Check DNS, Urls + Redirects, Certificates and Content of your Website




1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
supportmetrics.apple.com
CNAME
supportmetrics.v.aaplimg.com
yes
1
0

A
17.188.22.157
Cupertino/California/United States (US) - Apple Inc.
Hostname: cds-euw1.apple.com
yes



A
17.188.22.165
Cupertino/California/United States (US) - Apple Inc.
Hostname: cds-euw1.apple.com
yes


www.supportmetrics.apple.com

Name Error
yes
1
0
*.apple.com
A

yes



AAAA

yes



CNAME

yes


*.supportmetrics.apple.com
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes



2. DNSSEC

Zone (*)DNSSEC - Informations

Zone: (root)
(root)
1 DS RR published



DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=



Status: Valid because published



3 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 18733, Flags 256



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 20826, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 10.10.2022, 00:00:00 +, Signature-Inception: 19.09.2022, 00:00:00 +, KeyTag 20326, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: com
com
1 DS RR in the parent zone found



DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest 4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=



2 RRSIG RR to validate DS RR found



RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 05.10.2022, 16:00:00 +, Signature-Inception: 22.09.2022, 15:00:00 +, KeyTag 20826, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20826 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 30909, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 32298, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 07.10.2022, 18:24:21 +, Signature-Inception: 22.09.2022, 18:19:21 +, KeyTag 30909, Signer-Name: com



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest "4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: apple.com
apple.com
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "s0nu66fpjnr91aioa0a6649sii2jvq1a" between the hashed NSEC3-owner "s0nu5uhi013ivs6ttusm4fc3oqjb2ejf" and the hashed NextOwner "s0nu90lgv459klhvqs37tuga7qjq5lpl". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner s0nu5uhi013ivs6ttusm4fc3oqjb2ejf.com., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 27.09.2022, 05:44:24 +, Signature-Inception: 20.09.2022, 04:34:24 +, KeyTag 32298, Signer-Name: com



DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q2d6ni4i7eqh8na30ns61o48ul8g5". So that domain name is the Closest Encloser of "apple.com". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 28.09.2022, 04:24:28 +, Signature-Inception: 21.09.2022, 03:14:28 +, KeyTag 32298, Signer-Name: com



0 DNSKEY RR found




Zone: supportmetrics.apple.com
supportmetrics.apple.com
0 DS RR in the parent zone found

Zone: www.supportmetrics.apple.com
www.supportmetrics.apple.com
0 DS RR in the parent zone found

Zone: (root)
(root)
1 DS RR published



DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=



Status: Valid because published



3 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 18733, Flags 256



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 20826, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 10.10.2022, 00:00:00 +, Signature-Inception: 19.09.2022, 00:00:00 +, KeyTag 20326, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: com
com
1 DS RR in the parent zone found



DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest 4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=



2 RRSIG RR to validate DS RR found



RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 05.10.2022, 16:00:00 +, Signature-Inception: 22.09.2022, 15:00:00 +, KeyTag 20826, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20826 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 30909, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 32298, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 07.10.2022, 18:24:21 +, Signature-Inception: 22.09.2022, 18:19:21 +, KeyTag 30909, Signer-Name: com



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest "4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: aaplimg.com
aaplimg.com
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "97krhl0ghpbe59nhn7iroduofuinsoir" between the hashed NSEC3-owner "97kr25qj2b06hbnktn7irartjvcpm9ks" and the hashed NextOwner "97ks56pk6omiapr48hd76s42t2ot9eda". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner 97kr25qj2b06hbnktn7irartjvcpm9ks.com., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 29.09.2022, 04:36:14 +, Signature-Inception: 22.09.2022, 03:26:14 +, KeyTag 32298, Signer-Name: com



DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q2d6ni4i7eqh8na30ns61o48ul8g5". So that domain name is the Closest Encloser of "aaplimg.com". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 28.09.2022, 04:24:28 +, Signature-Inception: 21.09.2022, 03:14:28 +, KeyTag 32298, Signer-Name: com



0 DNSKEY RR found




Zone: v.aaplimg.com
v.aaplimg.com
0 DS RR in the parent zone found



0 DNSKEY RR found




Zone: supportmetrics.v.aaplimg.com
supportmetrics.v.aaplimg.com
0 DS RR in the parent zone found



0 DNSKEY RR found




3. Name Servers

DomainNameserverNS-IP
www.supportmetrics.apple.com
  usmsc2-extxfr-001.dns.apple.com

apple.com
  a.ns.apple.com / deber5-dns-001
17.253.200.1
Cupertino/California/United States (US) - Apple Inc.


 
2620:149:ae0::53
New York/United States (US) - Apple Inc.


  b.ns.apple.com / deber5-dns-002
17.253.207.1
Cupertino/California/United States (US) - Apple Inc.


 
2620:149:ae7::53
New York/United States (US) - Apple Inc.


  c.ns.apple.com / 2.ber.pch
204.19.119.1
Montreal/Quebec/Canada (CA) - WoodyNet, Inc.


 
2620:171:800:714::1
Montreal/Quebec/Canada (CA) - WoodyNet, Inc.


  d.ns.apple.com / 1.ber.pch
204.26.57.1
Montreal/Quebec/Canada (CA) - WoodyNet, Inc.


 
2620:171:801:714::1
Montreal/Quebec/Canada (CA) - WoodyNet, Inc.


  usmsc2-extxfr-001.dns.apple.com

com
  a.gtld-servers.net / nnn1-par6


  b.gtld-servers.net / nnn1-eltxl2


  c.gtld-servers.net / nnn1-par6


  d.gtld-servers.net / nnn1-par6


  e.gtld-servers.net / nnn1-par6


  f.gtld-servers.net / nnn1-fra5


  g.gtld-servers.net / nnn1-fra5


  h.gtld-servers.net / nnn1-fra5


  i.gtld-servers.net / nnn1-fra5


  j.gtld-servers.net / nnn1-lon5


  k.gtld-servers.net / nnn1-lon5


  l.gtld-servers.net / nnn1-lon5


  m.gtld-servers.net / nnn1-lon5


supportmetrics.v.aaplimg.com
  ns3.g.aaplimg.com / deber5-gslb-001.ts.apple.com
17.253.201.8
Cupertino/California/United States (US) - Apple Inc.


  ns4.g.aaplimg.com / deber5-gslb-002.ts.apple.com
17.253.206.8
Cupertino/California/United States (US) - Apple Inc.


  v1.gslb.aaplimg.com / deber5-gslb-001.ts.apple.com
17.253.201.9
Cupertino/California/United States (US) - Apple Inc.


  v2.gslb.aaplimg.com / deber5-gslb-002.ts.apple.com
17.253.206.9
Cupertino/California/United States (US) - Apple Inc.

v.aaplimg.com
  ns3.g.aaplimg.com / deber5-gslb-001.ts.apple.com
17.253.201.8
Cupertino/California/United States (US) - Apple Inc.


  ns4.g.aaplimg.com / deber5-gslb-002.ts.apple.com
17.253.206.8
Cupertino/California/United States (US) - Apple Inc.


  v1.gslb.aaplimg.com / deber5-gslb-001.ts.apple.com
17.253.201.9
Cupertino/California/United States (US) - Apple Inc.


  v2.gslb.aaplimg.com / deber5-gslb-002.ts.apple.com
17.253.206.9
Cupertino/California/United States (US) - Apple Inc.

aaplimg.com
  a.ns.apple.com / deber5-dns-001
17.253.200.1
Cupertino/California/United States (US) - Apple Inc.


 
2620:149:ae0::53
New York/United States (US) - Apple Inc.


  b.ns.apple.com / deber5-dns-002
17.253.207.1
Cupertino/California/United States (US) - Apple Inc.


 
2620:149:ae7::53
New York/United States (US) - Apple Inc.


  c.ns.apple.com / 2.ber.pch
204.19.119.1
Montreal/Quebec/Canada (CA) - WoodyNet, Inc.


 
2620:171:800:714::1
Montreal/Quebec/Canada (CA) - WoodyNet, Inc.


  d.ns.apple.com / 1.ber.pch
204.26.57.1
Montreal/Quebec/Canada (CA) - WoodyNet, Inc.


 
2620:171:801:714::1
Montreal/Quebec/Canada (CA) - WoodyNet, Inc.


  usmsc2-extxfr-001.dns.apple.com

com
  a.gtld-servers.net / nnn1-par6


  b.gtld-servers.net / nnn1-eltxl2


  c.gtld-servers.net / nnn1-par6


  d.gtld-servers.net / nnn1-par6


  e.gtld-servers.net / nnn1-par6


  f.gtld-servers.net / nnn1-fra5


  g.gtld-servers.net / nnn1-fra5


  h.gtld-servers.net / nnn1-fra5


  i.gtld-servers.net / nnn1-fra5


  j.gtld-servers.net / nnn1-lon5


  k.gtld-servers.net / nnn1-lon5


  l.gtld-servers.net / nnn1-lon5


  m.gtld-servers.net / nnn1-lon5


4. SOA-Entries


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1663889852
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:10


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1663889862
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:3


Domain:apple.com
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:apple.com
Zone-Name:apple.com
Primary:usmsc2-extxfr-001.dns.apple.com
Mail:hostmaster.apple.com
Serial:2010127342
Refresh:900
Retry:900
Expire:2016000
TTL:14400
num Entries:8


Domain:www.supportmetrics.apple.com
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1



Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1663889862
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:2


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1663889882
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:11


Domain:aaplimg.com
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:aaplimg.com
Zone-Name:aaplimg.com
Primary:usmsc2-extxfr-001.dns.apple.com
Mail:hostmaster.apple.com
Serial:12613
Refresh:720
Retry:480
Expire:3628800
TTL:600
num Entries:8


Domain:v.aaplimg.com
Zone-Name:v.aaplimg.com
Primary:v1.gslb.aaplimg.com
Mail:hostmaster.apple.com
Serial:1663862526
Refresh:1800
Retry:300
Expire:60480
TTL:300
num Entries:4


Domain:supportmetrics.v.aaplimg.com
Zone-Name:supportmetrics.v.aaplimg.com
Primary:v1.gslb.aaplimg.com
Mail:hostmaster.apple.com
Serial:1663862526
Refresh:1800
Retry:300
Expire:60480
TTL:300
num Entries:4


5. Screenshots

Startaddress: https://supportmetrics.apple.com/, address used: https://supportmetrics.apple.com/, Screenshot created 2022-09-23 01:42:46 +00:0

Mobil (412px x 732px)

151 milliseconds

Screenshot mobile - https://supportmetrics.apple.com/
Mobil + Landscape (732px x 412px)

176 milliseconds

Screenshot mobile landscape - https://supportmetrics.apple.com/
Screen (1280px x 1680px)

340 milliseconds

Screenshot Desktop - https://supportmetrics.apple.com/

Mobile- and other Chrome-Checks

widthheight
visual Viewport412732
content Size412732

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://supportmetrics.apple.com/
17.188.22.157
301
https://supportmetrics.apple.com/
Html is minified: 109.46 %
0.090
A
Server: Apple
Date: Thu, 22 Sep 2022 23:39:28 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://supportmetrics.apple.com/

• http://supportmetrics.apple.com/
17.188.22.165
301
https://supportmetrics.apple.com/
Html is minified: 109.46 %
0.083
A
Server: Apple
Date: Thu, 22 Sep 2022 23:39:28 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://supportmetrics.apple.com/

• https://supportmetrics.apple.com/
17.188.22.157
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 110.61 %
3.670
M
Not Found
small visible content (num chars: 19)
404 Not Found Apple
Server: Apple
Date: Thu, 22 Sep 2022 23:39:28 GMT
Content-Type: text/html
Content-Length: 146
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

• https://supportmetrics.apple.com/
17.188.22.165
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 110.61 %
3.490
M
Not Found
small visible content (num chars: 19)
404 Not Found Apple
Server: Apple
Date: Thu, 22 Sep 2022 23:39:32 GMT
Content-Type: text/html
Content-Length: 146
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

• http://supportmetrics.apple.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
17.188.22.157
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
301
https://supportmetrics.apple.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.46 %
0.083
A
Visible Content: 301 Moved Permanently Apple
Server: Apple
Date: Thu, 22 Sep 2022 23:39:36 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://supportmetrics.apple.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

• http://supportmetrics.apple.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
17.188.22.165
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
301
https://supportmetrics.apple.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 109.46 %
0.084
A
Visible Content: 301 Moved Permanently Apple
Server: Apple
Date: Thu, 22 Sep 2022 23:39:37 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://supportmetrics.apple.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

• https://supportmetrics.apple.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 110.61 %
3.554
A
Not Found
Visible Content: 404 Not Found Apple
Server: Apple
Date: Thu, 22 Sep 2022 23:39:45 GMT
Content-Type: text/html
Content-Length: 146
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

• https://17.188.22.157/
17.188.22.157
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 110.61 %
3.523
N
Not Found
Certificate error: RemoteCertificateNameMismatch
small visible content (num chars: 19)
404 Not Found Apple
Server: Apple
Date: Thu, 22 Sep 2022 23:39:37 GMT
Content-Type: text/html
Content-Length: 146
Connection: close

• https://17.188.22.165/
17.188.22.165
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 110.61 %
3.500
N
Not Found
Certificate error: RemoteCertificateNameMismatch
small visible content (num chars: 19)
404 Not Found Apple
Server: Apple
Date: Thu, 22 Sep 2022 23:39:41 GMT
Content-Type: text/html
Content-Length: 146
Connection: close

7. Comments


1. General Results, most used to calculate the result

Aname "supportmetrics.apple.com" is subdomain, public suffix is ".com", top-level-domain is ".com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services", num .com-domains preloaded: 75886 (complete: 199710)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: supportmetrics.apple.com has 2 different ip addresses (authoritative).
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: supportmetrics.apple.com has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):0 complete Content-Type - header (5 urls)
https://supportmetrics.apple.com/ 17.188.22.157


Url with incomplete Content-Type - header - missing charset
https://supportmetrics.apple.com/ 17.188.22.165


Url with incomplete Content-Type - header - missing charset
https://supportmetrics.apple.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Url with incomplete Content-Type - header - missing charset
https://17.188.22.157/ 17.188.22.157


Url with incomplete Content-Type - header - missing charset
https://17.188.22.165/ 17.188.22.165


Url with incomplete Content-Type - header - missing charset
Ahttp://supportmetrics.apple.com/ 17.188.22.157
301
https://supportmetrics.apple.com/
Correct redirect http - https with the same domain name
Ahttp://supportmetrics.apple.com/ 17.188.22.165
301
https://supportmetrics.apple.com/
Correct redirect http - https with the same domain name
CError - no version with Http-Status 200
HFatal error: No https - result with http-status 200, no encryption
Mhttps://supportmetrics.apple.com/ 17.188.22.157
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://supportmetrics.apple.com/ 17.188.22.165
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://17.188.22.157/ 17.188.22.157
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://17.188.22.165/ 17.188.22.165
404

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://17.188.22.157/ 17.188.22.157
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://17.188.22.165/ 17.188.22.165
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Osupportmetrics.apple.com / 17.188.22.157 / 443


Old connection: Cipher Suites without Forward Secrecy (FS) found. Remove all of these Cipher Suites, use only Cipher Suites with Forward Secrecy: Starting with ECDHE- or DHE - the last "E" says: "ephemeral". Or use Tls.1.3, then all Cipher Suites use FS. 10 Cipher Suites without Forward Secrecy found
Osupportmetrics.apple.com / 17.188.22.165 / 443


Old connection: Cipher Suites without Forward Secrecy (FS) found. Remove all of these Cipher Suites, use only Cipher Suites with Forward Secrecy: Starting with ECDHE- or DHE - the last "E" says: "ephemeral". Or use Tls.1.3, then all Cipher Suites use FS. 10 Cipher Suites without Forward Secrecy found
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain supportmetrics.apple.com, 2 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain supportmetrics.apple.com, 2 ip addresses.

2. DNS- and NameServer - Checks

AInfo:: 2 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 4 Name Servers.
AInfo:: 2 Queries complete, 2 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
AGood: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.a.ns.apple.com (17.253.200.1, 2620:149:ae0::53), b.ns.apple.com (17.253.207.1, 2620:149:ae7::53), c.ns.apple.com (204.19.119.1, 2620:171:800:714::1), d.ns.apple.com (204.26.57.1, 2620:171:801:714::1)
AGood (1 - 3.0):: An average of 0.5 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 5 different Name Servers found: a.ns.apple.com, b.ns.apple.com, c.ns.apple.com, d.ns.apple.com, usmsc2-extxfr-001.dns.apple.com, 4 Name Servers included in Delegation: a.ns.apple.com, b.ns.apple.com, c.ns.apple.com, d.ns.apple.com, 4 Name Servers included in 2 Zone definitions: a.ns.apple.com, b.ns.apple.com, c.ns.apple.com, d.ns.apple.com, 1 Name Servers listed in SOA.Primary: usmsc2-extxfr-001.dns.apple.com.
AGood: Only one SOA.Primary Name Server found.: usmsc2-extxfr-001.dns.apple.com.
Error: SOA.Primary Name Server not included in the delegation set.: usmsc2-extxfr-001.dns.apple.com.
AGood: All Name Server Domain Names have a Public Suffix.
Error: Name Server Domain Names with Public Suffix and without ip address found.: 1 Name Servers without ipv4 and ipv6: 1

AInfo: Ipv4-Subnet-list: 4 Name Servers, 2 different subnets (first Byte): 17., 204., 3 different subnets (first two Bytes): 17.253., 204.19., 204.26., 4 different subnets (first three Bytes): 17.253.200., 17.253.207., 204.19.119., 204.26.57.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 4 Name Servers with IPv6, 1 different subnets (first block): 2620:, 2 different subnets (first two blocks): 2620:0149:, 2620:0171:, 4 different subnets (first three blocks): 2620:0149:0ae0:, 2620:0149:0ae7:, 2620:0171:0800:, 2620:0171:0801:, 4 different subnets (first four blocks): 2620:0149:0ae0:0000:, 2620:0149:0ae7:0000:, 2620:0171:0800:0714:, 2620:0171:0801:0714:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 8 good Nameserver
AGood: Nameserver supports Echo Capitalization: 8 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 8 good Nameserver
Nameserver doesn't pass all EDNS-Checks: usmsc2-extxfr-001.dns.apple.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: usmsc2-extxfr-001.dns.apple.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: usmsc2-extxfr-001.dns.apple.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
AGood: CAA entries found, creating certificate is limited: entrust.net is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: pki.apple.com is allowed to create certificates

3. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://supportmetrics.apple.com/ 17.188.22.157
404
3.670 seconds
Warning: 404 needs more then one second
https://supportmetrics.apple.com/ 17.188.22.165
404
3.490 seconds
Warning: 404 needs more then one second
https://supportmetrics.apple.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
3.554 seconds
Warning: 404 needs more then one second
https://17.188.22.157/ 17.188.22.157
404
3.523 seconds
Warning: 404 needs more then one second
https://17.188.22.165/ 17.188.22.165
404
3.500 seconds
Warning: 404 needs more then one second
ADuration: 305834 milliseconds, 305.834 seconds


8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
supportmetrics.apple.com
17.188.22.157
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
supportmetrics.apple.com
17.188.22.157
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates
1CN=supportmetrics.apple.com, OU=management:idms.group.1082889, O=Apple Inc., L=Cupertino, C=US, ST=California

2CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US

3CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US


supportmetrics.apple.com
17.188.22.165
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

supportmetrics.apple.com
17.188.22.165
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates
1CN=supportmetrics.apple.com, OU=management:idms.group.1082889, O=Apple Inc., L=Cupertino, C=US, ST=California

2CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US

3CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US


supportmetrics.apple.com
supportmetrics.apple.com
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

supportmetrics.apple.com
supportmetrics.apple.com
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates
1CN=supportmetrics.apple.com, OU=management:idms.group.1082889, O=Apple Inc., L=Cupertino, C=US, ST=California

2CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US

3CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US


17.188.22.157
17.188.22.157
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

17.188.22.157
17.188.22.157
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates
1CN=apple-shield.apple.com, OU=management:idms.group.1256247, O=Apple Inc., C=US, ST=California

2CN=Apple Public Server RSA CA 12 - G1, O=Apple Inc., C=US, ST=California

3CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, C=GB, ST=Greater Manchester


17.188.22.165
17.188.22.165
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

17.188.22.165
17.188.22.165
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates
1CN=apple-shield.apple.com, OU=management:idms.group.1256247, O=Apple Inc., C=US, ST=California

2CN=Apple Public Server RSA CA 12 - G1, O=Apple Inc., C=US, ST=California

3CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, C=GB, ST=Greater Manchester


9. Certificates

1.
1.
CN=supportmetrics.apple.com, OU=management:idms.group.1082889, O=Apple Inc., L=Cupertino, S=California, C=US, SERIALNUMBER=C0806592, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization
31.08.2021
30.09.2022
6 days expired
supportmetrics-euw1-prod.apple.com, supportmetrics-use1-prod.apple.com, supportmetrics.apple.com, supportmetrics.v.aaplimg.com, supportmetrics-apse1-prod.apple.com, supportmetrics-usw2-prod.apple.com - 6 entries
1.
1.
CN=supportmetrics.apple.com, OU=management:idms.group.1082889, O=Apple Inc., L=Cupertino, S=California, C=US, SERIALNUMBER=C0806592, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization
31.08.2021

30.09.2022
6 days expired
supportmetrics-euw1-prod.apple.com, supportmetrics-use1-prod.apple.com, supportmetrics.apple.com, supportmetrics.v.aaplimg.com, supportmetrics-apse1-prod.apple.com, supportmetrics-usw2-prod.apple.com - 6 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:69AFD85AB4B8CEAF20827D3BFFC52145
Thumbprint:ADA37743BF0684B10C018785B3915358543EA139
SHA256 / Certificate:4EJIvH0nqmD86yC8hiZ5G+h53PHqafaoYxCXTnrA12g=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):1c76483dfafb243ae4fbbaad382ae0073857a66f7b4f8bd161d78d5c84ec08a3
SHA256 hex / Subject Public Key Information (SPKI):1c76483dfafb243ae4fbbaad382ae0073857a66f7b4f8bd161d78d5c84ec08a3 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.apple.com/ocsp03-apevsrsa2g101
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)


2.
CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US
29.04.2020
11.04.2030
expires in 2744 days


2.
CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US
29.04.2020

11.04.2030
expires in 2744 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:07177911005D2267F68892F68F8B5058
Thumbprint:8BA88D2C0F20439FB7D00F3910159023CFE91DC8
SHA256 / Certificate:1u8+Cevg2TcOUfXAmlMrOscNPOgiJT+fyEwo6b+lUNU=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e1930104a956ca1a5db0aa8a9db5c492ea380a74b1c3a6fbb2f95c2882567c40
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)


3.
CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006
10.11.2031
expires in 3322 days


3.
CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006

10.11.2031
expires in 3322 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:02AC5C266A0B409B8F0B79F2AE462577
Thumbprint:5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25
SHA256 / Certificate:dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8=
SHA256 hex / Cert (DANE * 0 1):7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf
SHA256 hex / PublicKey (DANE * 1 1):5a889647220e54d6bd8a16817224520bb5c78e58984bd570506388b9de0f075f
SHA256 hex / Subject Public Key Information (SPKI):5a889647220e54d6bd8a16817224520bb5c78e58984bd570506388b9de0f075f
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:


2.
1.
C=US, S=California, O=Apple Inc., OU=management:idms.group.1256247, CN=apple-shield.apple.com
16.02.2022
18.03.2023
expires in 163 days
apple-shield.apple.com - 1 entry
2.
1.
C=US, S=California, O=Apple Inc., OU=management:idms.group.1256247, CN=apple-shield.apple.com
16.02.2022

18.03.2023
expires in 163 days
apple-shield.apple.com - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:1CC7454A3B2BB70EDA57909D1C10AFF8
Thumbprint:2F22F334BDCE429605B21284437F86288CE3960A
SHA256 / Certificate:iSZFlXuBsNMy7vJkLDCsEDbxuXa6KDybZmJ2KbzNCWY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):77af03a331e9a6ba8e4e035869083e1a4e0da4a0e6d6a0d4daff50bcdfbc2e20
SHA256 hex / Subject Public Key Information (SPKI):77af03a331e9a6ba8e4e035869083e1a4e0da4a0e6d6a0d4daff50bcdfbc2e20 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.apple.com/ocsp03-apsrsa12g101
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)


2.
C=US, S=California, O=Apple Inc., CN=Apple Public Server RSA CA 12 - G1
19.06.2019
07.12.2028
expires in 2254 days


2.
C=US, S=California, O=Apple Inc., CN=Apple Public Server RSA CA 12 - G1
19.06.2019

07.12.2028
expires in 2254 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0AE48F23013064419259E1C29AE98D18
Thumbprint:0040A5E5DA9C1808F8F18CDAF1FC20BA1564F6AA
SHA256 / Certificate:C0Bc/ppr6wmP+5aRIcX2cQ8/f6nqEBpkGPevIB09OTg=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):d420ba48be508c451412be49895e19c3c431892906566a760912789a6d4884a5
SHA256 hex / Subject Public Key Information (SPKI):d420ba48be508c451412be49895e19c3c431892906566a760912789a6d4884a5
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.comodoca.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)


3.
CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB
01.01.2004
01.01.2029
expires in 2279 days


3.
CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB
01.01.2004

01.01.2029
expires in 2279 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:01
Thumbprint:D1EB23A46D17D68FD92564C2F1F1601764D8E349
SHA256 / Certificate:16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SHA256 hex / Subject Public Key Information (SPKI):bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:



10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US
0
0
2
CN=Apple Public EV Server RSA CA 1 - G1, O=Apple Inc., C=US
0
1
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
4205077184
precert
CN=Apple Public EV Server RSA CA 1 - G1, O=Apple Inc., C=US
2022-09-21 10:52:58
2023-10-21 10:52:57
supportmetrics.apple.com, supportmetrics.v.aaplimg.com, supportmetrics-apse1-prod.apple.com, supportmetrics-euw1-prod.apple.com, supportmetrics-use1-prod.apple.com, supportmetrics-usw2-prod.apple.com - 6 entries


2867993092
precert
CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US
2021-08-31 17:43:33
2022-09-30 17:43:32
supportmetrics.apple.com, supportmetrics.v.aaplimg.com, supportmetrics-apse1-prod.apple.com, supportmetrics-euw1-prod.apple.com, supportmetrics-use1-prod.apple.com, supportmetrics-usw2-prod.apple.com - 6 entries


2491699868
precert
CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US
2021-04-28 21:50:56
2022-05-28 21:50:55
supportmetrics.apple.com, supportmetrics-mdn.apple.com, supportmetrics-prn.apple.com - 3 entries



2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuerlast 7 daysactivenum Certs
CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US
0
0
2
CN=Apple Public EV Server RSA CA 1 - G1, O=Apple Inc., C=US
0
1
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
7588004800
precert
CN=Apple Public EV Server RSA CA 1 - G1, O=Apple Inc., C=US
2022-09-21 08:52:58
2023-10-21 08:52:57
supportmetrics.apple.com, supportmetrics.v.aaplimg.com, supportmetrics-apse1-prod.apple.com, supportmetrics-euw1-prod.apple.com, supportmetrics-use1-prod.apple.com, supportmetrics-usw2-prod.apple.com
6 entries


5139734036
precert
CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US
2021-08-31 15:43:33
2022-09-30 15:43:32
supportmetrics.apple.com, supportmetrics.v.aaplimg.com, supportmetrics-apse1-prod.apple.com, supportmetrics-euw1-prod.apple.com, supportmetrics-use1-prod.apple.com, supportmetrics-usw2-prod.apple.com
6 entries


4444779856
precert
CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US
2021-04-28 19:50:56
2022-05-28 19:50:55
supportmetrics.apple.com, supportmetrics-mdn.apple.com, supportmetrics-prn.apple.com
3 entries



11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404


12. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: a.ns.apple.com, b.ns.apple.com, c.ns.apple.com, d.ns.apple.com

QNr.DomainTypeNS used
1
com
NS
a.root-servers.net (2001:503:ba3e::2:30)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
a.ns.apple.com: 17.253.200.1, 2620:149:ae0::53
NS
b.gtld-servers.net (2001:503:231d::2:30)

Answer: b.ns.apple.com
17.253.207.1, 2620:149:ae7::53

Answer: c.ns.apple.com
204.19.119.1, 2620:171:800:714::1

Answer: d.ns.apple.com
204.26.57.1, 2620:171:801:714::1


13. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
supportmetrics.v.aaplimg.com
0

no CAA entry found
1
0
supportmetrics.apple.com



1
0
v.aaplimg.com
0

no CAA entry found
1
0
aaplimg.com
5
iodef
mailto:contact_pki@apple.com
1
0

5
issue
pki.apple.com
1
0
apple.com
5
issue
entrust.net
1
0

5
iodef
mailto:contact_pki@apple.com
1
0

5
issue
pki.apple.com
1
0
com
0

no CAA entry found
1
0

0

no CAA entry found
1
0


14. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
apple.com

ok
1
0
supportmetrics.apple.com


1
0
_acme-challenge.supportmetrics.apple.com

Name Error - The domain name does not exist
1
0
_acme-challenge.supportmetrics.v.aaplimg.com

missing entry or wrong length
1
0
_acme-challenge.supportmetrics.apple.com.apple.com
v=spf1 redirect=_spf.apple.com
perhaps wrong
1
0
_acme-challenge.supportmetrics.apple.com.supportmetrics.apple.com

Name Error - The domain name does not exist
1
0
_acme-challenge.supportmetrics.v.aaplimg.com.supportmetrics.v.aaplimg.com

perhaps wrong
1
0


15. DomainService - Entries (SSHFP Check is new - 2022-09-24, may be incomplete, alpha, some results are required)

No DomainServiceEntries entries found



16. Cipher Suites

DomainIPPortCipher (OpenSsl / IANA)
supportmetrics.apple.com
17.188.22.157
443
ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS
16 Ciphers, 75.55 sec
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDH
RSA
AESGCM(256)
AEAD



ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDH
RSA
AESGCM(128)
AEAD



ECDHE-RSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x28
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
ECDH
RSA
AES(256)
SHA384



AES256-GCM-SHA384
(Weak)
TLSv1.2
0x00,0x9D
No FS

TLS_RSA_WITH_AES_256_GCM_SHA384
RSA
RSA
AESGCM(256)
AEAD



AES256-SHA256
(Weak)
TLSv1.2
0x00,0x3D
No FS

TLS_RSA_WITH_AES_256_CBC_SHA256
RSA
RSA
AES(256)
SHA256



AES256-CCM8
(Weak)
TLSv1.2
0xC0,0xA1
No FS

TLS_RSA_WITH_AES_256_CCM_8
RSA
RSA
AESCCM8(256)
AEAD



AES256-CCM
(Weak)
TLSv1.2
0xC0,0x9D
No FS

TLS_RSA_WITH_AES_256_CCM
RSA
RSA
AESCCM(256)
AEAD



ECDHE-RSA-AES128-SHA256
(Weak)
TLSv1.2
0xC0,0x27
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
ECDH
RSA
AES(128)
SHA256



AES128-GCM-SHA256
(Weak)
TLSv1.2
0x00,0x9C
No FS

TLS_RSA_WITH_AES_128_GCM_SHA256
RSA
RSA
AESGCM(128)
AEAD



AES128-SHA256
(Weak)
TLSv1.2
0x00,0x3C
No FS

TLS_RSA_WITH_AES_128_CBC_SHA256
RSA
RSA
AES(128)
SHA256



AES128-CCM8
(Weak)
TLSv1.2
0xC0,0xA0
No FS

TLS_RSA_WITH_AES_128_CCM_8
RSA
RSA
AESCCM8(128)
AEAD



AES128-CCM
(Weak)
TLSv1.2
0xC0,0x9C
No FS

TLS_RSA_WITH_AES_128_CCM
RSA
RSA
AESCCM(128)
AEAD



ECDHE-RSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x14
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
ECDH
RSA
AES(256)
SHA1



ECDHE-RSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x13
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
ECDH
RSA
AES(128)
SHA1



AES256-SHA
(Weak)
SSLv3
0x00,0x35
No FS

TLS_RSA_WITH_AES_256_CBC_SHA
RSA
RSA
AES(256)
SHA1



AES128-SHA
(Weak)
SSLv3
0x00,0x2F
No FS

TLS_RSA_WITH_AES_128_CBC_SHA
RSA
RSA
AES(128)
SHA1

17.188.22.165
443
ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS
16 Ciphers, 75.15 sec
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDH
RSA
AESGCM(256)
AEAD



ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDH
RSA
AESGCM(128)
AEAD



ECDHE-RSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x28
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
ECDH
RSA
AES(256)
SHA384



AES256-GCM-SHA384
(Weak)
TLSv1.2
0x00,0x9D
No FS

TLS_RSA_WITH_AES_256_GCM_SHA384
RSA
RSA
AESGCM(256)
AEAD



AES256-SHA256
(Weak)
TLSv1.2
0x00,0x3D
No FS

TLS_RSA_WITH_AES_256_CBC_SHA256
RSA
RSA
AES(256)
SHA256



AES256-CCM8
(Weak)
TLSv1.2
0xC0,0xA1
No FS

TLS_RSA_WITH_AES_256_CCM_8
RSA
RSA
AESCCM8(256)
AEAD



AES256-CCM
(Weak)
TLSv1.2
0xC0,0x9D
No FS

TLS_RSA_WITH_AES_256_CCM
RSA
RSA
AESCCM(256)
AEAD



ECDHE-RSA-AES128-SHA256
(Weak)
TLSv1.2
0xC0,0x27
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
ECDH
RSA
AES(128)
SHA256



AES128-GCM-SHA256
(Weak)
TLSv1.2
0x00,0x9C
No FS

TLS_RSA_WITH_AES_128_GCM_SHA256
RSA
RSA
AESGCM(128)
AEAD



AES128-SHA256
(Weak)
TLSv1.2
0x00,0x3C
No FS

TLS_RSA_WITH_AES_128_CBC_SHA256
RSA
RSA
AES(128)
SHA256



AES128-CCM8
(Weak)
TLSv1.2
0xC0,0xA0
No FS

TLS_RSA_WITH_AES_128_CCM_8
RSA
RSA
AESCCM8(128)
AEAD



AES128-CCM
(Weak)
TLSv1.2
0xC0,0x9C
No FS

TLS_RSA_WITH_AES_128_CCM
RSA
RSA
AESCCM(128)
AEAD



ECDHE-RSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x14
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
ECDH
RSA
AES(256)
SHA1



ECDHE-RSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x13
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
ECDH
RSA
AES(128)
SHA1



AES256-SHA
(Weak)
SSLv3
0x00,0x35
No FS

TLS_RSA_WITH_AES_256_CBC_SHA
RSA
RSA
AES(256)
SHA1



AES128-SHA
(Weak)
SSLv3
0x00,0x2F
No FS

TLS_RSA_WITH_AES_128_CBC_SHA
RSA
RSA
AES(128)
SHA1


17. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.



Permalink: https://check-your-website.server-daten.de/?i=84286f3b-9e38-42dd-bf88-a4bbbc3451e8


Last Result: https://check-your-website.server-daten.de/?q=supportmetrics.apple.com - 2022-09-23 01:37:49


Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=supportmetrics.apple.com" target="_blank">Check this Site: supportmetrics.apple.com</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro