Check DNS, Urls + Redirects, Certificates and Content of your Website




1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
remote.oakwood.surrey.sch.uk
A
62.254.134.12
Oxford/England/United Kingdom (GB) - Virgin Media Business
Hostname: 12.134-254-62.static.virginmediabusiness.co.uk
yes
1
0

AAAA

yes


www.remote.oakwood.surrey.sch.uk

Name Error
yes
1
0
*.oakwood.surrey.sch.uk
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


*.remote.oakwood.surrey.sch.uk
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes



2. DNSSEC

Zone (*)DNSSEC - Informations

Zone: (root)
(root)
1 DS RR published



DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=



Status: Valid because published



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 26116, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.11.2020, 00:00:00 +, Signature-Inception: 31.10.2020, 00:00:00 +, KeyTag 20326, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: uk
uk
1 DS RR in the parent zone found



DS with Algorithm 8, KeyTag 43876, DigestType 2 and Digest oQftKsG9FNkkFzvH6CehFTWCByOU+Scro34jU7xllgM=



1 RRSIG RR to validate DS RR found



RRSIG-Owner uk., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 15.11.2020, 05:00:00 +, Signature-Inception: 02.11.2020, 04:00:00 +, KeyTag 26116, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26116 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 43056, Flags 256



Public Key with Algorithm 8, KeyTag 43876, Flags 257 (SEP = Secure Entry Point)



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner uk., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 16.11.2020, 01:47:52 +, Signature-Inception: 02.11.2020, 01:32:43 +, KeyTag 43876, Signer-Name: uk



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 43876 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 43876, DigestType 2 and Digest "oQftKsG9FNkkFzvH6CehFTWCByOU+Scro34jU7xllgM=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: sch.uk
sch.uk
1 DS RR in the parent zone found



DS with Algorithm 8, KeyTag 10434, DigestType 2 and Digest oU2LNC8b7UhUQNCujeT3Q8wtZ70+7DkZfVe6CUaYWZ0=



1 RRSIG RR to validate DS RR found



RRSIG-Owner sch.uk., Algorithm: 8, 2 Labels, original TTL: 300 sec, Signature-expiration: 15.11.2020, 21:58:58 +, Signature-Inception: 01.11.2020, 21:21:18 +, KeyTag 43056, Signer-Name: uk



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 43056 used to validate the DS RRSet in the parent zone



1 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 10434, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner sch.uk., Algorithm: 8, 2 Labels, original TTL: 300 sec, Signature-expiration: 03.12.2020, 17:00:59 +, Signature-Inception: 29.10.2020, 16:19:26 +, KeyTag 10434, Signer-Name: sch.uk



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 10434 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 10434, DigestType 2 and Digest "oU2LNC8b7UhUQNCujeT3Q8wtZ70+7DkZfVe6CUaYWZ0=" validates local Key with the same values

Zone: surrey.sch.uk
surrey.sch.uk
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "n8okg0i25ulflchhdcvvcnf1uskkibf9" between the hashed NSEC3-owner "n8okg0i25ulflchhdcvvcnf1uskkibf9" and the hashed NextOwner "nds1c5k4qeoqp947vs4ahq570u1odmnk". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: No Bitmap? Validated: RRSIG-Owner n8okg0i25ulflchhdcvvcnf1uskkibf9.sch.uk., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.12.2020, 20:00:05 +, Signature-Inception: 29.10.2020, 19:10:37 +, KeyTag 10434, Signer-Name: sch.uk



0 DNSKEY RR found




Zone: oakwood.surrey.sch.uk
oakwood.surrey.sch.uk
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "1k751t2qnns3dngrhjc1b72j8qhfu8qo" between the hashed NSEC3-owner "1iscijfl5v1dlt4qtpn6145el44kh3vb" and the hashed NextOwner "1o9c5u2c6vofnnc7vjm8nn0q66ct1n18". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: No Bitmap? Validated: RRSIG-Owner 1iscijfl5v1dlt4qtpn6145el44kh3vb.sch.uk., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.12.2020, 20:00:05 +, Signature-Inception: 29.10.2020, 19:10:37 +, KeyTag 10434, Signer-Name: sch.uk



DS-Query in the parent zone sends valid NSEC3 RR with the Hash "n8okg0i25ulflchhdcvvcnf1uskkibf9" as Owner. That's the Hash of "surrey.sch.uk" with the NextHashedOwnerName "nds1c5k4qeoqp947vs4ahq570u1odmnk". So that domain name is the Closest Encloser of "oakwood.surrey.sch.uk". Opt-Out: True.
Bitmap: No Bitmap? Validated: RRSIG-Owner n8okg0i25ulflchhdcvvcnf1uskkibf9.sch.uk., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.12.2020, 20:00:05 +, Signature-Inception: 29.10.2020, 19:10:37 +, KeyTag 10434, Signer-Name: sch.uk



0 DNSKEY RR found




Zone: remote.oakwood.surrey.sch.uk
remote.oakwood.surrey.sch.uk
0 DS RR in the parent zone found



0 DNSKEY RR found




Zone: www.remote.oakwood.surrey.sch.uk
www.remote.oakwood.surrey.sch.uk
0 DS RR in the parent zone found


3. Name Servers

DomainNameserverNS-IP
www.remote.oakwood.surrey.sch.uk
  ns1.tsodns.com

remote.oakwood.surrey.sch.uk
  ns1.tsodns.com / tsovhdns1.prgn.misp.co.uk
188.65.116.165
Slough/England/United Kingdom (GB) - UKWEBHOSTING Customer servers

oakwood.surrey.sch.uk
  ns1.tsodns.com


  ns1.vhdns.net / tsovhdns1.prgn.misp.co.uk
188.65.116.165
Slough/England/United Kingdom (GB) - UKWEBHOSTING Customer servers


  ns2.vhdns.net / tsovhdns2.prgn.misp.co.uk
195.62.28.26
Slough/England/United Kingdom (GB) - MHD

surrey.sch.uk
  dns1.nic.uk
213.248.216.1
Manchester/England/United Kingdom (GB) - Nominet


 
2a01:618:400::1
Dallas/Texas/United States (US) - Nominet UK

sch.uk
  dns1.nic.uk
213.248.216.1
Manchester/England/United Kingdom (GB) - Nominet


 
2a01:618:400::1
Dallas/Texas/United States (US) - Nominet UK


  dns2.nic.uk
103.49.80.1
Oxford/England/United Kingdom (GB) - NOMINET-NS


 
2401:fd80:400::1
Canberra/Australian Capital Territory/Australia (AU) - NOMINET UK


  dns3.nic.uk
213.248.220.1
London/England/United Kingdom (GB) - Nominet


 
2a01:618:404::1
London/England/United Kingdom (GB) - Nominet UK


  dns4.nic.uk
43.230.48.1
Oxford/England/United Kingdom (GB) - NOMINET-NS


 
2401:fd80:404::1
Canberra/Australian Capital Territory/Australia (AU) - NOMINET UK


  nsa.nic.uk / TLD_Host2.Frankfurt_Node1
156.154.100.3
New York/United States (US) - NeuStar, Inc.


 
2001:502:ad09::3
Sterling/Virginia/United States (US) - NeuStar, Inc.


  nsb.nic.uk / TLD_Host1.Amsterdam_Node1
156.154.101.3
New York/United States (US) - NeuStar, Inc.


  nsc.nic.uk / TLD_Host1.Frankfurt_Node1
156.154.102.3
Washington/District of Columbia/United States (US) - NeuStar, Inc.


  nsd.nic.uk / TLD_Host2.Amsterdam_Node1
156.154.103.3
New York/United States (US) - NeuStar, Inc.

uk
  dns1.nic.uk


  dns2.nic.uk


  dns3.nic.uk


  dns4.nic.uk


  nsa.nic.uk / TLD_Host2.Frankfurt_Node1


  nsb.nic.uk / TLD_Host2.Amsterdam_Node1


  nsc.nic.uk / TLD_Host1.Frankfurt_Node1


  nsd.nic.uk / TLD_Host1.Amsterdam_Node1


4. SOA-Entries


Domain:uk
Zone-Name:uk
Primary:dns1.nic.uk
Mail:hostmaster.nic.uk
Serial:1405119129
Refresh:7200
Retry:900
Expire:2419200
TTL:10800
num Entries:8


Domain:sch.uk
Zone-Name:sch.uk
Primary:dns1.nic.uk
Mail:hostmaster.nominet.org.uk
Serial:1301955504
Refresh:900
Retry:300
Expire:2419200
TTL:10800
num Entries:13


Domain:surrey.sch.uk
Zone-Name:sch.uk
Primary:dns1.nic.uk
Mail:hostmaster.nominet.org.uk
Serial:1301955504
Refresh:900
Retry:300
Expire:2419200
TTL:10800
num Entries:2


Domain:oakwood.surrey.sch.uk
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:oakwood.surrey.sch.uk
Zone-Name:oakwood.surrey.sch.uk
Primary:ns1.tsodns.com
Mail:support.tsohost.com
Serial:1603368434
Refresh:10800
Retry:3600
Expire:604800
TTL:3600
num Entries:2


Domain:remote.oakwood.surrey.sch.uk
Zone-Name:oakwood.surrey.sch.uk
Primary:ns1.tsodns.com
Mail:support.tsohost.com
Serial:1603368434
Refresh:10800
Retry:3600
Expire:604800
TTL:3600
num Entries:1


Domain:www.remote.oakwood.surrey.sch.uk
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


5. Screenshots

Startaddress: https://remote.oakwood.surrey.sch.uk, address used: https://remote.oakwood.surrey.sch.uk/, Screenshot created 2020-11-02 17:17:46 +00:0

Mobil (412px x 732px)

385 milliseconds

Screenshot mobile - https://remote.oakwood.surrey.sch.uk/
Mobil + Landscape (732px x 412px)

385 milliseconds

Screenshot mobile landscape - https://remote.oakwood.surrey.sch.uk/
Screen (1280px x 1680px)

592 milliseconds

Screenshot Desktop - https://remote.oakwood.surrey.sch.uk/

Mobile- and other Chrome-Checks

widthheight
visual Viewport412732
content Size412732

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

Chrome-Connection: secure. secure connection settings. The connection to this site is encrypted and authenticated using TLS 1.2, ECDHE_RSA with P-384, and AES_256_GCM.

Chrome-Resources : secure. all served securely. All resources on this page are served securely.

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://remote.oakwood.surrey.sch.uk/
62.254.134.12
-14

10.013
T
Timeout - The operation has timed out

• https://remote.oakwood.surrey.sch.uk/
62.254.134.12
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 103.96 %
4.920
M
Not Found
small visible content (num chars: 162)
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"> Not Found Not Found HTTP Error 404. The requested resource is not found.
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Mon, 02 Nov 2020 16:17:09 GMT
Connection: close
Content-Length: 315

• http://remote.oakwood.surrey.sch.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
62.254.134.12
-14

10.030
T
Timeout - The operation has timed out
Visible Content:

• https://62.254.134.12/
62.254.134.12
-4

0.157
W
SendFailure - The underlying connection was closed: An unexpected error occurred on a send.

7. Comments


1. General Results, most used to calculate the result

Aname "remote.oakwood.surrey.sch.uk" is subdomain, public suffix is ".*.sch.uk", top-level-domain is ".uk", top-level-domain-type is "country-code", Country is United Kingdom of Great Britain and Northern Ireland, tld-manager is "Nominet UK", num .uk-domains preloaded: 3201 (complete: 131120)
AGood: All ip addresses are public addresses
Warning: Only one ip address found: remote.oakwood.surrey.sch.uk has only one ip address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: remote.oakwood.surrey.sch.uk has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
Bhttps://remote.oakwood.surrey.sch.uk/ 62.254.134.12
404

Missing HSTS-Header
CError - no version with Http-Status 200
HFatal error: No https - result with http-status 200, no encryption
Mhttps://remote.oakwood.surrey.sch.uk/ 62.254.134.12
404

Misconfiguration - main pages should never send http status 400 - 499
Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain remote.oakwood.surrey.sch.uk, 1 ip addresses.

2. DNS- and NameServer - Checks

AInfo:: 7 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 7 Queries complete, 3 with IPv6, 4 with IPv4.
Warning: Only some DNS Queries done via ipv6. IPv6 is the future, so the name servers of your name servers should have ipv6 addresses.
Ok (4 - 8):: An average of 3.5 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 3 different Name Servers found: ns1.tsodns.com, ns1.vhdns.net, ns2.vhdns.net, 2 Name Servers included in Delegation: ns1.vhdns.net, ns2.vhdns.net, 2 Name Servers included in 2 Zone definitions: ns1.vhdns.net, ns2.vhdns.net, 1 Name Servers listed in SOA.Primary: ns1.tsodns.com.
AGood: Only one SOA.Primary Name Server found.: ns1.tsodns.com.
Error: SOA.Primary Name Server not included in the delegation set.: ns1.tsodns.com.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: ns1.vhdns.net, ns2.vhdns.net
AGood: All Name Server Domain Names have a Public Suffix.
Error: Name Server Domain Names with Public Suffix and without ip address found.: 1 Name Servers without ipv4 and ipv6: 1

AGood: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
Warning: No Name Server IPv6 address found. IPv6 is the future, so your name servers should be visible via IPv6.: 2 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: net
AGood: Name Servers with different domain names found.: 2 different Domains found
Warning: All Name Servers from the same Country / IP location.: 2 Name Servers, 1 Countries: GB
AInfo: Ipv4-Subnet-list: 2 Name Servers, 2 different subnets (first Byte): 188., 195., 2 different subnets (first two Bytes): 188.65., 195.62., 2 different subnets (first three Bytes): 188.65.116., 195.62.28.
AExcellent: Every Name Server IPv4-address starts with an unique Byte.
AGood: Nameserver supports TCP connections: 1 good Nameserver
AGood: Nameserver supports Echo Capitalization: 1 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 1 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 1 good Nameserver
Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk / 213.248.216.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk / 213.248.216.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk / 2a01:618:400::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk / 2a01:618:400::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns2.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns2.nic.uk / 103.49.80.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns2.nic.uk / 2401:fd80:400::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns3.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns3.nic.uk / 213.248.220.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns3.nic.uk / 2a01:618:404::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns4.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns4.nic.uk / 43.230.48.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns4.nic.uk / 2401:fd80:404::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.tsodns.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns1.tsodns.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

3. Content- and Performance-critical Checks

http://remote.oakwood.surrey.sch.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 62.254.134.12
-14

Fatal: Check of /.well-known/acme-challenge/random-filename has a timeout. Creating a Letsencrypt certificate via http-01 challenge can't work. You need a running webserver (http) and an open port 80. If it's a home server + ipv4, perhaps a correct port forwarding port 80 extern ⇒ working port intern is required. Port 80 / http can redirect to another domain port 80 or port 443, but not other ports. If it's a home server, perhaps your ISP blocks port 80. Then you may use the dns-01 challenge. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://remote.oakwood.surrey.sch.uk/ 62.254.134.12
404
4.920 seconds
Warning: 404 needs more then one second
ADuration: 120043 milliseconds, 120.043 seconds


8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
remote.oakwood.surrey.sch.uk
62.254.134.12
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
remote.oakwood.surrey.sch.uk
62.254.134.12
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
Tls.1.2
Tls.1.1
Tls.1.0
Chain (complete)
1CN=lib.oakwood.surrey.sch.uk, OU=Domain Control Validated

2CN=Starfield Secure Certificate Authority - G2, OU=http://certs.starfieldtech.com/repository/, O="Starfield Technologies, Inc.", L=Scottsdale, C=US, ST=Arizona

3CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, C=US, ST=Arizona


9. Certificates

1.
1.
CN=lib.oakwood.surrey.sch.uk, OU=Domain Control Validated
21.10.2020
04.11.2021
332 days expired
lib.oakwood.surrey.sch.uk, www.lib.oakwood.surrey.sch.uk, apps.oakwood.surrey.sch.uk, kb.oakwood.surrey.sch.uk, intranet.oakwood.surrey.sch.uk, remote.oakwood.surrey.sch.uk - 6 entries
1.
1.
CN=lib.oakwood.surrey.sch.uk, OU=Domain Control Validated
21.10.2020

04.11.2021
332 days expired
lib.oakwood.surrey.sch.uk, www.lib.oakwood.surrey.sch.uk, apps.oakwood.surrey.sch.uk, kb.oakwood.surrey.sch.uk, intranet.oakwood.surrey.sch.uk, remote.oakwood.surrey.sch.uk - 6 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:112030BBBCDAC20A
Thumbprint:22867449AA842E38D300B9347E7D3048B94928A5
SHA256 / Certificate:8lXRVskMwM0K6/ofExUg8xyrw6mbI2JfklbrL96QSjE=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):83e7eb46a76d1aea2743e1844e1845f3a0ed6bb98244f9552a9af280b7431c36
SHA256 hex / Subject Public Key Information (SPKI):83e7eb46a76d1aea2743e1844e1845f3a0ed6bb98244f9552a9af280b7431c36
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.starfieldtech.com/
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)


2.
CN=lib.oakwood.surrey.sch.uk, OU=Domain Control Validated
21.10.2020
04.11.2021
332 days expired
lib.oakwood.surrey.sch.uk, www.lib.oakwood.surrey.sch.uk, apps.oakwood.surrey.sch.uk, kb.oakwood.surrey.sch.uk, intranet.oakwood.surrey.sch.uk, remote.oakwood.surrey.sch.uk - 6 entries

2.
CN=lib.oakwood.surrey.sch.uk, OU=Domain Control Validated
21.10.2020

04.11.2021
332 days expired
lib.oakwood.surrey.sch.uk, www.lib.oakwood.surrey.sch.uk, apps.oakwood.surrey.sch.uk, kb.oakwood.surrey.sch.uk, intranet.oakwood.surrey.sch.uk, remote.oakwood.surrey.sch.uk - 6 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:112030BBBCDAC20A
Thumbprint:22867449AA842E38D300B9347E7D3048B94928A5
SHA256 / Certificate:8lXRVskMwM0K6/ofExUg8xyrw6mbI2JfklbrL96QSjE=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):83e7eb46a76d1aea2743e1844e1845f3a0ed6bb98244f9552a9af280b7431c36
SHA256 hex / Subject Public Key Information (SPKI):83e7eb46a76d1aea2743e1844e1845f3a0ed6bb98244f9552a9af280b7431c36
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.starfieldtech.com/
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)


3.
CN=Starfield Secure Certificate Authority - G2, OU=http://certs.starfieldtech.com/repository/, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US
03.05.2011
03.05.2031
expires in 3135 days


3.
CN=Starfield Secure Certificate Authority - G2, OU=http://certs.starfieldtech.com/repository/, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US
03.05.2011

03.05.2031
expires in 3135 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:07
Thumbprint:7EDC376DCFD45E6DDF082C160DF6AC21835B95D4
SHA256 / Certificate:k6B4mNibLMoWa6bx+KFBOM5Dgo5JG4MZJryCR9ORzHI=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):f24196ae94078667348f02e8e37458a3a6e6aad1e0b0dc610118cce721427bfc
SHA256 hex / Subject Public Key Information (SPKI):f24196ae94078667348f02e8e37458a3a6e6aad1e0b0dc610118cce721427bfc
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.starfieldtech.com/
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:


4.
CN=Starfield Secure Certificate Authority - G2, OU=http://certs.starfieldtech.com/repository/, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US
03.05.2011
03.05.2031
expires in 3135 days


4.
CN=Starfield Secure Certificate Authority - G2, OU=http://certs.starfieldtech.com/repository/, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US
03.05.2011

03.05.2031
expires in 3135 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:07
Thumbprint:7EDC376DCFD45E6DDF082C160DF6AC21835B95D4
SHA256 / Certificate:k6B4mNibLMoWa6bx+KFBOM5Dgo5JG4MZJryCR9ORzHI=
SHA256 hex / Cert (DANE * 0 1):93a07898d89b2cca166ba6f1f8a14138ce43828e491b831926bc8247d391cc72
SHA256 hex / PublicKey (DANE * 1 1):f24196ae94078667348f02e8e37458a3a6e6aad1e0b0dc610118cce721427bfc
SHA256 hex / Subject Public Key Information (SPKI):f24196ae94078667348f02e8e37458a3a6e6aad1e0b0dc610118cce721427bfc
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.starfieldtech.com/
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:


5.
CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US
01.01.2014
30.05.2031
expires in 3162 days


5.
CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US
01.01.2014

30.05.2031
expires in 3162 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:391484
Thumbprint:9565B778C8A50EB4FEFD45C8A658DDE2411EAD0A
SHA256 / Certificate:n0PVLoCMIK/2ngL6rCBarGhOaXUhPWYg+sZL3l/KtLw=
SHA256 hex / Cert (DANE * 0 1):9f43d52e808c20aff69e02faac205aac684e6975213d6620fac64bde5fcab4bc
SHA256 hex / PublicKey (DANE * 1 1):808d68b3fab4884a5f971ace7d10550d7a95a163774f3ec36afffb213fbe4c74
SHA256 hex / Subject Public Key Information (SPKI):808d68b3fab4884a5f971ace7d10550d7a95a163774f3ec36afffb213fbe4c74
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.starfieldtech.com/
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:


6.
CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US
01.09.2009
01.01.2038
expires in 5570 days


6.
CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US
01.09.2009

01.01.2038
expires in 5570 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:00
Thumbprint:B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E
SHA256 / Certificate:LOHLC/nS+eECmT++IVFSw7LdDKveHGjlMZuDkVTbt/U=
SHA256 hex / Cert (DANE * 0 1):2ce1cb0bf9d2f9e102993fbe215152c3b2dd0cabde1c68e5319b839154dbb7f5
SHA256 hex / PublicKey (DANE * 1 1):808d68b3fab4884a5f971ace7d10550d7a95a163774f3ec36afffb213fbe4c74
SHA256 hex / Subject Public Key Information (SPKI):808d68b3fab4884a5f971ace7d10550d7a95a163774f3ec36afffb213fbe4c74
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:



7.
OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US
29.06.2004
29.06.2034
expires in 4288 days


7.
OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US
29.06.2004

29.06.2034
expires in 4288 days


KeyalgorithmRSA encryption ( bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:00
Thumbprint:AD7E1C28B064EF8F6003402014C3D0E3370EB58A
SHA256 / Certificate:FGX6IFOXuHb6pvCplY5VkOQPzH+qT7fCyGd1Iftftlg=
SHA256 hex / Cert (DANE * 0 1):1465fa205397b876faa6f0a9958e5590e40fcc7faa4fb7c2c8677521fb5fb658
SHA256 hex / PublicKey (DANE * 1 1):15f14ac45c9c7da233d3479164e8137fe35ee0f38ae858183f08410ea82ac4b4
SHA256 hex / Subject Public Key Information (SPKI):15f14ac45c9c7da233d3479164e8137fe35ee0f38ae858183f08410ea82ac4b4
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:



10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Small Code Update - wait one minute


2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Small Code Update - wait one minute


11. Html-Content - Entries

Summary

No data found or small Code-update

Details

Small Code Update - wait one minute


12. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns1.vhdns.net, ns2.vhdns.net

QNr.DomainTypeNS used
1
net
NS
d.root-servers.net (2001:500:2d::d)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
ns1.vhdns.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns1.footholds.net, ns2.footholds.net, ns3.footholds.net

Answer: ns1.footholds.net
95.142.155.14

Answer: ns2.footholds.net
91.198.165.131

Answer: ns3.footholds.net
195.62.28.240
3
ns2.vhdns.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns1.footholds.net, ns2.footholds.net, ns3.footholds.net

Answer: ns1.footholds.net
95.142.155.14

Answer: ns2.footholds.net
91.198.165.131

Answer: ns3.footholds.net
195.62.28.240
4
ns1.vhdns.net: 188.65.116.165
A
ns1.footholds.net (95.142.155.14)
5
ns1.vhdns.net: No AAAA record found
AAAA
ns1.footholds.net (95.142.155.14)
6
ns2.vhdns.net: 195.62.28.26
A
ns1.footholds.net (95.142.155.14)
7
ns2.vhdns.net: No AAAA record found
AAAA
ns1.footholds.net (95.142.155.14)


13. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
remote.oakwood.surrey.sch.uk
0

no CAA entry found
1
0
oakwood.surrey.sch.uk
0

no CAA entry found
1
0
surrey.sch.uk
0

no CAA entry found
1
0
sch.uk
0

no CAA entry found
1
0
uk
0

no CAA entry found
1
0


14. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
oakwood.surrey.sch.uk
google-site-verification=-aV2ZM9qRIkcEvkFTlCb3S17yfr9dWYRGBUJzpX7fZc
ok
1
0
oakwood.surrey.sch.uk
K3WtPe2nCsuknpRKATzH3vUalErRvdN2yp5wQ4qz7my9cKEajajylPpzlftbOoSM7j2TndY10SHbHP0dKmM+jw==
ok
1
0
oakwood.surrey.sch.uk
MS=ms22829971
ok
1
0
oakwood.surrey.sch.uk
v=spf1 a:mail.oakwood.surrey.sch.uk include:spf.protection.outlook.com -all
ok
1
0
remote.oakwood.surrey.sch.uk

ok
1
0
_acme-challenge.remote.oakwood.surrey.sch.uk

Name Error - The domain name does not exist
1
0
_acme-challenge.remote.oakwood.surrey.sch.uk.oakwood.surrey.sch.uk

Name Error - The domain name does not exist
1
0
_acme-challenge.remote.oakwood.surrey.sch.uk.remote.oakwood.surrey.sch.uk

Name Error - The domain name does not exist
1
0


15. DomainService - Entries (SSHFP Check is new - 2022-09-24, may be incomplete, alpha, some results are required)

No DomainServiceEntries entries found



16. Cipher Suites

No Ciphers found


17. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.



Permalink: https://check-your-website.server-daten.de/?i=b5ef158f-b34c-4153-971d-36340c6781e1


Last Result: https://check-your-website.server-daten.de/?q=remote.oakwood.surrey.sch.uk - 2020-11-02 17:15:52


Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=remote.oakwood.surrey.sch.uk" target="_blank">Check this Site: remote.oakwood.surrey.sch.uk</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro