Check DNS, Urls + Redirects, Certificates and Content of your Website

0 in Queue, 0 of max. 4 Checks (19:16:23)
Why should you only use Prefix - Cookies? |
Hall of Fame - A+ and A

 

Shortcuts: 1. IP-Addresses | 2. DNSSEC | 3. Name Servers | 4. SOA-Entries | 5. Screenshots | 6. Url-Checks | 7. Comments | 8. Connections | 9. Certificates | 10. CT-Logs | 11. Html-Content | 12. Html-Parsing | 13. NameServer-IPAddresses | 14. CAA | 15. TXT | 16. DomainServiceEntries | 17. Cipher Suites | 18. Portchecks |

 

A

 

Top config

 

Checked:
05.01.2023 15:17:59

 

Older results

 

A - 28.11.2022 18:59:33
A - 14.09.2022 14:40:49
A - 05.04.2021 19:58:53
A - 28.01.2021 16:30:22
A - 14.01.2021 00:05:31
A - 15.12.2020 09:48:29
A - 12.12.2020 21:37:39
A - 29.11.2020 06:22:26
A - 29.11.2020 06:13:37
A - 25.11.2020 08:07:42

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
saphira.saffiergroep.nl
CNAME
saffier-social.embracecloud.nl
yes
1
0

CNAME
emumc13web.embracecloud.nl
yes


www.saphira.saffiergroep.nl

Name Error
yes
1
0
saphira.saffiergroep.nl
A
185.159.139.205
Groningen/Netherlands (NL) - Osso B.V.
No Hostname found
no


*.saffiergroep.nl
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


*.saphira.saffiergroep.nl
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






• Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 951, Flags 256






Public Key with Algorithm 8, KeyTag 18733, Flags 256






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.01.2023, 00:00:00 +, Signature-Inception: 01.01.2023, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: nl

nl
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 34112, DigestType 2 and Digest PFtfmzVXRVxQdRqb6evpI4yI4Z9fB/kwl2kXtRuVzSI=






2 RRSIG RR to validate DS RR found






RRSIG-Owner nl., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 18.01.2023, 05:00:00 +, Signature-Inception: 05.01.2023, 04:00:00 +, KeyTag 951, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 951 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 34112, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 52584, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner nl., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 17.01.2023, 23:25:26 +, Signature-Inception: 03.01.2023, 11:39:16 +, KeyTag 34112, Signer-Name: nl






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 34112 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 34112, DigestType 2 and Digest "PFtfmzVXRVxQdRqb6evpI4yI4Z9fB/kwl2kXtRuVzSI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: saffiergroep.nl

saffiergroep.nl
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "p8vsk12rr2i32bd4gk8f9emr31l07frr" between the hashed NSEC3-owner "p8vsk12rr2i32bd4gk8f9emr31l07frr" and the hashed NextOwner "p8vsn3bb9jssis9030rjcojjjq6df30e". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: No Bitmap? Validated: RRSIG-Owner p8vsk12rr2i32bd4gk8f9emr31l07frr.nl., Algorithm: 8, 2 Labels, original TTL: 600 sec, Signature-expiration: 17.01.2023, 12:59:01 +, Signature-Inception: 03.01.2023, 11:39:16 +, KeyTag 52584, Signer-Name: nl






0 DNSKEY RR found









Zone: saphira.saffiergroep.nl

saphira.saffiergroep.nl
0 DS RR in the parent zone found



Zone: www.saphira.saffiergroep.nl

www.saphira.saffiergroep.nl
0 DS RR in the parent zone found



Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






• Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 951, Flags 256






Public Key with Algorithm 8, KeyTag 18733, Flags 256






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.01.2023, 00:00:00 +, Signature-Inception: 01.01.2023, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: nl

nl
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 34112, DigestType 2 and Digest PFtfmzVXRVxQdRqb6evpI4yI4Z9fB/kwl2kXtRuVzSI=






2 RRSIG RR to validate DS RR found






RRSIG-Owner nl., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 18.01.2023, 05:00:00 +, Signature-Inception: 05.01.2023, 04:00:00 +, KeyTag 951, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 951 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 34112, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 52584, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner nl., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 17.01.2023, 23:25:26 +, Signature-Inception: 03.01.2023, 11:39:16 +, KeyTag 34112, Signer-Name: nl






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 34112 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 34112, DigestType 2 and Digest "PFtfmzVXRVxQdRqb6evpI4yI4Z9fB/kwl2kXtRuVzSI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: embracecloud.nl

embracecloud.nl
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "6nt9jspanv0sba2d4m0s06putkt2nekc" between the hashed NSEC3-owner "6nt9jspanv0sba2d4m0s06putkt2nekc" and the hashed NextOwner "6nt9mdmt8nk5f5mu611vq6hu9l1diesd". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: No Bitmap? Validated: RRSIG-Owner 6nt9jspanv0sba2d4m0s06putkt2nekc.nl., Algorithm: 8, 2 Labels, original TTL: 600 sec, Signature-expiration: 17.01.2023, 18:48:27 +, Signature-Inception: 03.01.2023, 11:39:16 +, KeyTag 52584, Signer-Name: nl






0 DNSKEY RR found









Zone: saffier-social.embracecloud.nl

saffier-social.embracecloud.nl
0 DS RR in the parent zone found

 

3. Name Servers

DomainNameserverNS-IP
www.saphira.saffiergroep.nl
•  nsd01.ram.nl

saffiergroep.nl
•  nsd01.ram.nl / nse01
89.221.177.167
Boekel/North Brabant/Netherlands (NL) - Ram Mobile Data		•

•  nsd02.ram.nl / nse02
89.221.178.85
Boekel/North Brabant/Netherlands (NL) - Ram Mobile Data		•
nl
•  ns1.dns.nl / eqx-fr2-ns01-91
•

•  ns3.dns.nl / tld-all-fam1@53024
•

•  ns4.dns.nl / FRA2
•
embracecloud.nl
•  ns1-08.azure-dns.com
40.90.4.8
Ashburn/Virginia/United States (US) - Microsoft Corporation		•

• 
2603:1061:0:700::8
Ashburn/Virginia/United States (US) - Microsoft Corporation		•

•  ns2-08.azure-dns.net
64.4.48.8
Ashburn/Virginia/United States (US) - Microsoft Corporation		•

• 
2620:1ec:8ec:700::8
Redmond/Washington/United States (US) - Microsoft Corporation		•

•  ns3-08.azure-dns.org
13.107.24.8
Ashburn/Virginia/United States (US) - Microsoft Corporation		•

• 
2a01:111:4000:700::8
Dublin/Leinster/Ireland (IE) - Microsoft		•

•  ns4-08.azure-dns.info
13.107.160.8
Emigrant Gap/California/United States (US) - Microsoft Corporation		•

• 
2620:1ec:bda:700::8
Redmond/Washington/United States (US) - Microsoft Corporation		•
nl
•  ns1.dns.nl / eqx-fr2-ns01-91
•

•  ns3.dns.nl / tld-all-fam1@53024
•

•  ns4.dns.nl / FRA2
•

 

4. SOA-Entries


Domain:nl
Zone-Name:nl
Primary:ns1.dns.nl
Mail:hostmaster.domain-registry.nl
Serial:2023010527
Refresh:3600
Retry:600
Expire:2419200
TTL:600
num Entries:3


Domain:saffiergroep.nl
Zone-Name:saffiergroep.nl
Primary:nsd01.ram.nl
Mail:Postmaster.ram.nl
Serial:2023010401
Refresh:10800
Retry:3600
Expire:604800
TTL:3600
num Entries:2


Domain:www.saphira.saffiergroep.nl
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:nl
Zone-Name:nl
Primary:ns1.dns.nl
Mail:hostmaster.domain-registry.nl
Serial:2023010527
Refresh:3600
Retry:600
Expire:2419200
TTL:600
num Entries:3


Domain:embracecloud.nl
Zone-Name:embracecloud.nl
Primary:ns1-08.azure-dns.com
Mail:azuredns-hostmaster.microsoft.com
Serial:1
Refresh:3600
Retry:300
Expire:2419200
TTL:300
num Entries:8


5. Screenshots

Startaddress: https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#, address used: https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#, Screenshot created 2023-01-05 15:19:31 +00:0

 

Mobil (412px x 732px)

 

153 milliseconds

 

Screenshot mobile - https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#
Mobil + Landscape (732px x 412px)

 

208 milliseconds

 

Screenshot mobile landscape - https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#
Screen (1280px x 1680px)

 

443 milliseconds

 

Screenshot Desktop - https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport412732
content Size412732

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://saphira.saffiergroep.nl/
185.159.139.205
302
https://saphira.saffiergroep.nl/

0.070
A
Location: https://saphira.saffiergroep.nl/
Server: Microsoft-IIS/8.5
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-XSS-Protection: 1; mode=block
X-Frame-Options: SameOrigin
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: fullscreen=(self "https://www.youtube.com" "https://player.vimeo.com" "https://www.slideshare.net" "https://web.microsoftstream.com")
Referrer-Policy: no-referrer-when-downgrade
Date: Thu, 05 Jan 2023 14:19:00 GMT
Connection: close
Content-Length: 0

• https://saphira.saffiergroep.nl/
185.159.139.205
302
https://login.windows.net/5bbd4351-eca4-49a1-b7b0-95f39f88a3b6/oauth2/authorize?client_id=b5dd0a05-e8c7-4fbd-a985-47aa66801280&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access&state=OpenIdConnect.AuthenticationProperties%3DHHNiDMlwI3IjZFasoz_Uc9kEKWA9hOs_NwBK9JZzBOIReNa5eemejL9oIok4ITyQY2aQ6bd_hIUxbDltAi7nbA3fboEUsSuJoXGkv5PUExo&response_mode=form_post&nonce=638085251419505627.MmU5Yzk5MWItNGFhZC00ZTlkLWI5ZWYtYTgyMjBlNjYzNWQwOGVkZTIxYjEtNjViYy00MjllLWI3ZmQtNTQ4N2FjYmNmMjRi&redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl%2F&post_logout_redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl&domain_hint=Saffiergroep.nl&x-client-SKU=ID_NET461&x-client-ver=5.6.0.0

2.413
A
Cache-Control: private
Location: https://login.windows.net/5bbd4351-eca4-49a1-b7b0-95f39f88a3b6/oauth2/authorize?client_id=b5dd0a05-e8c7-4fbd-a985-47aa66801280&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access&state=OpenIdConnect.AuthenticationProperties%3DHHNiDMlwI3IjZFasoz_Uc9kEKWA9hOs_NwBK9JZzBOIReNa5eemejL9oIok4ITyQY2aQ6bd_hIUxbDltAi7nbA3fboEUsSuJoXGkv5PUExo&response_mode=form_post&nonce=638085251419505627.MmU5Yzk5MWItNGFhZC00ZTlkLWI5ZWYtYTgyMjBlNjYzNWQwOGVkZTIxYjEtNjViYy00MjllLWI3ZmQtNTQ4N2FjYmNmMjRi&redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl%2F&post_logout_redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl&domain_hint=Saffiergroep.nl&x-client-SKU=ID_NET461&x-client-ver=5.6.0.0
Server: Microsoft-IIS/8.5
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-XSS-Protection: 1; mode=block
X-Frame-Options: SameOrigin
Strict-Transport-Security: max-age=31536000
Set-Cookie: OpenIdConnect.nonce.e5uOYaQeyTXP4MW7DNujE%2FqJ%2Bh7O9%2FSj4tUvCNFOrlk%3D=VTU3a294MFFxNXFUQ29haTBHcmZVTWt1Rm1XaS1DQlRhRklxWDhlN2NGQ2JjNktJUjEwaWJHMDFOU2lQb3ZxN1JUalV1ZHRqdWJMVi1HM3kxY2VBTXdlYWhnZ243dTVoRWcyRllUNWYyYWtwbks4QzFUSFNzN283MEFZWHBPODg2a29xNUhRV1Z3OWdTeENYSnpfNGJoMTZfdXUwdGlqM2dtMGUwZFc2dlZkSHllWlQtTGd3WmZmX0czVktVUXRkd2t1OFM4OGFYX2p4ZUQ2TkdRV0R2dFFzYTYtNEUyWElPcGFUWHdudDVJQQ%3D%3D; path=/; expires=Thu, 05-Jan-2023 17:19:01 GMT; secure; HttpOnly; SameSite=None
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: fullscreen=(self "https://www.youtube.com" "https://player.vimeo.com" "https://www.slideshare.net" "https://web.microsoftstream.com")
Referrer-Policy: no-referrer-when-downgrade
Date: Thu, 05 Jan 2023 14:19:01 GMT
Connection: close
Content-Length: 0

• https://login.windows.net/5bbd4351-eca4-49a1-b7b0-95f39f88a3b6/oauth2/authorize?client_id=b5dd0a05-e8c7-4fbd-a985-47aa66801280&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access&state=OpenIdConnect.AuthenticationProperties%3DHHNiDMlwI3IjZFasoz_Uc9kEKWA9hOs_NwBK9JZzBOIReNa5eemejL9oIok4ITyQY2aQ6bd_hIUxbDltAi7nbA3fboEUsSuJoXGkv5PUExo&response_mode=form_post&nonce=638085251419505627.MmU5Yzk5MWItNGFhZC00ZTlkLWI5ZWYtYTgyMjBlNjYzNWQwOGVkZTIxYjEtNjViYy00MjllLWI3ZmQtNTQ4N2FjYmNmMjRi&redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl%2F&post_logout_redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl&domain_hint=Saffiergroep.nl&x-client-SKU=ID_NET461&x-client-ver=5.6.0.0

302
https://login.microsoftonline.com/5bbd4351-eca4-49a1-b7b0-95f39f88a3b6/oauth2/authorize?client_id=b5dd0a05-e8c7-4fbd-a985-47aa66801280&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access&state=OpenIdConnect.AuthenticationProperties%3DHHNiDMlwI3IjZFasoz_Uc9kEKWA9hOs_NwBK9JZzBOIReNa5eemejL9oIok4ITyQY2aQ6bd_hIUxbDltAi7nbA3fboEUsSuJoXGkv5PUExo&response_mode=form_post&nonce=638085251419505627.MmU5Yzk5MWItNGFhZC00ZTlkLWI5ZWYtYTgyMjBlNjYzNWQwOGVkZTIxYjEtNjViYy00MjllLWI3ZmQtNTQ4N2FjYmNmMjRi&redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl%2F&post_logout_redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl&domain_hint=Saffiergroep.nl&x-client-SKU=ID_NET461&x-client-ver=5.6.0.0
Html is minified: 100.70 %
3.593
A
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Location: https://login.microsoftonline.com/5bbd4351-eca4-49a1-b7b0-95f39f88a3b6/oauth2/authorize?client_id=b5dd0a05-e8c7-4fbd-a985-47aa66801280&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access&state=OpenIdConnect.AuthenticationProperties%3DHHNiDMlwI3IjZFasoz_Uc9kEKWA9hOs_NwBK9JZzBOIReNa5eemejL9oIok4ITyQY2aQ6bd_hIUxbDltAi7nbA3fboEUsSuJoXGkv5PUExo&response_mode=form_post&nonce=638085251419505627.MmU5Yzk5MWItNGFhZC00ZTlkLWI5ZWYtYTgyMjBlNjYzNWQwOGVkZTIxYjEtNjViYy00MjllLWI3ZmQtNTQ4N2FjYmNmMjRi&redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl%2F&post_logout_redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl&domain_hint=Saffiergroep.nl&x-client-SKU=ID_NET461&x-client-ver=5.6.0.0
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
x-ms-request-id: d3127745-34e6-4d38-9f88-b82842491101
x-ms-ests-server: 2.1.14357.7 - WEULR2 ProdSlices
X-XSS-Protection: 0
Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly,stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Thu, 05 Jan 2023 14:19:08 GMT
Connection: close
Content-Length: 612

• https://login.microsoftonline.com/5bbd4351-eca4-49a1-b7b0-95f39f88a3b6/oauth2/authorize?client_id=b5dd0a05-e8c7-4fbd-a985-47aa66801280&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access&state=OpenIdConnect.AuthenticationProperties%3DHHNiDMlwI3IjZFasoz_Uc9kEKWA9hOs_NwBK9JZzBOIReNa5eemejL9oIok4ITyQY2aQ6bd_hIUxbDltAi7nbA3fboEUsSuJoXGkv5PUExo&response_mode=form_post&nonce=638085251419505627.MmU5Yzk5MWItNGFhZC00ZTlkLWI5ZWYtYTgyMjBlNjYzNWQwOGVkZTIxYjEtNjViYy00MjllLWI3ZmQtNTQ4N2FjYmNmMjRi&redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl%2F&post_logout_redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl&domain_hint=Saffiergroep.nl&x-client-SKU=ID_NET461&x-client-ver=5.6.0.0

302
https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#
Html is minified: 100.53 %
3.543
A
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Location: https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
x-ms-request-id: 46fed49d-f9a4-4560-ba0b-348dcedc9601
x-ms-ests-server: 2.1.14357.7 - WEULR1 ProdSlices
x-ms-clitelem: 1,0,0,,
X-XSS-Protection: 0
Set-Cookie: buid=0.ASAAUUO9W6TsoUm3sJXzn4ijtgUK3bXH6L1PqYVHqmaAEoAgAAA.AQABAAEAAAD--DLA3VO7QrddgJg7WevrRap9bKUFBQKaqRlu3IXuBJx2YbWRrM1MSPkQ7RLbRfWepoahze7VfZ9c1pLBelmONbRtphpDwdu_GGNs-PrCOjf70lE2QWnnZCUPn4sot4YgAA; expires=Sat, 04-Feb-2023 14:19:17 GMT; path=/; secure; HttpOnly; SameSite=None,fpc=Ar_kmagGBwlNqtFLBoHDUHdfp6h0AQAAAGXTSNsOAAAA; expires=Sat, 04-Feb-2023 14:19:17 GMT; path=/; secure; HttpOnly; SameSite=None,esctx=PAQABAAEAAAD--DLA3VO7QrddgJg7WevrWOxPJenGJmEpqiaZpy48LmHY30DxAfwDPnSGlhua_X8hXiGJU6As4ZJN9Zv536lDQFnMtCOeNt07pwrZrPviDBYO5aiOpB2wA93nm05jIh2sHj_WhDQYkBBFkrKIQLdRki7jaWioAo5mc6moWRhNoPlN88R9y5K_au1vFDvKt5IgAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=None,x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly,stsservicecookie=estsfd; path=/; secure; samesite=none; httponly
Date: Thu, 05 Jan 2023 14:19:17 GMT
Connection: close
Content-Length: 921

• https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#
No Compression used - 9794 / 32769 - 29.89 % possible
Inline-JavaScript (∑/total): 6/19160 Inline-CSS (∑/total): 2/5016		200

Html is minified: 557.58 %
Other inline scripts (∑/total): 6/19160		1.136
A
small visible content (num chars: 347)
JavaScript required JavaScript is required. This web browser does not support JavaScript or JavaScript in this web browser is not enabled. To find out if your web browser supports JavaScript or to enable JavaScript, see web browser help. eCumulus Federation Sign in User Account Password Keep me signed in Sign in © 2018 Microsoft Hulp nodig?
Cache-Control: no-cache,no-store
Pragma: no-cache
Content-Length: 32769
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-HTTPAPI/2.0
X-Frame-Options: DENY
Date: Thu, 05 Jan 2023 14:19:21 GMT
Strict-Transport-Security: max-age=31536000

• http://saphira.saffiergroep.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
185.159.139.205
302
https://saphira.saffiergroep.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.070
A
Visible Content:
Location: https://saphira.saffiergroep.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: Microsoft-IIS/8.5
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-XSS-Protection: 1; mode=block
X-Frame-Options: SameOrigin
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: fullscreen=(self "https://www.youtube.com" "https://player.vimeo.com" "https://www.slideshare.net" "https://web.microsoftstream.com")
Referrer-Policy: no-referrer-when-downgrade
Date: Thu, 05 Jan 2023 14:19:04 GMT
Connection: close
Content-Length: 0

• https://saphira.saffiergroep.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/2		404

Html is minified: 209.24 %
Other inline scripts (∑/total): 0/0		2.447
A
Not Found
Visible Content: Server Error 404 - File or directory not found. The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.
Cache-Control: private
Content-Type: text/html
Server: Microsoft-IIS/8.5
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-XSS-Protection: 1; mode=block
X-Frame-Options: SameOrigin
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: upgrade-insecure-requests
Permissions-Policy: fullscreen=(self "https://www.youtube.com" "https://player.vimeo.com" "https://www.slideshare.net" "https://web.microsoftstream.com")
Referrer-Policy: no-referrer-when-downgrade
Date: Thu, 05 Jan 2023 14:19:13 GMT
Connection: close
Content-Length: 1245

• https://185.159.139.205/
185.159.139.205
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		404

Html is minified: 103.96 %
Other inline scripts (∑/total): 0/0		0.970
N
Not Found
Certificate error: RemoteCertificateNameMismatch
small visible content (num chars: 162)
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"> Not Found Not Found HTTP Error 404. The requested resource is not found.
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Thu, 05 Jan 2023 14:19:06 GMT
Connection: close
Content-Length: 315

 

7. Comments


1. General Results, most used to calculate the result

Aname "saphira.saffiergroep.nl" is subdomain, public suffix is ".nl", top-level-domain is ".nl", top-level-domain-type is "country-code", Country is Netherlands (the), tld-manager is "SIDN (Stichting Internet Domeinregistratie Nederland)", num .nl-domains preloaded: 4513 (complete: 210599)
AGood: All ip addresses are public addresses
AGood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
Ahttps://login.windows.net/5bbd4351-eca4-49a1-b7b0-95f39f88a3b6/oauth2/authorize?client_id=b5dd0a05-e8c7-4fbd-a985-47aa66801280&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access&state=OpenIdConnect.AuthenticationProperties%3DHHNiDMlwI3IjZFasoz_Uc9kEKWA9hOs_NwBK9JZzBOIReNa5eemejL9oIok4ITyQY2aQ6bd_hIUxbDltAi7nbA3fboEUsSuJoXGkv5PUExo&response_mode=form_post&nonce=638085251419505627.MmU5Yzk5MWItNGFhZC00ZTlkLWI5ZWYtYTgyMjBlNjYzNWQwOGVkZTIxYjEtNjViYy00MjllLWI3ZmQtNTQ4N2FjYmNmMjRi&redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl%2F&post_logout_redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl&domain_hint=Saffiergroep.nl&x-client-SKU=ID_NET461&x-client-ver=5.6.0.0
302
https://login.microsoftonline.com/5bbd4351-eca4-49a1-b7b0-95f39f88a3b6/oauth2/authorize?client_id=b5dd0a05-e8c7-4fbd-a985-47aa66801280&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access&state=OpenIdConnect.AuthenticationProperties%3DHHNiDMlwI3IjZFasoz_Uc9kEKWA9hOs_NwBK9JZzBOIReNa5eemejL9oIok4ITyQY2aQ6bd_hIUxbDltAi7nbA3fboEUsSuJoXGkv5PUExo&response_mode=form_post&nonce=638085251419505627.MmU5Yzk5MWItNGFhZC00ZTlkLWI5ZWYtYTgyMjBlNjYzNWQwOGVkZTIxYjEtNjViYy00MjllLWI3ZmQtNTQ4N2FjYmNmMjRi&redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl%2F&post_logout_redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl&domain_hint=Saffiergroep.nl&x-client-SKU=ID_NET461&x-client-ver=5.6.0.0
Correct redirect https to https
Ahttps://login.microsoftonline.com/5bbd4351-eca4-49a1-b7b0-95f39f88a3b6/oauth2/authorize?client_id=b5dd0a05-e8c7-4fbd-a985-47aa66801280&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access&state=OpenIdConnect.AuthenticationProperties%3DHHNiDMlwI3IjZFasoz_Uc9kEKWA9hOs_NwBK9JZzBOIReNa5eemejL9oIok4ITyQY2aQ6bd_hIUxbDltAi7nbA3fboEUsSuJoXGkv5PUExo&response_mode=form_post&nonce=638085251419505627.MmU5Yzk5MWItNGFhZC00ZTlkLWI5ZWYtYTgyMjBlNjYzNWQwOGVkZTIxYjEtNjViYy00MjllLWI3ZmQtNTQ4N2FjYmNmMjRi&redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl%2F&post_logout_redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl&domain_hint=Saffiergroep.nl&x-client-SKU=ID_NET461&x-client-ver=5.6.0.0
302
https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#
Correct redirect https to https
Ahttps://saphira.saffiergroep.nl/ 185.159.139.205
302
https://login.windows.net/5bbd4351-eca4-49a1-b7b0-95f39f88a3b6/oauth2/authorize?client_id=b5dd0a05-e8c7-4fbd-a985-47aa66801280&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access&state=OpenIdConnect.AuthenticationProperties%3DHHNiDMlwI3IjZFasoz_Uc9kEKWA9hOs_NwBK9JZzBOIReNa5eemejL9oIok4ITyQY2aQ6bd_hIUxbDltAi7nbA3fboEUsSuJoXGkv5PUExo&response_mode=form_post&nonce=638085251419505627.MmU5Yzk5MWItNGFhZC00ZTlkLWI5ZWYtYTgyMjBlNjYzNWQwOGVkZTIxYjEtNjViYy00MjllLWI3ZmQtNTQ4N2FjYmNmMjRi&redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl%2F&post_logout_redirect_uri=https%3A%2F%2Fsaphira.saffiergroep.nl&domain_hint=Saffiergroep.nl&x-client-SKU=ID_NET461&x-client-ver=5.6.0.0
Correct redirect https to https
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: non-www is preferred
AGood: No cookie sent via http.
AGood: every cookie sent via https is marked as secure
AGood: Every cookie has a SameSite Attribute with a correct value Strict/Lax/None
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):2 complete Content-Type - header (3 urls)
https://saphira.saffiergroep.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Url with incomplete Content-Type - header - missing charset
Ahttp://saphira.saffiergroep.nl/ 185.159.139.205
302
https://saphira.saffiergroep.nl/
Correct redirect http - https with the same domain name
Mhttps://185.159.139.205/ 185.159.139.205
404

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://185.159.139.205/ 185.159.139.205
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.saphira.saffiergroep.nl

2. Header-Checks

Asts.ecumulus.nl
X-Frame-Options
Ok: Header without syntax errors found: DENY
B

Info: Header is deprecated. May not longer work in modern browsers. DENY. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
Fsts.ecumulus.nl
Content-Security-Policy
Critical: Missing Header:
Fsts.ecumulus.nl
X-Content-Type-Options
Critical: Missing Header:
Fsts.ecumulus.nl
Referrer-Policy
Critical: Missing Header:
Fsts.ecumulus.nl
Permissions-Policy
Critical: Missing Header:

3. DNS- and NameServer - Checks

AInfo:: 2 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 2 Queries complete, 2 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
AGood: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.nsd01.ram.nl (89.221.177.167), nsd02.ram.nl (89.221.178.85)
AGood (1 - 3.0):: An average of 1.0 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 2 different Name Servers found: nsd01.ram.nl, nsd02.ram.nl, 2 Name Servers included in Delegation: nsd01.ram.nl, nsd02.ram.nl, 2 Name Servers included in 1 Zone definitions: nsd01.ram.nl, nsd02.ram.nl, 1 Name Servers listed in SOA.Primary: nsd01.ram.nl.
AGood: Only one SOA.Primary Name Server found.: nsd01.ram.nl.
AGood: SOA.Primary Name Server included in the delegation set.: nsd01.ram.nl.
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AInfo: Ipv4-Subnet-list: 2 Name Servers, 1 different subnets (first Byte): 89., 1 different subnets (first two Bytes): 89.221., 2 different subnets (first three Bytes): 89.221.177., 89.221.178.
AGood: Name Server IPv4-addresses from different subnet found:
AGood: Nameserver supports TCP connections: 2 good Nameserver
AGood: Nameserver supports Echo Capitalization: 2 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 2 good Nameserver
Nameserver doesn't pass all EDNS-Checks: nsd01.ram.nl: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#
200

Warning: https result with status 200 and size greater then 1024 Bytes without Compression found. Add Compression support (gzip, deflate, br - these are checked) so the html content is compressed.
https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
Warning: CSS / JavaScript found without Compression. Compress these ressources, gzip, deflate, br are checked. 1 external CSS / JavaScript files without GZip found - 0 with GZip, 1 complete
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 1 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 1 complete.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://saphira.saffiergroep.nl/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
2.447 seconds
Warning: 404 needs more then one second
AInfo: Different Server-Headers found
ADuration: 99336 milliseconds, 99.336 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
sts.ecumulus.nl
sts.ecumulus.nl
443
ok
Tls12
DiffieHellman
2048
Aes256
256
Sha384
error checking OCSP stapling
ok
sts.ecumulus.nl
sts.ecumulus.nl
443
ok
Tls12

DiffieHellman
2048
Aes256
256
Sha384
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
 Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2


login.windows.net
login.windows.net
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

login.windows.net
login.windows.net
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=login.windows.net, O=Microsoft Corporation, L=Redmond, C=US, ST=Washington


2CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US


saphira.saffiergroep.nl
185.159.139.205
443
ok
Tls12
DiffieHellman
2048
Aes128
128
Sha256
not supported
ok

saphira.saffiergroep.nl
185.159.139.205
443
ok
Tls12

DiffieHellman
2048
Aes128
128
Sha256
not supported
ok
no http/2 via ALPN 
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
SNI required 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=saphira.saffiergroep.nl


2CN=R3, O=Let's Encrypt, C=US


login.microsoftonline.com
login.microsoftonline.com
443
ok
Tls12
ECDH Ephermal
384
Aes256
256
Sha384
supported
ok

login.microsoftonline.com
login.microsoftonline.com
443
ok
Tls12

ECDH Ephermal
384
Aes256
256
Sha384
supported
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=stamp2.login.microsoftonline.com, O=Microsoft Corporation, L=Redmond, C=US, ST=Washington


2CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US


saphira.saffiergroep.nl
saphira.saffiergroep.nl
443
ok
Tls12
DiffieHellman
2048
Aes128
128
Sha256
not supported
ok

saphira.saffiergroep.nl
saphira.saffiergroep.nl
443
ok
Tls12

DiffieHellman
2048
Aes128
128
Sha256
not supported
ok
no http/2 via ALPN 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
 Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=saphira.saffiergroep.nl


2CN=R3, O=Let's Encrypt, C=US


185.159.139.205
185.159.139.205
443
name does not match
Tls12
DiffieHellman
2048
Aes128
128
Sha256
error checking OCSP stapling
ok

185.159.139.205
185.159.139.205
443
name does not match
Tls12

DiffieHellman
2048
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI 		Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

 

9. Certificates

1.
1.
CN=saphira.saffiergroep.nl
16.12.2022
16.03.2023
1223 days expired		saphira.saffiergroep.nl - 1 entry
1.
1.
CN=saphira.saffiergroep.nl
16.12.2022

16.03.2023
1223 days expired


saphira.saffiergroep.nl - 1 entry

KeyalgorithmRSA encryption ( bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0499F4EFD2DD329836E1E2EFABB7244E991F
Thumbprint:BC1C04149430BB56ED611BF82B5198EAD9C4AD5C
SHA256 / Certificate:fw9S80vU5tOm+Ghdr0Or7c1LpchjbE0aHloqM1F9/ZI=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):97cda21e30fb80c94b992f6203fb40382f79c8951ac8b7e37ca702ed5a260bbf
SHA256 hex / Subject Public Key Information (SPKI):97cda21e30fb80c94b992f6203fb40382f79c8951ac8b7e37ca702ed5a260bbf (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://r3.o.lencr.org
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020
15.09.2025
309 days expired

2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020

15.09.2025
309 days expired




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:00912B084ACF0C18A753F6D62E25A75F5A
Thumbprint:A053375BFE84E8B748782C7CEE15827A6AF5A405
SHA256 / Certificate:Z63RFmsCCuYbj1/JaBPATCqliZYHloZVcqPH5zdhPf0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SHA256 hex / Subject Public Key Information (SPKI):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3240 days

3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3240 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
CN=*.kennemerwonen.nl
06.01.2022
07.02.2023
1260 days expired		*.kennemerwonen.nl, kennemerwonen.nl - 2 entries
2.
1.
CN=*.kennemerwonen.nl
06.01.2022

07.02.2023
1260 days expired


*.kennemerwonen.nl, kennemerwonen.nl - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0CE6FA7D4F91104B18975DAA81AFDBD1
Thumbprint:AC60550685C53412A7B861000ABA3D3185794FE2
SHA256 / Certificate:QkL1/cb0W5E67TReMxOo7BENhtGetRI8kiHZhi1Ssv0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):2f306158200a11a7fceb658660bd89c0494776c52f9ecb7e61cd243e75e7622f
SHA256 hex / Subject Public Key Information (SPKI):2f306158200a11a7fceb658660bd89c0494776c52f9ecb7e61cd243e75e7622f (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://statusd.digitalcertvalidation.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=Trust Provider B.V. TLS RSA CA G1, OU=Domain Validated SSL, O=Trust Provider B.V., C=NL
02.11.2017
02.11.2027
expires in 469 days

2.
CN=Trust Provider B.V. TLS RSA CA G1, OU=Domain Validated SSL, O=Trust Provider B.V., C=NL
02.11.2017

02.11.2027
expires in 469 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0EC411EDF002F73036C4E5D42F3E34F2
Thumbprint:30B35A6F8631A1E1E00E4CE44783469938A31F13
SHA256 / Certificate:AJhxw6TGBzEeWukvAQlfm/dhALh5SrCppSEOZ5TIYHw=
SHA256 hex / Cert (DANE * 0 1):009871c3a4c607311e5ae92f01095f9bf76100b8794ab0a9a5210e6794c8607c
SHA256 hex / PublicKey (DANE * 1 1):0d9d82348708a998f76ab3a0e1da98da793144f253472a4b71330dfc56c664b3
SHA256 hex / Subject Public Key Information (SPKI):0d9d82348708a998f76ab3a0e1da98da793144f253472a4b71330dfc56c664b3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Server Authentication (1.3.6.1.5.5.7.3.1), Client Authentication (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013
15.01.2038
expires in 4196 days

3.
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013

15.01.2038
expires in 4196 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:033AF1E6A711A9A0BB2864B11D09FAE5
Thumbprint:DF3C24F9BFD666761B268073FE06D1CC8D4F82A4
SHA256 / Certificate:yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18=
SHA256 hex / Cert (DANE * 0 1):cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA256 hex / PublicKey (DANE * 1 1):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SHA256 hex / Subject Public Key Information (SPKI):8bb593a93be1d0e8a822bb887c547890c3e706aad2dab76254f97fb36b82fc26
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




3.
1.
CN=login.windows.net, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
23.11.2022
24.11.2023
970 days expired		login.windows.net, *.accesscontrol.windows-ppe.net, *.accesscontrol.windows.net, *.windows-ppe.net, device.login.microsoftonline.com, device.login.windows-ppe.net, iotauth.microsoft.com, login-us.microsoftonline.com, login.microsoft-ppe.com, login.microsoft.com, login.microsoftonline-p-int.com, login.microsoftonline-p.com, login.microsoftonline.com, logincert.microsoftonline-int.com, logincert.microsoftonline.com, logincert.windows-ppe.net, mtlsauth.microsoft.com, sts.windows.net - 18 entries
3.
1.
CN=login.windows.net, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
23.11.2022

24.11.2023
970 days expired


login.windows.net, *.accesscontrol.windows-ppe.net, *.accesscontrol.windows.net, *.windows-ppe.net, device.login.microsoftonline.com, device.login.windows-ppe.net, iotauth.microsoft.com, login-us.microsoftonline.com, login.microsoft-ppe.com, login.microsoft.com, login.microsoftonline-p-int.com, login.microsoftonline-p.com, login.microsoftonline.com, logincert.microsoftonline-int.com, logincert.microsoftonline.com, logincert.windows-ppe.net, mtlsauth.microsoft.com, sts.windows.net - 18 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0125D973B703EB02E5B72B69B5901EFC
Thumbprint:CF1AFA76D8356D5E2A2E98127C9F609347481E69
SHA256 / Certificate:n+n6SIq8ufv3j5IO86IkGvPL2grXDms02js6OI17KRQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):959597b0ad3c8f49f215d43a507d5c6335b9db92088c519e95a685e698f8c519
SHA256 hex / Subject Public Key Information (SPKI):959597b0ad3c8f49f215d43a507d5c6335b9db92088c519e95a685e698f8c519 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US
23.09.2020
23.09.2030
expires in 1525 days

2.
CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US
23.09.2020

23.09.2030
expires in 1525 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:02742EAA17CA8E21C717BB1FFCFD0CA0
Thumbprint:626D44E704D1CEABE3BF0D53397464AC8080142C
SHA256 / Certificate:wa13eHltILymXIiaJlUCEVZSi7Yv9fpD4bjlqD49Lqo=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e6426f344330d0a8eb080bbb7976391d976fc824b5dc16c0d15246d5148ff75c
SHA256 hex / Subject Public Key Information (SPKI):e6426f344330d0a8eb080bbb7976391d976fc824b5dc16c0d15246d5148ff75c
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006
10.11.2031
expires in 1938 days

3.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006

10.11.2031
expires in 1938 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:083BE056904246B1A1756AC95991C74A
Thumbprint:A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
SHA256 / Certificate:Q0ig6URMeMsmXgWNXolEtNhPlmK9Jtslf4k0pEPHAWE=
SHA256 hex / Cert (DANE * 0 1):4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
SHA256 hex / PublicKey (DANE * 1 1):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SHA256 hex / Subject Public Key Information (SPKI):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




4.
1.
CN=stamp2.login.microsoftonline.com, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
23.11.2022
24.11.2023
970 days expired		stamp2.login.microsoftonline.com, login.microsoftonline-int.com, login.microsoftonline-p.com, login.microsoftonline.com, login2.microsoftonline-int.com, login2.microsoftonline.com, loginex.microsoftonline-int.com, loginex.microsoftonline.com, stamp2.login.microsoftonline-int.com - 9 entries
4.
1.
CN=stamp2.login.microsoftonline.com, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
23.11.2022

24.11.2023
970 days expired


stamp2.login.microsoftonline.com, login.microsoftonline-int.com, login.microsoftonline-p.com, login.microsoftonline.com, login2.microsoftonline-int.com, login2.microsoftonline.com, loginex.microsoftonline-int.com, loginex.microsoftonline.com, stamp2.login.microsoftonline-int.com - 9 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:04FE9F8EDFE9C1A52AD1145EE56DE759
Thumbprint:AB12E76E6B7A919F25515365A2C3EACC2D96314C
SHA256 / Certificate:iFHXjFVRR6XCWistWZBPBPrkDO71mRGf5WT23tbHUeQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):6c86668f9e5acb59bf364645a5d6ce06422cfcb0206c5abfcf130cde7c66a928
SHA256 hex / Subject Public Key Information (SPKI):6c86668f9e5acb59bf364645a5d6ce06422cfcb0206c5abfcf130cde7c66a928 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US
23.09.2020
23.09.2030
expires in 1525 days

2.
CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US
23.09.2020

23.09.2030
expires in 1525 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:02742EAA17CA8E21C717BB1FFCFD0CA0
Thumbprint:626D44E704D1CEABE3BF0D53397464AC8080142C
SHA256 / Certificate:wa13eHltILymXIiaJlUCEVZSi7Yv9fpD4bjlqD49Lqo=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e6426f344330d0a8eb080bbb7976391d976fc824b5dc16c0d15246d5148ff75c
SHA256 hex / Subject Public Key Information (SPKI):e6426f344330d0a8eb080bbb7976391d976fc824b5dc16c0d15246d5148ff75c
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006
10.11.2031
expires in 1938 days

3.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006

10.11.2031
expires in 1938 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:083BE056904246B1A1756AC95991C74A
Thumbprint:A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
SHA256 / Certificate:Q0ig6URMeMsmXgWNXolEtNhPlmK9Jtslf4k0pEPHAWE=
SHA256 hex / Cert (DANE * 0 1):4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
SHA256 hex / PublicKey (DANE * 1 1):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SHA256 hex / Subject Public Key Information (SPKI):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




5.
1.
CN=*.ecumulus.nl
05.05.2022
06.06.2023
1141 days expired		*.ecumulus.nl, ecumulus.nl - 2 entries
5.
1.
CN=*.ecumulus.nl
05.05.2022

06.06.2023
1141 days expired


*.ecumulus.nl, ecumulus.nl - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:43C96F263738DE9A6414B7CE03BF77F3
Thumbprint:5C9C1C4346A5E463DE24A9C385B94D9E709D10E6
SHA256 / Certificate:nKgM+8o9WPGQ8wdkSgJLp+NDMOYsaoakbAzNRziraF8=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):7221a4ea37da8180806a458d8fb4a98a3810d39d90aaf1173b1aebeaa2e2ef5a
SHA256 hex / Subject Public Key Information (SPKI):7221a4ea37da8180806a458d8fb4a98a3810d39d90aaf1173b1aebeaa2e2ef5a (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.sectigo.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=*.ecumulus.nl
05.05.2022
06.06.2023
1141 days expired		*.ecumulus.nl, ecumulus.nl - 2 entries

2.
CN=*.ecumulus.nl
05.05.2022

06.06.2023
1141 days expired


*.ecumulus.nl, ecumulus.nl - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:43C96F263738DE9A6414B7CE03BF77F3
Thumbprint:5C9C1C4346A5E463DE24A9C385B94D9E709D10E6
SHA256 / Certificate:nKgM+8o9WPGQ8wdkSgJLp+NDMOYsaoakbAzNRziraF8=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):7221a4ea37da8180806a458d8fb4a98a3810d39d90aaf1173b1aebeaa2e2ef5a
SHA256 hex / Subject Public Key Information (SPKI):7221a4ea37da8180806a458d8fb4a98a3810d39d90aaf1173b1aebeaa2e2ef5a (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.sectigo.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018
01.01.2031
expires in 1625 days

3.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018

01.01.2031
expires in 1625 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:7D5B5126B476BA11DB74160BBC530DA7
Thumbprint:33E4E80807204C2B6182A3A14B591ACD25B5F0DB
SHA256 / Certificate:f6T/aOwEqZ11KNUIX5SQf00d0cU4G6zcgy7VyWAhRnY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SHA256 hex / Subject Public Key Information (SPKI):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.usertrust.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




4.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018
01.01.2031
expires in 1625 days

4.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018

01.01.2031
expires in 1625 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:7D5B5126B476BA11DB74160BBC530DA7
Thumbprint:33E4E80807204C2B6182A3A14B591ACD25B5F0DB
SHA256 / Certificate:f6T/aOwEqZ11KNUIX5SQf00d0cU4G6zcgy7VyWAhRnY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SHA256 hex / Subject Public Key Information (SPKI):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.usertrust.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




5.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
01.02.2010
19.01.2038
expires in 4200 days

5.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
01.02.2010

19.01.2038
expires in 4200 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:01FD6D30FCA3CA51A81BBC640E35032D
Thumbprint:2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E
SHA256 / Certificate:55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I=
SHA256 hex / Cert (DANE * 0 1):e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
SHA256 hex / PublicKey (DANE * 1 1):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SHA256 hex / Subject Public Key Information (SPKI):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





6.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
12.03.2019
01.01.2029
expires in 895 days

6.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
12.03.2019

01.01.2029
expires in 895 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:3972443AF922B751D7D36C10DD313595
Thumbprint:D89E3BD43D5D909B47A18977AA9D5CE36CEE184C
SHA256 / Certificate:aLnHYSGaWx8BMXhEdGZdthu9sQngDwXKn3QkTuX19Ss=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SHA256 hex / Subject Public Key Information (SPKI):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.comodoca.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




7.
CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB
01.01.2004
01.01.2029
expires in 895 days

7.
CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB
01.01.2004

01.01.2029
expires in 895 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:01
Thumbprint:D1EB23A46D17D68FD92564C2F1F1601764D8E349
SHA256 / Certificate:16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SHA256 hex / Subject Public Key Information (SPKI):bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=R3, O=Let's Encrypt, C=US
0
0
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
4555127149
leaf cert		CN=R3, O=Let's Encrypt, C=US
2022-12-15 23:00:58
2023-03-15 23:00:57
saphira.saffiergroep.nl - 1 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Small Code Update - wait one minute

 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#
a

1

0


0
0
0


form

2
65,538 Bytes
0
2
0
0
0
0


link
stylesheet
1
31,224 Bytes
0
1
0
0
0
0


meta
other
7

0


0
0
0


style

1
116,699 Bytes
0
1
0
0
0
0

https://185.159.139.205/
185.159.139.205		meta
other
1

0


0
0
0

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsg∑Status
https://sts.ecumulus.nl/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0#

a

https://www.ram-it.nl/servicedesk/


1
ok















form
post
/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff




32769 Bytes








form
post
https://sts.ecumulus.nl:443/adfs/ls/?client-request-id=b8e1ba70-8b46-43d5-ad94-7f877057138f&username=&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAAhdI_aNRQAAbwS6-92oq2qIPjgR1ESO4ll5dLCh3u2vuTtpfr9f41Wc6X3Evv5XJ5Icl511scFUQsIg4FFxGHgg5OpS7OHaSDLuIiOIggiDjUQbEdnVy-6Td88H2z05CTOMCBG3Ge4xcXTNjpAAQgi2Urw4q22WGRIkNWzCAkSTLgBRkEl2bn_cNPB4V775dfPLp9x29dfrDHzNWQbRMcbAcU-5zn7jPJbhT54WIqFSK_SwLEhf-K1AHDHDPMF4bZnwiltAxkKEBe5BUIoCRkuHK_AfVxD5ZbaqQVC11jGQCj7vbWWyo0Wnqk17d3yk7O1Rx9rLWqw0qx2TPq6kh38pHmNIm-A0DZcd1Tnzb61UirV0VNKDh6X-uXnU3yYWKukh1EXeEsaEDG-MfEjE2DftunYbQXf8hUfOypnWXqediKuDOGvYhYKCLU2wioj4OI4HCpVNLIStkdqmnVMQoopON2w1J6-bVWVulWwrY2zK0pq8Y4V1E3sYYgxn3srCtUpT1Rre9UdQFVJbPT7qqNkbniRlmS8cxs2jZpvhHWBqt0q9i7BTca-RF9FV-AptkR05BnsYVEVlQQz5oZE7AKtNOKLcsobUpH8Wun7TzSSfoBtYmLk7iPiJuktu0SD7eRZeEwPJ5kvk7OnpuaT1yNJWPXr5xMMk-nTsd98u5P4dmvm_nD8-L9tx8fM0dTqZJTwiDYMkJtpA0EN1dISTolxSFR_eIgqDRVidSCMCs4TXkJLPK7CWY3kThKzKgrbS1fFyX-e4K5Ox07nPnvKd5ciJ1cPP758vnvz6-_lf4C0
200

1
ok
text/html; charset=utf-8
missing X-Content-Type-Options nosniff




32769 Bytes








link
stylesheet
/adfs/portal/css/style.css?id=A7618A91AF9831C8CDF5863B4179236EC332904F166B2A3D6BF41BE9F87FCC37
200

1
ok
text/css
missing X-Content-Type-Options nosniff




No Cache-Control - header
Compression required: 31224 Bytes






local SRI possible, possible hash-values:

 

sha256-p2GKka+YMcjN9YY7QXkjbsMykE8Wayo9a/Qb6fh/zDc=
sha384-qzr/2TtKJQ0dz73SSWFDvWPVAr3u1cfP0Lwv8fc3ey8onJOCVf0IvwQ7WOPrZ53B
sha512-2XswZAwki9s9q6yj83RuOm9V8DY+pgrmpDxhWuXtMQ4+Fv3RqChAnFOf6vyy9d7U3sdalyly0fpn0Z9jpD7jkg==

 

<link rel="stylesheet" href="/adfs/portal/css/style.css?id=A7618A91AF9831C8CDF5863B4179236EC332904F166B2A3D6BF41BE9F87FCC37" crossorigin="anonymous" integrity="sha256-p2GKka+YMcjN9YY7QXkjbsMykE8Wayo9a/Qb6fh/zDc=" />



meta
cache-control
no-cache,no-store


1
ok















meta
content-type
text/html;charset=UTF-8


1
ok















meta
expires
-1


1
ok















meta
pragma
no-cache


1
ok















meta
X-UA-Compatible
IE=edge


1
ok















meta
mswebdialog-title
Connecting to eCumulus Federation


1
ok















meta
viewport
width=device-width, initial-scale=1.0, user-scalable=1


1
ok















style

/adfs/portal/illustration/illustration.png?id=183128A3C941EDE3D9199FA37D6AA90E0A7DFE101B37D10B4FEDA0CF35E11AFD
200

1
ok
image/png
missing X-Content-Type-Options nosniff




No Cache-Control header
No Compression - 116699 Bytes







https://185.159.139.205/
185.159.139.205
meta
Content-Type
text/html; charset=us-ascii


1
ok














 

12. Html-Parsing via https://validator.w3.org/nu/

Small Code update, wait one minute

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: nsd01.ram.nl, nsd02.ram.nl

 

QNr.DomainTypeNS used
1
nl
NS
h.root-servers.net (2001:500:1::53)

Answer: ns1.dns.nl, ns3.dns.nl, ns4.dns.nl
2
nsd01.ram.nl: 89.221.177.167
NS
ns1.dns.nl (2001:678:2c:0:194:0:28:53)

Answer: nsd02.ram.nl
89.221.178.85

Answer: nsd03.ram.nl
89.221.189.24

Answer: nsd04.ram.nl
92.66.109.125

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
saffier-social.embracecloud.nl



1
0
saphira.saffiergroep.nl



1
0
embracecloud.nl
0

no CAA entry found
1
0
saffiergroep.nl
0

no CAA entry found
1
0
nl
0

no CAA entry found
1
0

0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
saffiergroep.nl
v=spf1 a mx ip4:92.42.235.150 ip4:178.250.145.87 ip4:45.152.249.3 include:_spf.zorgmail.nl include:spf.topdesk.net include:spf.inconto.com include:spf.protection.outlook.com ~all
ok
1
0
saphira.saffiergroep.nl


1
0
_acme-challenge.saphira.saffiergroep.nl

Name Error - The domain name does not exist
1
0
_acme-challenge.saffier-social.embracecloud.nl

Name Error - The domain name does not exist
1
0
_acme-challenge.saphira.saffiergroep.nl.saffiergroep.nl

Name Error - The domain name does not exist
1
0
_acme-challenge.saphira.saffiergroep.nl.saphira.saffiergroep.nl

Name Error - The domain name does not exist
1
0
_acme-challenge.saffier-social.embracecloud.nl.saffier-social.embracecloud.nl

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

No DomainServiceEntries entries found

 

 

17. Cipher Suites

No results

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=b54d2a63-3d36-4c51-b735-19c1b8ab3a3f

 

Last Result: https://check-your-website.server-daten.de/?q=saphira.saffiergroep.nl - 2023-01-05 15:17:59

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=saphira.saffiergroep.nl" target="_blank">Check this Site: saphira.saffiergroep.nl</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=saphira.saffiergroep.nl

 

 

Jürgen Auer • Friedenstr. 37 • 10249 Berlin • +49(0)30 420 200 60 • info@sql-und-xml.de • USt-IdNr.: DE221734518

 

Errors, ideas, questions? Use the Contact form • A project using Server-Daten - Web Database solutions