Shortcuts: 1. Basic DNS | 2. Url-Checks | 3. Comments | 4. Connections | 5. Certificates | 6. CT-Logs | 7. Html-Content | 8. CAA | 9. TXT |


X

DNS-problem - authoritative Nameserver refused, not defined or timeout

Checked:
14.05.2019 10:02:33


Older results

No older results found

1. Basic DNS and Nameserver Checks

HostTIP-Addressis auth.∑ Queries∑ Timeout
tropito.duckdns.org
A
89.100.115.69
yes
1
0

AAAA

yes


www.tropito.duckdns.org
A
89.100.115.69
yes
1
0

AAAA

yes



Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2019, 00:00:00, Signature-Inception: 11.05.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
org
2 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 27.05.2019, 05:00:00, Signature-Inception: 14.05.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

4 DNSKEY RR found

Public Key with Algorithm 7, KeyTag 9795, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 7, KeyTag 16454, Flags 256

Public Key with Algorithm 7, KeyTag 17883, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 7, KeyTag 50465, Flags 256

3 RRSIG RR to validate DNSKEY RR found

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.05.2019, 15:23:32, Signature-Inception: 09.05.2019, 14:23:32, KeyTag 9795, Signer-Name: org

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.05.2019, 15:23:32, Signature-Inception: 09.05.2019, 14:23:32, KeyTag 16454, Signer-Name: org

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.05.2019, 15:23:32, Signature-Inception: 09.05.2019, 14:23:32, KeyTag 17883, Signer-Name: org

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 9795 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 16454 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 17883 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9795, DigestType 1 and Digest "Nk36s9ryVMq0d7VnWxB2bdqiSYI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9795, DigestType 2 and Digest "OSKzG286TqkrGet7UhIPAx/Y4F/wsDuvz5+JG/5/+OU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
duckdns.org
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


tropito.duckdns.org
0 DS RR in the parent zone found

0 DNSKEY RR found


www.tropito.duckdns.org
0 DS RR in the parent zone found


DomainNameserverNS-IP
www.tropito.duckdns.org
U  ns1.duckdns.org


U  ns2.duckdns.org


U  ns3.duckdns.org

tropito.duckdns.org
U  ns1.duckdns.org
54.187.92.222

U  ns2.duckdns.org
54.191.117.119

U  ns3.duckdns.org
52.26.169.94
duckdns.org
U  ns1.duckdns.org


U  ns2.duckdns.org


U  ns3.duckdns.org

org
  a0.org.afilias-nst.info / ns000b.app8.mia2.afilias-nst.info


  a2.org.afilias-nst.info / 2.fra.pch


  b0.org.afilias-nst.org / ns000b.app20.ams2.afilias-nst.info


  b2.org.afilias-nst.org / 5.fra.pch


  c0.org.afilias-nst.info / ns000b.app22.ams2.afilias-nst.info


  d0.org.afilias-nst.org / app5.iad1.hosts.meta.redstone.afilias-nst.info-2



SOA - records (beta)

Domain:org
Primary:a0.org.afilias-nst.info
Mail:noc.afilias-nst.info
Serial:2013468934
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:6


Domain:duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:tropito.duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:tropito.duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:tropito.duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:www.tropito.duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:www.tropito.duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:www.tropito.duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


2. Url-Checks


show header:
Domainname Http-StatusredirectSec.G
• http://tropito.duckdns.org/
89.100.115.69
301
https://tropito.duckdns.org/
0.104
A
Server: nginx/1.10.3
Date: Tue, 14 May 2019 08:04:46 GMT
Content-Type: text/html
Content-Length: 185
Connection: close
Location: https://tropito.duckdns.org/

• http://www.tropito.duckdns.org/
89.100.115.69
301
https://tropito.duckdns.org/
0.103
E
Server: nginx/1.10.3
Date: Tue, 14 May 2019 08:04:46 GMT
Content-Type: text/html
Content-Length: 185
Connection: close
Location: https://tropito.duckdns.org/

• https://tropito.duckdns.org/
89.100.115.69
302
https://tropito.duckdns.org/login
2.216
N
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Server: nginx/1.10.3
Date: Tue, 14 May 2019 08:04:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: ocec5ee0z13n=drdm9tg3aivkp9qns83e91h0t3; Path=/; Domain=tropito.duckdns.org; HttpOnly; Secure,oc_sessionPassphrase=vGdlETZ5z7PKWt%2FOgp03cdCL0aNi98PduHw7eb2LaeOJ%2Fg1yya1KwVWIxbik3X3hSN1n0lHjGM%2F3muVQqchJTgf%2FrIL3rq%2BduwiCq4ZQ5WsZm%2FGdDVSFOrjgKqo9H2kF; Path=/; Domain=tropito.duckdns.org; HttpOnly; Secure,__Host-nc_sameSiteCookielax=true; Path=/; Domain=tropito.duckdns.org; Expires=2101-01-01 00:59:59; HttpOnly; Secure,__Host-nc_sameSiteCookiestrict=true; Path=/; Domain=tropito.duckdns.org; Expires=2101-01-01 00:59:59; HttpOnly; Secure
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'nonce-SmM4citXRTFqQ0xidUFxT2x2d3dIU0lZcnIvWU1aVGdBaXRqcWVVN0QrUT06U2Ixa2tCQUV0SHE2NjBMWHJySjhOblF0bHZxWmY4eVVLUmtrNXJaWk40VT0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
X-Frame-Options: SAMEORIGIN
Location: https://tropito.duckdns.org/login
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Robots-Tag: none
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer

• https://www.tropito.duckdns.org/
89.100.115.69
400

2.233
N
Bad Request
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Server: nginx/1.10.3
Date: Tue, 14 May 2019 08:04:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: ocec5ee0z13n=aq3qv1th3rh8eg7p4b3cmd5fi4; Path=/; Domain=www.tropito.duckdns.org; HttpOnly; Secure,oc_sessionPassphrase=t0Iz1e2I7V6KppQmshDbxGAzXoL3FMvPlUhhDsvLAjob%2Bi2aZxfIcMHRgAiDjKrw7O5qHuEeo4pRF%2FXFEAmDiGSD7xikHTu2v2fjk2bRtpSSZFr34QrhUNXzdZJHVvEd; Path=/; Domain=www.tropito.duckdns.org; HttpOnly; Secure,__Host-nc_sameSiteCookielax=true; Path=/; Domain=www.tropito.duckdns.org; Expires=2101-01-01 00:59:59; HttpOnly; Secure,__Host-nc_sameSiteCookiestrict=true; Path=/; Domain=www.tropito.duckdns.org; Expires=2101-01-01 00:59:59; HttpOnly; Secure
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'nonce-S0h0N3QvYWxlT3Qxam92TEdNWGVsb0dkNFhDTjdnd0pqb3lkbnh6c1FFYz06YnhnaTNwWDlTdDgyeC9pbVUvT0wyYmJ2cVRYZzNYdHV5T3UyODIybkpEND0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
X-Frame-Options: SAMEORIGIN

• https://tropito.duckdns.org/login

200

2.383
N
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Server: nginx/1.10.3
Date: Tue, 14 May 2019 08:04:53 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 15315
Connection: close
Vary: Accept-Encoding
Set-Cookie: ocec5ee0z13n=pli1aps1hh2kl0ce38tt3e39o6; Path=/; Domain=tropito.duckdns.org; HttpOnly; Secure,oc_sessionPassphrase=E18ehytw0xtVM8v18PjGxJTkooIlnMQzYkxAkGvXGPyK1uALJUEfw4rgzlar%2F9ueAxPzquXvmEEIk9ZOjaXBNArb7vH%2FQkFodpAJP1vOgv%2FXzdXGgTsgnsVOyiFZyaC2; Path=/; Domain=tropito.duckdns.org; HttpOnly; Secure,__Host-nc_sameSiteCookielax=true; Path=/; Domain=tropito.duckdns.org; Expires=2101-01-01 00:59:59; HttpOnly; Secure,__Host-nc_sameSiteCookiestrict=true; Path=/; Domain=tropito.duckdns.org; Expires=2101-01-01 00:59:59; HttpOnly; Secure
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache, no-store, must-revalidate
Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-MEwxY1VJcVNsdkFwTXdKbEZqNXFnazNvNlhyb0sydDNWYWgrZFFabWJDZz06azRrN043S2l3SWRHZnpjd2YxQXA4M3VQcncrUVJWNGtENUU4TWxOWEZRYz0=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://source.unsplash.com https://images.unsplash.com;font-src 'self' data:;connect-src 'self';media-src 'self' data:
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Robots-Tag: none
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer

• http://tropito.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
89.100.115.69
301
https://tropito.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
0.104
A
Visible Content: 301 Moved Permanently nginx/1.10.3
Server: nginx/1.10.3
Date: Tue, 14 May 2019 08:04:51 GMT
Content-Type: text/html
Content-Length: 185
Connection: close
Location: https://tropito.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

• http://www.tropito.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
89.100.115.69
301
https://tropito.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
0.107
E
Visible Content: 301 Moved Permanently nginx/1.10.3
Server: nginx/1.10.3
Date: Tue, 14 May 2019 08:04:51 GMT
Content-Type: text/html
Content-Length: 185
Connection: close
Location: https://tropito.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

• https://tropito.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

403

0.743
N
Forbidden
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Visible Content: 403 Forbidden nginx/1.10.3
Server: nginx/1.10.3
Date: Tue, 14 May 2019 08:04:54 GMT
Content-Type: text/html
Content-Length: 169
Connection: close

3. Comments

Aname "tropito.duckdns.org" is domain, public suffix is "duckdns.org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)"
Agood: All ip addresses are public addresses
Ahttps://tropito.duckdns.org/ 89.100.115.69
302
https://tropito.duckdns.org/login
correct redirect https to https
Agood: destination is https
Agood - only one version with Http-Status 200
Agood: one preferred version: non-www is preferred
Agood: every cookie sent via https is marked as secure
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):1 complete Content-Type - header (2 urls)
https://tropito.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de


Url with incomplete Content-Type - header - missing charset
Ahttp://tropito.duckdns.org/ 89.100.115.69
301
https://tropito.duckdns.org/
correct redirect http - https with the same domain name
Bhttps://tropito.duckdns.org/ 89.100.115.69
302

Missing HSTS-Header
Bhttps://tropito.duckdns.org/login
200

Missing HSTS-Header
Ehttp://www.tropito.duckdns.org/ 89.100.115.69
301
https://tropito.duckdns.org/
wrong redirect one domain http to other domain https - first redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security).
Mhttps://www.tropito.duckdns.org/ 89.100.115.69
400

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://tropito.duckdns.org/ 89.100.115.69
302
https://tropito.duckdns.org/login
Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://tropito.duckdns.org/login
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://www.tropito.duckdns.org/ 89.100.115.69
400

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://tropito.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
403

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
OOld connection: Diffie-Hellman Key Exchange with 1024 Bit is unsecure. Update to 2048 Bit Key Exchange.
XFatal error: Nameserver isn't defined or has timeout
XFatal error: Nameserver doesn't support TCP connection: ns1.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.187.92.222:53
XFatal error: Nameserver doesn't support TCP connection: ns1.duckdns.org / 54.187.92.222: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.187.92.222:53
XFatal error: Nameserver doesn't support TCP connection: ns2.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.191.117.119:53
XFatal error: Nameserver doesn't support TCP connection: ns2.duckdns.org / 54.191.117.119: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.191.117.119:53
XFatal error: Nameserver doesn't support TCP connection: ns3.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 52.26.169.94:53
XFatal error: Nameserver doesn't support TCP connection: ns3.duckdns.org / 52.26.169.94: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 52.26.169.94:53
AGood: Nameserver supports Echo Capitalization: 3 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 3 good Nameserver
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org / 54.187.92.222: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org / 54.191.117.119: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org / 52.26.169.94: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
ADuration: 161257 milliseconds, 161.257 seconds


4. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
tropito.duckdns.org
tropito.duckdns.org
443
Certificate/chain invalid and wrong name
Tls12
DiffieHellman
1024
Aes256
256
Sha384
error checking OCSP stapling
weak
Self signed certificate
1CN=tropito.us.to, O=Casita, L=Telde, C=ES, emailAddress=jramirez.ing@gmail.com
tropito.duckdns.org
89.100.115.69
443
Certificate/chain invalid and wrong name
Tls12
DiffieHellman
1024
Aes256
256
Sha384
error checking OCSP stapling
weak
Self signed certificate
1CN=tropito.us.to, O=Casita, L=Telde, C=ES, emailAddress=jramirez.ing@gmail.com
www.tropito.duckdns.org
89.100.115.69
443
Certificate/chain invalid and wrong name
Tls12
DiffieHellman
1024
Aes256
256
Sha384
error checking OCSP stapling
weak
Self signed certificate
1CN=tropito.us.to, O=Casita, L=Telde, C=ES, emailAddress=jramirez.ing@gmail.com


5. Certificates

1.
1.
E=jramirez.ing@gmail.com, CN=tropito.us.to, O=Casita, L=Telde, S=Las Palmas, C=ES
27.04.2018
27.04.2019
29 days expired


KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:00BD929D1C057F4025
Thumbprint:671316C1EFF1C084D935F503BD94AE5649A52844
SHA256 / Certificate:LkVYn5ZjRixMDc+MxBjuH2CjSgjvMqgKTRSBHR4JAbQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):add3650f5a947ce6c286682659fa0eb62dada859eeb1382407cdf1b703d521b2
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no

UntrustedRoot: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.


6. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

No CertSpotter - CT-Log entries found


2. Source crt.sh - old and new certificates, sometimes very slow.

No CRT - CT-Log entries found


7. Html-Content - Entries (BETA - mixed content and other checks)

Summary

Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://tropito.duckdns.org/login
a

4

0







form

1

0







img

1
4,683 Bytes
0
1
0





link
stylesheet
10
83,288 Bytes
0
10
0





link
other
4
7,062 Bytes
0
3
0





meta
apple
1

0







meta
og
6
2,918 Bytes
0
1
0





meta
other
4

0







script

20
1,542,768 Bytes
0
20
0




Details

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://tropito.duckdns.org/login

a




2
ok



a

https://nextcloud.com


1
ok



a

https://www.enable-javascript.com/


1
ok



form
post



1
ok



img
src
/core/img/loading-dark.gif
200
4683 Bytes

1
ok



link
apple-touch-icon-precomposed
/core/img/favicon-touch.png
200
2918 Bytes

1
ok



link
icon
/core/img/favicon.ico
200
3262 Bytes

1
ok



link
manifest
/apps/theming/manifest?v=0


1
ok



link
mask-icon
/core/img/favicon-mask.svg
200
882 Bytes

1
ok



link
stylesheet
/apps/apporder/css/apporder.css?v=9095b976-0
200
694 Bytes

1
ok



link
stylesheet
/apps/files_pdfviewer/css/style.css?v=1bf6e69c-0
200
346 Bytes

1
ok



link
stylesheet
/apps/files_versions/css/versions.css?v=4fda350b-0
200
1014 Bytes

1
ok



link
stylesheet
/apps/files_videoplayer/css/style.css?v=1bf6e69c-0
200
7319 Bytes

1
ok


Content loaded via url("...")

../img/vjs-volume-bar.png
1
../img/vjs-volume-level.png
1

link
stylesheet
/apps/theming/styles?v=0
200
957 Bytes

1
ok


Content loaded via url("...")

./img/core/filetypes/folder.svg?v=0
1
./img/core/filetypes/folder-drag-accept.svg?v=0
1
./img/core/filetypes/text.svg?v=0
1
/core/img/background.png?v=0
1
/svg/core/logo/logo?color=fff&v=1
1

link
stylesheet
/apps/unsplash/css/header.css?v=ad2f9818-0
200
1576 Bytes

1
ok


Content loaded via url("...")

https://source.unsplash.com/random/featured/?nature
1

link
stylesheet
/apps/unsplash/css/login.css?v=ad2f9818-0
200
467 Bytes

1
ok


Content loaded via url("...")

https://source.unsplash.com/random/featured/?nature
1

link
stylesheet
/core/css/guest.css?v=f7d2bc36-0
200
20960 Bytes

1
ok


Content loaded via url("...")

../fonts/Nunito-Bold.ttf
2
../fonts/Nunito-Bold.woff2
1
../fonts/Nunito-Bold-latin-ext.woff2
1
../fonts/Nunito-Regular.ttf
2
../fonts/Nunito-Regular.woff2
1
../fonts/Nunito-Regular-latin-ext.woff2
1
../img/actions/caret-white.svg?v=1
1
../img/actions/checkbox-mark-white.svg
1
../img/actions/checkmark-white.svg?v=1
1
../img/actions/confirm.svg?v=2
1
../img/actions/confirm-white.svg?v=2
1
../img/actions/error-white.svg?v=1
1
../img/actions/info-white.svg?v=2
1
../img/actions/toggle.svg?v=1
1
../img/background.png?v=2
1
../img/loading.gif
1
../img/loading-dark.gif
1
../img/loading-small.gif
1
../img/loading-small-dark.gif
1
../img/logo/logo.svg?v=1
1

link
stylesheet
/core/vendor/jquery-ui/themes/base/jquery-ui.css?v=f7d2bc36-0
200
32269 Bytes

1
ok


Content loaded via url("...")

images/animated-overlay.gif
1
images/ui-bg_flat_0_aaaaaa_40x100.png
2
images/ui-bg_flat_75_ffffff_40x100.png
1
images/ui-bg_glass_55_fbf9ee_1x400.png
1
images/ui-bg_glass_65_ffffff_1x400.png
1
images/ui-bg_glass_75_dadada_1x400.png
1
images/ui-bg_glass_75_e6e6e6_1x400.png
1
images/ui-bg_glass_95_fef1ec_1x400.png
1
images/ui-bg_highlight-soft_75_cccccc_1x100.png
1
images/ui-icons_222222_256x240.png
2
images/ui-icons_2e83ff_256x240.png
1
images/ui-icons_454545_256x240.png
2
images/ui-icons_888888_256x240.png
1
images/ui-icons_cd0a0a_256x240.png
1

link
stylesheet
/core/vendor/select2/select2.css?v=f7d2bc36-0
200
17686 Bytes

1
ok


Content loaded via url("...")

select2.png
8
select2-spinner.gif
7
select2x2.png
1

meta

utf-8


1
ok



meta
og:description
a safe home for all your data


1
ok



meta
og:image
https://tropito.duckdns.org/core/img/favicon-touch.png
200
2918 Bytes

1
ok



meta
og:site_name
Nextcloud


1
ok



meta
og:title
Nextcloud


1
ok



meta
og:type
website


1
ok



meta
og:url
https://tropito.duckdns.org/


1
ok



meta
X-UA-Compatible
IE=edge


1
ok



meta
apple-itunes-app
app-id=1125420102


1
ok



meta
theme-color
#0082c9


1
ok



meta
viewport
width=device-width, initial-scale=1.0, minimum-scale=1.0


1
ok



script
src
/apps/accessibility/js/accessibility?v=0
200
65 Bytes

1
ok



script
src
/apps/apporder/js/apporder.js?v=f7d2bc36-0
200
2439 Bytes

1
ok



script
src
/apps/files_pdfviewer/js/previewplugin.js?v=f7d2bc36-0
200
5162 Bytes

1
ok



script
src
/apps/files_videoplayer/js/viewer.js?v=f7d2bc36-0
200
4826 Bytes

1
ok



script
src
/apps/firstrunwizard/js/firstrunwizard.js?v=f7d2bc36-0
200
4183 Bytes

1
ok



script
src
/apps/firstrunwizard/js/jquery.colorbox.js?v=f7d2bc36-0
200
29370 Bytes

1
ok



script
src
/apps/theming/js/theming?v=0
200
232 Bytes

1
ok



script
src
/core/js/backgroundjobs.js?v=f7d2bc36-0
200
917 Bytes

1
ok



script
src
/core/js/contactsmenu.js?v=f7d2bc36-0
200
11028 Bytes

1
ok



script
src
/core/js/contactsmenu_templates.js?v=f7d2bc36-0
200
12146 Bytes

1
ok



script
src
/core/js/files/client.js?v=f7d2bc36-0
200
23443 Bytes

1
ok



script
src
/core/js/files/fileinfo.js?v=f7d2bc36-0
200
2142 Bytes

1
ok



script
src
/core/js/jquery-ui-fixes.js?v=f7d2bc36-0
200
260 Bytes

1
ok



script
src
/core/search/js/search.js?v=f7d2bc36-0
200
4214 Bytes

1
ok



script
src
/core/search/js/searchprovider.js?v=f7d2bc36-0
200
12281 Bytes

1
ok



script
src
/core/vendor/core.js?v=f7d2bc36-0
200
1042375 Bytes

1
ok



script
src
/core/vendor/jsTimezoneDetect/jstz.js?v=f7d2bc36-0
200
14565 Bytes

1
ok



script
src
/js/core/merged-login.js?v=f7d2bc36-0
200
7624 Bytes

1
ok



script
src
/js/core/merged-share-backend.js?v=f7d2bc36-0
200
207019 Bytes

1
ok



script
src
/js/core/merged-template-prepend.js?v=f7d2bc36-0
200
158477 Bytes

1
ok



8. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.tropito.duckdns.org



1
0
tropito.duckdns.org



1
0
duckdns.org
0

no CAA entry found
1
0
org
0

no CAA entry found
1
0


9. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
tropito.duckdns.org

ok
1
0
www.tropito.duckdns.org

ok
1
0
_acme-challenge.tropito.duckdns.org

missing entry or wrong length
1
0
_acme-challenge.www.tropito.duckdns.org

missing entry or wrong length
1
0
_acme-challenge.tropito.duckdns.org.tropito.duckdns.org

perhaps wrong
1
0
_acme-challenge.www.tropito.duckdns.org.tropito.duckdns.org

perhaps wrong
1
0
_acme-challenge.www.tropito.duckdns.org.www.tropito.duckdns.org

perhaps wrong
1
0



Permalink: https://check-your-website.server-daten.de/?i=fdbe29f9-854f-480b-951c-357cc41d9c37


Last Result: https://check-your-website.server-daten.de/?q=tropito.duckdns.org - 2019-05-14 10:02:33