m.gtld-servers.net
•

 

4. SOA-Entries


Domain:biz
Zone-Name:
Primary:a.gtld.biz
Mail:hostmaster.neustar.biz
Serial:1585743690
Refresh:900
Retry:900
Expire:604800
TTL:86400
num Entries:6


Domain:volvocars.biz
Zone-Name:
Primary:dns1.cscdns.net
Mail:hostmaster.cscdns.net
Serial:2017121157
Refresh:21600
Retry:3600
Expire:2419200
TTL:86400
num Entries:3


Domain:www.rdm.volvocars.biz
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:net
Zone-Name:
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1585744472
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:4


Domain:net
Zone-Name:
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1585744487
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:9


Domain:trafficmanager.net
Zone-Name:
Primary:tm1.msft.net
Mail:hostmaster.trafficmanager.net
Serial:2003080800
Refresh:900
Retry:300
Expire:2419200
TTL:30
num Entries:4


5. Screenshots

Startaddress: https://rdm.volvocars.biz, address used: https://login.microsoftonline.com/81fa766e-a349-4867-8bf4-ab35e250a08f/oauth2/authorize?client_id=5b7aaa5f-6964-49a4-969c-b3dc8721c047&redirect_uri=https%3A%2F%2Frdm.volvocars.biz%2Fassets%2Fsignin-callback.html&response_type=id_token%20token&scope=AccessAsUser%20openid%20profile&state=561c93ae38724133aeaaf80f1ba1331b&nonce=f9fc42401cc8470888b09f3230d03c8e&resource=5b7aaa5f-6964-49a4-969c-b3dc8721c047, Screenshot created 2020-04-01 14:35:48 +00:0

 

Mobil (412px x 732px)

 

694 milliseconds

 

Screenshot mobile - https://login.microsoftonline.com/81fa766e-a349-4867-8bf4-ab35e250a08f/oauth2/authorize?client_id=5b7aaa5f-6964-49a4-969c-b3dc8721c047&redirect_uri=https%3A%2F%2Frdm.volvocars.biz%2Fassets%2Fsignin-callback.html&response_type=id_token%20token&scope=AccessAsUser%20openid%20profile&state=561c93ae38724133aeaaf80f1ba1331b&nonce=f9fc42401cc8470888b09f3230d03c8e&resource=5b7aaa5f-6964-49a4-969c-b3dc8721c047
Mobil + Landscape (732px x 412px)

 

700 milliseconds

 

Screenshot mobile landscape - https://login.microsoftonline.com/81fa766e-a349-4867-8bf4-ab35e250a08f/oauth2/authorize?client_id=5b7aaa5f-6964-49a4-969c-b3dc8721c047&redirect_uri=https%3A%2F%2Frdm.volvocars.biz%2Fassets%2Fsignin-callback.html&response_type=id_token%20token&scope=AccessAsUser%20openid%20profile&state=561c93ae38724133aeaaf80f1ba1331b&nonce=f9fc42401cc8470888b09f3230d03c8e&resource=5b7aaa5f-6964-49a4-969c-b3dc8721c047
Screen (1280px x 1680px)

 

784 milliseconds

 

Screenshot Desktop - https://login.microsoftonline.com/81fa766e-a349-4867-8bf4-ab35e250a08f/oauth2/authorize?client_id=5b7aaa5f-6964-49a4-969c-b3dc8721c047&redirect_uri=https%3A%2F%2Frdm.volvocars.biz%2Fassets%2Fsignin-callback.html&response_type=id_token%20token&scope=AccessAsUser%20openid%20profile&state=561c93ae38724133aeaaf80f1ba1331b&nonce=f9fc42401cc8470888b09f3230d03c8e&resource=5b7aaa5f-6964-49a4-969c-b3dc8721c047

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport412732
content Size412732

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

Chrome-Connection: secure. secure connection settings. The connection to this site is encrypted and authenticated using TLS 1.2, ECDHE_RSA with P-256, and AES_256_GCM.

 

Chrome-Resources : secure. all served securely. All resources on this page are served securely.

 

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://rdm.volvocars.biz/
40.115.18.67
308
https://rdm.volvocars.biz/
Html is minified: 108.05 %
0.053
A
Server: nginx/1.13.12
Date: Wed, 01 Apr 2020 12:35:18 GMT
Content-Type: text/html
Content-Length: 188
Connection: close
Location: https://rdm.volvocars.biz/

• https://rdm.volvocars.biz/
40.115.18.67
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/704		200

Html is minified: 184.62 %
Other inline scripts (∑/total): 0/0		3.263
A
small visible content (num chars: 11)
</app-root>
Server: nginx/1.13.12
Date: Wed, 01 Apr 2020 12:35:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Last-Modified: Thu, 26 Mar 2020 16:10:11 GMT
ETag: W/"5e7cd3e3-69d"
Content-Encoding: gzip
Strict-Transport-Security: max-age=15724800; includeSubDomains

• http://rdm.volvocars.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
40.115.18.67
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		308
https://rdm.volvocars.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 108.05 %
Other inline scripts (∑/total): 0/0		0.040
A
Visible Content: 308 Permanent Redirect nginx/1.13.12
Server: nginx/1.13.12
Date: Wed, 01 Apr 2020 12:35:22 GMT
Content-Type: text/html
Content-Length: 188
Connection: close
Location: https://rdm.volvocars.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

• https://rdm.volvocars.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/704		200

Html is minified: 184.62 %
Other inline scripts (∑/total): 0/0		3.317

Visible Content: </app-root>
Info: Html-Content with meta and/or script, may be a problem creating a Letsencrypt certificate using http-01 validation
Server: nginx/1.13.12
Date: Wed, 01 Apr 2020 12:35:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Last-Modified: Thu, 26 Mar 2020 16:10:11 GMT
ETag: W/"5e7cd3e3-69d"
Content-Encoding: gzip
Strict-Transport-Security: max-age=15724800; includeSubDomains

 

7. Comments


1. General Results, most used to calculate the result

Aname "rdm.volvocars.biz" is subdomain, public suffix is "biz", top-level-domain-type is "generic-restricted", tld-manager is "Neustar, Inc."
AGood: All ip addresses are public addresses
AGood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: non-www is preferred
AGood: every https has a Strict Transport Security Header
AGood: HSTS has includeSubdomains - directive
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):0 complete Content-Type - header (2 urls)
https://rdm.volvocars.biz/ 40.115.18.67


Url with incomplete Content-Type - header - missing charset
https://rdm.volvocars.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Url with incomplete Content-Type - header - missing charset
Ahttp://rdm.volvocars.biz/ 40.115.18.67
308
https://rdm.volvocars.biz/
Correct redirect http - https with the same domain name
BWarning: HSTS max-age is too short - minimum 31536000 = 365 days required, 15724800 seconds = 182 days found
XFatal error: Nameserver doesn't support TCP connection: tm1.msft.net: NXDOMAIN
XFatal error: Nameserver doesn't support TCP connection: tm2.msft.net: NXDOMAIN

2. Header-Checks


3. DNS- and NameServer - Checks

AGood: Nameserver supports TCP connections: 3 good Nameserver
AGood: Nameserver supports Echo Capitalization: 3 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 3 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 3 good Nameserver
Nameserver doesn't pass all EDNS-Checks: dns1.cscdns.net: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: tm1.msft.net: OP100: SOA expected and found, NOERR expectend and NOERR found, Version 0 expectend and found, NO OPT100 expected, OPT100 echoed. FLAGS: ok. V1: SOA NOT expected and NOT found, BADVER expected, NOERR found, Version 0 expected, Version greater 0 found. V1OP100: SOA NOT expected and NOT found, BADVER expected, NOERR found, Version 0 expected, Version greater 0 found, NO OPT100 expected, OPT100 echoed. V1FLAGS: SOA NOT expected and NOT found, BADVER expected, NOERR found, Version 0 expected, Version greater 0 found. DNSSEC: ok. V1DNSSEC: SOA NOT expected and NOT found, BADVER expected, NOERR found, Version 0 expected, Version greater 0 found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: tm2.msft.net: OP100: SOA expected and found, NOERR expectend and NOERR found, Version 0 expectend and found, NO OPT100 expected, OPT100 echoed. FLAGS: ok. V1: ok. V1OP100: SOA NOT expected, but found, BADVER expected and found, Version 0 expectend and found, NO OPT100 expected, OPT100 echoed. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

https://rdm.volvocars.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
200

Warning: Not existing ACME-file, but Server sends 200, not 404 or redirect. May be a problem creating a Letsencrypt certificate. Checking /.well-known/acme-challenge/random-filename - a http status 404 - Not Found - is expected. If your server sends content and a http status 200, the validation file (87 bytes, token, dot and the hash of the public part of the account key) may be invisible, so Letsencrypt can't validate your domain. If it is an application that sends this content, perhaps create an exception, so /.well-known/acme-challenge sends raw files. Or create a redirect to another domain and / or port 443, but your Letsencrypt client must support such a solution. Certbot: Use webroot as authenticator - https://certbot.eff.org/docs/using.html Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
https://rdm.volvocars.biz/ 40.115.18.67
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://rdm.volvocars.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://rdm.volvocars.biz/ 40.115.18.67
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://rdm.volvocars.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
AGood: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 16 external CSS / JavaScript files found
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 14 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 2 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 16 complete.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
ADuration: 61893 milliseconds, 61.893 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
rdm.volvocars.biz
40.115.18.67
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok
rdm.volvocars.biz
40.115.18.67
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
Chain - incomplete

1CN=rdm.volvocars.biz, O=Volvo Car Corporation AB, L=Gothenburg, C=SE


2CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US


rdm.volvocars.biz
rdm.volvocars.biz
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
supported
ok

rdm.volvocars.biz
rdm.volvocars.biz
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
Chain - incomplete

1CN=rdm.volvocars.biz, O=Volvo Car Corporation AB, L=Gothenburg, C=SE


2CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US

 

9. Certificates

1.
1.
CN=rdm.volvocars.biz, O=Volvo Car Corporation AB, L=Gothenburg, C=SE
16.10.2018
08.10.2020
1526 days expired		rdm-dev.volvocars.biz, rdm.volvocars.biz - 2 entries
1.
1.
CN=rdm.volvocars.biz, O=Volvo Car Corporation AB, L=Gothenburg, C=SE
16.10.2018

08.10.2020
1526 days expired


rdm-dev.volvocars.biz, rdm.volvocars.biz - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:05A6DD8ADE26AFA96EEBBDD84D9C67E4
Thumbprint:1F22FA1897345EEC0DC7F03CDC8EFBC8CD7899F4
SHA256 / Certificate:4GP9Utct4jJ3dWzm1r4bzEaxvNNmIXEduq7pziKZoJ4=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):7c139ebc764e1e2bf7556d6629ab1c46ebdec6f195d14640fe2b799fa61e9003
SHA256 hex / Subject Public Key Information (SPKI):7c139ebc764e1e2bf7556d6629ab1c46ebdec6f195d14640fe2b799fa61e9003
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=rdm.volvocars.biz, O=Volvo Car Corporation AB, L=Gothenburg, C=SE
16.10.2018
08.10.2020
1526 days expired		rdm-dev.volvocars.biz, rdm.volvocars.biz - 2 entries

2.
CN=rdm.volvocars.biz, O=Volvo Car Corporation AB, L=Gothenburg, C=SE
16.10.2018

08.10.2020
1526 days expired


rdm-dev.volvocars.biz, rdm.volvocars.biz - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:05A6DD8ADE26AFA96EEBBDD84D9C67E4
Thumbprint:1F22FA1897345EEC0DC7F03CDC8EFBC8CD7899F4
SHA256 / Certificate:4GP9Utct4jJ3dWzm1r4bzEaxvNNmIXEduq7pziKZoJ4=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):7c139ebc764e1e2bf7556d6629ab1c46ebdec6f195d14640fe2b799fa61e9003
SHA256 hex / Subject Public Key Information (SPKI):7c139ebc764e1e2bf7556d6629ab1c46ebdec6f195d14640fe2b799fa61e9003
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US
08.03.2013
08.03.2023
645 days expired

3.
CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US
08.03.2013

08.03.2023
645 days expired




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:01FDA3EB6ECA75C888438B724BCFBC91
Thumbprint:1FB86B1168EC743154062E8C9CC5B171A4B7CCB4
SHA256 / Certificate:FUxDPEkZKcXvaG6DjjI2ZKAOag2CLMyVj7TasD5JoI8=
SHA256 hex / Cert (DANE * 0 1):154c433c491929c5ef686e838e323664a00e6a0d822ccc958fb4dab03e49a08f
SHA256 hex / PublicKey (DANE * 1 1):e6426f344330d0a8eb080bbb7976391d976fc824b5dc16c0d15246d5148ff75c
SHA256 hex / Subject Public Key Information (SPKI):e6426f344330d0a8eb080bbb7976391d976fc824b5dc16c0d15246d5148ff75c
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




4.
CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US
08.03.2013
08.03.2023
645 days expired

4.
CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US
08.03.2013

08.03.2023
645 days expired




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:01FDA3EB6ECA75C888438B724BCFBC91
Thumbprint:1FB86B1168EC743154062E8C9CC5B171A4B7CCB4
SHA256 / Certificate:FUxDPEkZKcXvaG6DjjI2ZKAOag2CLMyVj7TasD5JoI8=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e6426f344330d0a8eb080bbb7976391d976fc824b5dc16c0d15246d5148ff75c
SHA256 hex / Subject Public Key Information (SPKI):e6426f344330d0a8eb080bbb7976391d976fc824b5dc16c0d15246d5148ff75c
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




5.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006
10.11.2031
expires in 2524 days

5.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006

10.11.2031
expires in 2524 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:083BE056904246B1A1756AC95991C74A
Thumbprint:A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
SHA256 / Certificate:Q0ig6URMeMsmXgWNXolEtNhPlmK9Jtslf4k0pEPHAWE=
SHA256 hex / Cert (DANE * 0 1):4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
SHA256 hex / PublicKey (DANE * 1 1):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SHA256 hex / Subject Public Key Information (SPKI):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





6.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
07.12.2016
10.05.2025
expires in 149 days

6.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
07.12.2016

10.05.2025
expires in 149 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0F5BC3A176CB789E2020C7893C8167B4
Thumbprint:FB20FA8A6A93B375F054814F9E00273EA51A6138
SHA256 / Certificate:bay7iUUTex2tQhGwQ2774G8SrONpBJc7Ra4ldAgj02k=
SHA256 hex / Cert (DANE * 0 1):6dacbb8945137b1dad4211b0436efbe06f12ace36904973b45ae25740823d369
SHA256 hex / PublicKey (DANE * 1 1):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SHA256 hex / Subject Public Key Information (SPKI):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




7.
CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE
12.05.2000
13.05.2025
expires in 152 days

7.
CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE
12.05.2000

13.05.2025
expires in 152 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:020000B9
Thumbprint:D4DE20D05E66FC53FE1A50882C78DB2852CAE474
SHA256 / Certificate:Fq9XqfZ2sKsSYJWqXrre8iqzERnWRKyVzUuT2/Pyaus=
SHA256 hex / Cert (DANE * 0 1):16af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb
SHA256 hex / PublicKey (DANE * 1 1):63d9af9b47b1064d49a10e7b7fd566dbc8caa399459bfc2829c571ad8c6ef34a
SHA256 hex / Subject Public Key Information (SPKI):63d9af9b47b1064d49a10e7b7fd566dbc8caa399459bfc2829c571ad8c6ef34a
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Small Code Update - wait one minute

 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Small Code Update - wait one minute

 

11. Html-Content - Entries

Summary

No data found or small Code-update

 

Details

Small Code Update - wait one minute

 

12. Html-Parsing via https://validator.w3.org/nu/

Small Code update, wait one minute

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers:

 

No NameServer - IP address informations found. The feature is new (2020-05-07), so recheck this domain.

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
gripprod.trafficmanager.net



1
0
trafficmanager.net
-3

Name Error - The domain name does not exist
1
0
rdm.volvocars.biz



1
0
volvocars.biz
0

no CAA entry found
1
0
biz
0

no CAA entry found
1
0
net
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
volvocars.biz
_7f476bc3624583a7971eb1d00c1e3481.hkvuiqjoua.acm-validations.aws.
ok
1
0
volvocars.biz
_f95698b2a00d90380a9c55f3a4781e1e.hkvuiqjoua.acm-validations.aws.
ok
1
0
volvocars.biz
adobe-sign-verification=3778d54b7b1865491003b78f451168a9
ok
1
0
volvocars.biz
b74b2aa09c1440bab5791b1a60c84631
ok
1
0
volvocars.biz
hdpjfqfz4xlwxfr9yx1y7zpwcjnw3jzq
ok
1
0
volvocars.biz
MS=ms43828123
ok
1
0
volvocars.biz
v=msv1 t=24B9CED4-08A4-45E7-8337-227013E57AAE
ok
1
0
volvocars.biz
v=spf1 -all
ok
1
0
rdm.volvocars.biz


1
0
trafficmanager.net

Name Error - The domain name does not exist
1
0
gripprod.trafficmanager.net


1
0
_acme-challenge.rdm.volvocars.biz

Name Error - The domain name does not exist
1
0
_acme-challenge.gripprod.trafficmanager.net

Name Error - The domain name does not exist
1
0
_acme-challenge.rdm.volvocars.biz.volvocars.biz

Name Error - The domain name does not exist
1
0
_acme-challenge.rdm.volvocars.biz.rdm.volvocars.biz

Name Error - The domain name does not exist
1
0
_acme-challenge.gripprod.trafficmanager.net.trafficmanager.net

Name Error - The domain name does not exist
1
0
_acme-challenge.gripprod.trafficmanager.net.gripprod.trafficmanager.net

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

No DomainServiceEntries entries found

 

 

17. Cipher Suites

No Ciphers found

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=e6c18d35-6232-4d19-9e77-6d8cd12fba7f

 

Last Result: https://check-your-website.server-daten.de/?q=rdm.volvocars.biz - 2020-04-01 14:34:51

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=rdm.volvocars.biz" target="_blank">Check this Site: rdm.volvocars.biz</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=rdm.volvocars.biz

 

 

Jürgen Auer • Friedenstr. 37 • 10249 Berlin • +49(0)30 420 200 60 • info@sql-und-xml.de • USt-IdNr.: DE221734518

 

Errors, ideas, questions? Use the Contact form • A project using Server-Daten - Web Database solutions