Check DNS, Urls + Redirects, Certificates and Content of your Website


 

 

X

 

DNS-problem - authoritative Nameserver refused, not defined or timeout

 

Checked:
30.08.2026 15:00:51

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
ubuntu.mirrors.linux.ro
CNAME
ubuntu.mirror.linux.ro
yes
1
0

A
81.196.9.142
Bucharest/Romania (RO) - RCS & RDS
Hostname: mirror.linux.ro
yes



AAAA
2a02:2f0c:d000:14::2
Calarasi/Călărași County/Romania (RO) - RCS&RDS S.A

yes


www.ubuntu.mirrors.linux.ro

Name Error
yes
1
0
*.mirrors.linux.ro
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


*.ubuntu.mirrors.linux.ro
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 57780, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2026, 00:00:00 +, Signature-Inception: 30.08.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: ro

ro
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 39877, DigestType 2 and Digest fjYghtrWzq7bVHSiHRNAG3umjzFiq+bvJnnwQN1l0W0=






3 RRSIG RR to validate DS RR found






RRSIG-Owner ro., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2026, 05:00:00 +, Signature-Inception: 30.08.2026, 04:00:00 +, KeyTag 57780, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20506, Flags 256






Public Key with Algorithm 8, KeyTag 39877, Flags 257 (SEP = Secure Entry Point)






2 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner ro., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 24.09.2026, 04:32:25 +, Signature-Inception: 25.08.2026, 03:54:53 +, KeyTag 20506, Signer-Name: ro






RRSIG-Owner ro., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 24.09.2026, 04:32:25 +, Signature-Inception: 25.08.2026, 03:54:53 +, KeyTag 39877, Signer-Name: ro






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20506 used to validate the DNSKEY RRSet






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 39877 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 39877, DigestType 2 and Digest "fjYghtrWzq7bVHSiHRNAG3umjzFiq+bvJnnwQN1l0W0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: linux.ro

linux.ro
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "7sur78mi2ifav708qgr2tl6consd9uf9" between the hashed NSEC3-owner "7soovdpa0dbu642f1vocaqqofqkmb2pi" and the hashed NextOwner "7t6noon8568o23g9o3g0o2n3obch5scv". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner 7soovdpa0dbu642f1vocaqqofqkmb2pi.ro., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 12.09.2026, 13:30:39 +, Signature-Inception: 13.08.2026, 13:25:00 +, KeyTag 20506, Signer-Name: ro






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "iq5gob4m2akcjd6r4df69008c71280v6" as Owner. That's the Hash of "ro" with the NextHashedOwnerName "iqao151q980l2gfd06fee9buflpklle9". So that domain name is the Closest Encloser of "linux.ro". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner iq5gob4m2akcjd6r4df69008c71280v6.ro., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 17.09.2026, 09:58:04 +, Signature-Inception: 18.08.2026, 08:58:04 +, KeyTag 20506, Signer-Name: ro






0 DNSKEY RR found









Zone: mirrors.linux.ro

mirrors.linux.ro
0 DS RR in the parent zone found



Zone: ubuntu.mirrors.linux.ro

ubuntu.mirrors.linux.ro
0 DS RR in the parent zone found



Zone: www.ubuntu.mirrors.linux.ro

www.ubuntu.mirrors.linux.ro
0 DS RR in the parent zone found



Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 57780, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2026, 00:00:00 +, Signature-Inception: 30.08.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: ro

ro
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 39877, DigestType 2 and Digest fjYghtrWzq7bVHSiHRNAG3umjzFiq+bvJnnwQN1l0W0=






3 RRSIG RR to validate DS RR found






RRSIG-Owner ro., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2026, 05:00:00 +, Signature-Inception: 30.08.2026, 04:00:00 +, KeyTag 57780, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20506, Flags 256






Public Key with Algorithm 8, KeyTag 39877, Flags 257 (SEP = Secure Entry Point)






2 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner ro., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 24.09.2026, 04:32:25 +, Signature-Inception: 25.08.2026, 03:54:53 +, KeyTag 20506, Signer-Name: ro






RRSIG-Owner ro., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 24.09.2026, 04:32:25 +, Signature-Inception: 25.08.2026, 03:54:53 +, KeyTag 39877, Signer-Name: ro






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20506 used to validate the DNSKEY RRSet






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 39877 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 39877, DigestType 2 and Digest "fjYghtrWzq7bVHSiHRNAG3umjzFiq+bvJnnwQN1l0W0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: linux.ro

linux.ro
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "7sur78mi2ifav708qgr2tl6consd9uf9" between the hashed NSEC3-owner "7soovdpa0dbu642f1vocaqqofqkmb2pi" and the hashed NextOwner "7t6noon8568o23g9o3g0o2n3obch5scv". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner 7soovdpa0dbu642f1vocaqqofqkmb2pi.ro., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 12.09.2026, 13:30:39 +, Signature-Inception: 13.08.2026, 13:25:00 +, KeyTag 20506, Signer-Name: ro






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "iq5gob4m2akcjd6r4df69008c71280v6" as Owner. That's the Hash of "ro" with the NextHashedOwnerName "iqao151q980l2gfd06fee9buflpklle9". So that domain name is the Closest Encloser of "linux.ro". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner iq5gob4m2akcjd6r4df69008c71280v6.ro., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 17.09.2026, 09:58:04 +, Signature-Inception: 18.08.2026, 08:58:04 +, KeyTag 20506, Signer-Name: ro






0 DNSKEY RR found









Zone: mirror.linux.ro

mirror.linux.ro
0 DS RR in the parent zone found






0 DNSKEY RR found









Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 57780, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 20.09.2026, 00:00:00 +, Signature-Inception: 30.08.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: ro

ro
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 39877, DigestType 2 and Digest fjYghtrWzq7bVHSiHRNAG3umjzFiq+bvJnnwQN1l0W0=






3 RRSIG RR to validate DS RR found






RRSIG-Owner ro., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.09.2026, 05:00:00 +, Signature-Inception: 30.08.2026, 04:00:00 +, KeyTag 57780, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 57780 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20506, Flags 256






Public Key with Algorithm 8, KeyTag 39877, Flags 257 (SEP = Secure Entry Point)






2 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner ro., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 24.09.2026, 04:32:25 +, Signature-Inception: 25.08.2026, 03:54:53 +, KeyTag 20506, Signer-Name: ro






RRSIG-Owner ro., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 24.09.2026, 04:32:25 +, Signature-Inception: 25.08.2026, 03:54:53 +, KeyTag 39877, Signer-Name: ro






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20506 used to validate the DNSKEY RRSet






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 39877 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 39877, DigestType 2 and Digest "fjYghtrWzq7bVHSiHRNAG3umjzFiq+bvJnnwQN1l0W0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: linux.ro

linux.ro
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "7sur78mi2ifav708qgr2tl6consd9uf9" between the hashed NSEC3-owner "7soovdpa0dbu642f1vocaqqofqkmb2pi" and the hashed NextOwner "7t6noon8568o23g9o3g0o2n3obch5scv". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner 7soovdpa0dbu642f1vocaqqofqkmb2pi.ro., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 12.09.2026, 13:30:39 +, Signature-Inception: 13.08.2026, 13:25:00 +, KeyTag 20506, Signer-Name: ro






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "iq5gob4m2akcjd6r4df69008c71280v6" as Owner. That's the Hash of "ro" with the NextHashedOwnerName "iqao151q980l2gfd06fee9buflpklle9". So that domain name is the Closest Encloser of "linux.ro". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner iq5gob4m2akcjd6r4df69008c71280v6.ro., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 17.09.2026, 09:58:04 +, Signature-Inception: 18.08.2026, 08:58:04 +, KeyTag 20506, Signer-Name: ro






0 DNSKEY RR found









Zone: mirror.linux.ro

mirror.linux.ro
0 DS RR in the parent zone found






0 DNSKEY RR found









Zone: ubuntu.mirror.linux.ro

ubuntu.mirror.linux.ro
0 DS RR in the parent zone found






0 DNSKEY RR found







 

3. Name Servers

DomainNameserverNS-IP
www.ubuntu.mirrors.linux.ro
  ns1.rdsnet.ro

linux.ro
  ns1.rdsnet.ro
193.231.236.17
Bucharest/Romania (RO) - Digi Romania S.A.


  ns2.rdsnet.ro
193.231.236.10
Bucharest/Romania (RO) - Digi Romania S.A.

ro
  dns-at.rotld.ro / dns-at.rotld.ro


  dns-c.rotld.ro / ns-1.ro.de8.bind


  dns-ro.denic.de / dns-ro.denic.de


  primary.rotld.ro


  sec-dns-a.rotld.ro


  sec-dns-b.rotld.ro


ubuntu.mirror.linux.ro
  ns1.rdsnet.ro
193.231.236.17
Bucharest/Romania (RO) - Digi Romania S.A.

mirror.linux.ro
  ns1.rdsnet.ro
193.231.236.17
Bucharest/Romania (RO) - Digi Romania S.A.


 
193.231.236.17
Bucharest/Romania (RO) - Digi Romania S.A.

linux.ro
  ns1.rdsnet.ro
193.231.236.17
Bucharest/Romania (RO) - Digi Romania S.A.


 
193.231.236.17
Bucharest/Romania (RO) - Digi Romania S.A.


  ns2.rdsnet.ro
193.231.236.10
Bucharest/Romania (RO) - Digi Romania S.A.


 
193.231.236.10
Bucharest/Romania (RO) - Digi Romania S.A.

ro
  dns-at.rotld.ro / dns-at.rotld.ro


  dns-at.rotld.ro / dns-at.rotld.ro


  dns-c.rotld.ro / ns-1.ro.de8.bind


  dns-c.rotld.ro / ns-2.ro.de8.bind


  dns-ro.denic.de / dns-ro.denic.de


  dns-ro.denic.de / dns-ro.denic.de


  primary.rotld.ro


  primary.rotld.ro


  sec-dns-a.rotld.ro


  sec-dns-a.rotld.ro


  sec-dns-b.rotld.ro


  sec-dns-b.rotld.ro

 

4. SOA-Entries


Domain:ro
Zone-Name:ro
Primary:primary.rotld.ro
Mail:hostmaster.rotld.ro
Serial:2018649051
Refresh:10800
Retry:3600
Expire:604800
TTL:3600
num Entries:6


Domain:linux.ro
Zone-Name:linux.ro
Primary:ns1.rdsnet.ro
Mail:dns-adm.rdsnet.ro
Serial:2025052302
Refresh:10800
Retry:3600
Expire:3600000
TTL:86400
num Entries:2


Domain:www.ubuntu.mirrors.linux.ro
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1



Domain:ro
Zone-Name:ro
Primary:primary.rotld.ro
Mail:hostmaster.rotld.ro
Serial:2018649051
Refresh:10800
Retry:3600
Expire:604800
TTL:3600
num Entries:6


Domain:linux.ro
Zone-Name:linux.ro
Primary:ns1.rdsnet.ro
Mail:dns-adm.rdsnet.ro
Serial:2025052302
Refresh:10800
Retry:3600
Expire:3600000
TTL:86400
num Entries:2


Domain:mirror.linux.ro
Zone-Name:linux.ro
Primary:ns1.rdsnet.ro
Mail:dns-adm.rdsnet.ro
Serial:2025052302
Refresh:10800
Retry:3600
Expire:3600000
TTL:86400
num Entries:1



Domain:ro
Zone-Name:ro
Primary:primary.rotld.ro
Mail:hostmaster.rotld.ro
Serial:2018649051
Refresh:10800
Retry:3600
Expire:604800
TTL:3600
num Entries:6


Domain:linux.ro
Zone-Name:linux.ro
Primary:ns1.rdsnet.ro
Mail:dns-adm.rdsnet.ro
Serial:2025052302
Refresh:10800
Retry:3600
Expire:3600000
TTL:86400
num Entries:2


Domain:mirror.linux.ro
Zone-Name:linux.ro
Primary:ns1.rdsnet.ro
Mail:dns-adm.rdsnet.ro
Serial:2025052302
Refresh:10800
Retry:3600
Expire:3600000
TTL:86400
num Entries:1


Domain:ubuntu.mirror.linux.ro
Zone-Name:linux.ro
Primary:ns1.rdsnet.ro
Mail:dns-adm.rdsnet.ro
Serial:2025052302
Refresh:10800
Retry:3600
Expire:3600000
TTL:86400
num Entries:1


5. Screenshots

No Screenshot listed, because no url-check with https + http status 200-299, 400-599 + not-ACME-check found.

 

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://ubuntu.mirrors.linux.ro/
81.196.9.142 gzip used - 181 / 338 - 46.45 %
200

Html is minified: 147.60 %
0.076
H
Server: nginx
Date: Sun, 30 Aug 2026 13:02:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 181

• http://ubuntu.mirrors.linux.ro/
2a02:2f0c:d000:14::2 gzip used - 181 / 338 - 46.45 %
200

Html is minified: 147.60 %
0.096
H
Server: nginx
Date: Sun, 30 Aug 2026 13:02:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 181

• https://ubuntu.mirrors.linux.ro/
81.196.9.142
-102


1.156
V
ConnectionError (2, 0x80004005). Es konnte keine Verbindung hergestellt werden, da der Zielcomputer die Verbindung verweigerte. (81.196.9.142:443)

• https://ubuntu.mirrors.linux.ro/
2a02:2f0c:d000:14::2
-102


1.174
V
ConnectionError (2, 0x80004005). Es konnte keine Verbindung hergestellt werden, da der Zielcomputer die Verbindung verweigerte. ([2a02:2f0c:d000:14::2]:443)

• http://ubuntu.mirrors.linux.ro/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
81.196.9.142 gzip used - 107 / 146 - 26.71 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 110.61 %
Other inline scripts (∑/total): 0/0
0.047
A
Not Found
Visible Content:
Server: nginx
Date: Sun, 30 Aug 2026 13:02:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 107

• http://ubuntu.mirrors.linux.ro/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a02:2f0c:d000:14::2 gzip used - 107 / 146 - 26.71 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 110.61 %
Other inline scripts (∑/total): 0/0
0.050
A
Not Found
Visible Content:
Server: nginx
Date: Sun, 30 Aug 2026 13:02:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 107

• https://81.196.9.142/
81.196.9.142
-102


1.174
V
ConnectionError (2, 0x80004005). Es konnte keine Verbindung hergestellt werden, da der Zielcomputer die Verbindung verweigerte. (81.196.9.142:443)

• https://[2a02:2f0c:d000:0014:0000:0000:0000:0002]/
2a02:2f0c:d000:14::2
-102


1.186
V
ConnectionError (2, 0x80004005). Es konnte keine Verbindung hergestellt werden, da der Zielcomputer die Verbindung verweigerte. ([2a02:2f0c:d000:14::2]:443)

 

7. Comments


1. General Results, most used to calculate the result

Aname "ubuntu.mirrors.linux.ro" is subdomain, public suffix is ".ro", top-level-domain is ".ro", top-level-domain-type is "country-code", Country is Romania, tld-manager is "National Institute for R&D in Informatics", num .ro-domains preloaded: 899 (complete: 276475)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: ubuntu.mirrors.linux.ro has 2 different ip addresses (authoritative).
AGood: Ipv4 and Ipv6 addresses per domain name found: ubuntu.mirrors.linux.ro has 1 ipv4, 1 ipv6 addresses
AGood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
AGood - only one version with Http-Status 200
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):0 complete Content-Type - header (4 urls)
http://ubuntu.mirrors.linux.ro/ 81.196.9.142


Url with incomplete Content-Type - header - missing charset
http://ubuntu.mirrors.linux.ro/ 2a02:2f0c:d000:14::2


Url with incomplete Content-Type - header - missing charset
http://ubuntu.mirrors.linux.ro/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 81.196.9.142


Url with incomplete Content-Type - header - missing charset
http://ubuntu.mirrors.linux.ro/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a02:2f0c:d000:14::2


Url with incomplete Content-Type - header - missing charset
HFatal error: No https - result with http-status 200, no encryption
HFatal error: http result with http-status 200, no encryption. Add a redirect http ⇒ https, so every connection is secure. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop.
Nubuntu.mirrors.linux.ro:25


Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nubuntu.mirrors.linux.ro:587


Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Oubuntu.mirrors.linux.ro / 2a02:2f0c:d000:14::2 / 25


Old connection: Ssl3 is insecure and must be disabled.
Oubuntu.mirrors.linux.ro / 2a02:2f0c:d000:14::2 / 587


Old connection: Ssl3 is insecure and must be disabled.
Oubuntu.mirrors.linux.ro / 2a02:2f0c:d000:14::2 / 587

ECDHE-RSA-RC4-SHA
Old connection: Insecure Cipher Suite found. Such active Cipher Suites allow downgrades. Remove all insecure Cipher Suites
Oubuntu.mirrors.linux.ro / 2a02:2f0c:d000:14::2 / 25

ECDHE-RSA-RC4-SHA
Old connection: Insecure Cipher Suite found. Such active Cipher Suites allow downgrades. Remove all insecure Cipher Suites
Oubuntu.mirrors.linux.ro / 2a02:2f0c:d000:14::2 / 25

RC4-SHA
Old connection: Insecure Cipher Suite found. Such active Cipher Suites allow downgrades. Remove all insecure Cipher Suites
Oubuntu.mirrors.linux.ro / 2a02:2f0c:d000:14::2 / 25

RC4-MD5
Old connection: Insecure Cipher Suite found. Such active Cipher Suites allow downgrades. Remove all insecure Cipher Suites
Oubuntu.mirrors.linux.ro / 2a02:2f0c:d000:14::2 / 587

RC4-SHA
Old connection: Insecure Cipher Suite found. Such active Cipher Suites allow downgrades. Remove all insecure Cipher Suites
Oubuntu.mirrors.linux.ro / 2a02:2f0c:d000:14::2 / 587

RC4-MD5
Old connection: Insecure Cipher Suite found. Such active Cipher Suites allow downgrades. Remove all insecure Cipher Suites
Oubuntu.mirrors.linux.ro / 2a02:2f0c:d000:14::2 / 25


Old connection: Cipher Suites without Forward Secrecy (FS) found. Remove all of these Cipher Suites, use only Cipher Suites with Forward Secrecy: Starting with ECDHE- or DHE - the last "E" says: "ephemeral". Or use Tls.1.3, then all Cipher Suites use FS. 13 Cipher Suites without Forward Secrecy found
Oubuntu.mirrors.linux.ro / 2a02:2f0c:d000:14::2 / 587


Old connection: Cipher Suites without Forward Secrecy (FS) found. Remove all of these Cipher Suites, use only Cipher Suites with Forward Secrecy: Starting with ECDHE- or DHE - the last "E" says: "ephemeral". Or use Tls.1.3, then all Cipher Suites use FS. 13 Cipher Suites without Forward Secrecy found
Vhttps://ubuntu.mirrors.linux.ro/ 81.196.9.142
-102

Connect failure - perhaps firewall
Vhttps://ubuntu.mirrors.linux.ro/ 2a02:2f0c:d000:14::2
-102

Connect failure - perhaps firewall
Vhttps://81.196.9.142/ 81.196.9.142
-102

Connect failure - perhaps firewall
Vhttps://[2a02:2f0c:d000:0014:0000:0000:0000:0002]/ 2a02:2f0c:d000:14::2
-102

Connect failure - perhaps firewall
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain ubuntu.mirrors.linux.ro, 2 ip addresses.
Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain ubuntu.mirrors.linux.ro, 2 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.ubuntu.mirrors.linux.ro

2. Header-Checks

U

No https result with http status 2** or 4** (standard-check) found, no header checked.

3. DNS- and NameServer - Checks

AInfo:: 2 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 2 Queries complete, 2 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
AGood: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.ns1.rdsnet.ro (193.231.236.17), ns2.rdsnet.ro (193.231.236.10)
AGood (1 - 3.0):: An average of 1.0 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 2 different Name Servers found: ns1.rdsnet.ro, ns2.rdsnet.ro, 2 Name Servers included in Delegation: ns1.rdsnet.ro, ns2.rdsnet.ro, 2 Name Servers included in 1 Zone definitions: ns1.rdsnet.ro, ns2.rdsnet.ro, 1 Name Servers listed in SOA.Primary: ns1.rdsnet.ro.
AGood: Only one SOA.Primary Name Server found.: ns1.rdsnet.ro.
AGood: SOA.Primary Name Server included in the delegation set.: ns1.rdsnet.ro.
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AInfo: Ipv4-Subnet-list: 2 Name Servers, 1 different subnets (first Byte): 193., 1 different subnets (first two Bytes): 193.231., 1 different subnets (first three Bytes): 193.231.236.
XFatal: All Name Server IPv4 addresses from the same subnet. Check https://www.iana.org/help/nameserver-requirements to learn some basics about name server configurations. If you manage these name servers, fix it. If it's your provider, change your provider.:
Nameserver doesn't pass all EDNS-Checks: ns1.rdsnet.ro: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: primary.rotld.ro: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. COOKIE: fatal timeout. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: primary.rotld.ro: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: sec-dns-a.rotld.ro: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: sec-dns-a.rotld.ro: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: sec-dns-b.rotld.ro: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: sec-dns-b.rotld.ro: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: sec-dns-b.rotld.ro: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
ADuration: 441750 milliseconds, 441.750 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
25
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
not supported
ok
ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
25
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
not supported
ok
 
Tls.1.2
Tls.1.1
Tls.1.0
Ssl3 - Insecure
no Ssl2

Tls.1.2
Tls.1.1
Tls.1.0
Ssl3 - Insecure
no Ssl2
Self signed certificate

1CN=mirror.linux.ro, OU=SomeOrganizationalUnit, O=SomeOrganization, L=SomeCity, C=--, emailAddress=root@mirror.linux.ro


ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
587
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
not supported
ok

ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
587
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
not supported
ok
 
Tls.1.2
Tls.1.1
Tls.1.0
Ssl3 - Insecure
no Ssl2

Tls.1.2
Tls.1.1
Tls.1.0
Ssl3 - Insecure
no Ssl2
Self signed certificate

1CN=mirror.linux.ro, OU=SomeOrganizationalUnit, O=SomeOrganization, L=SomeCity, C=--, emailAddress=root@mirror.linux.ro

 

9. Certificates

1.
1.
E=root@mirror.linux.ro, CN=mirror.linux.ro, OU=SomeOrganizationalUnit, O=SomeOrganization, L=SomeCity, S=SomeState, C=--
29.11.2017
29.11.2018
2837 days expired

1.
1.
E=root@mirror.linux.ro, CN=mirror.linux.ro, OU=SomeOrganizationalUnit, O=SomeOrganization, L=SomeCity, S=SomeState, C=--
29.11.2017

29.11.2018
2837 days expired




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:00BA5645AEBE381D2C
Thumbprint:E6E1BFE670AA082FB5F75C3062A0BD5E7DCD4B45
SHA256 / Certificate:ThtjubncFEk+d1zAPsvo9akb/aykLRVw8AIqnDQ1drU=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):1742576e97fde90ecc85f3a083863ff0eb05db24975d0252242bc31ebccf8bc5
SHA256 hex / Subject Public Key Information (SPKI):1742576e97fde90ecc85f3a083863ff0eb05db24975d0252242bc31ebccf8bc5 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:


UntrustedRoot: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.


 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found

 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

No Html-Content entries found. Only checked if https + status 200/401/403/404

 

12. Html-Parsing via https://validator.w3.org/nu/


No https result http status 200 and Content-Type text/html or text/xml found, no Html-Parsing - Check

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns1.rdsnet.ro, ns2.rdsnet.ro

 

QNr.DomainTypeNS used
1
ro
NS
d.root-servers.net (2001:500:2d::d)

Answer: dns-at.rotld.ro, dns-c.rotld.ro, dns-ro.denic.de, primary.rotld.ro, sec-dns-a.rotld.ro, sec-dns-b.rotld.ro
2
ns1.rdsnet.ro: 193.231.236.17
NS
dns-at.rotld.ro (2001:628:453:bb::6)

Answer: ns2.rdsnet.ro
193.231.236.10

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
ubuntu.mirrors.linux.ro



1
0
ubuntu.mirror.linux.ro
0

no CAA entry found
1
0
mirrors.linux.ro



1
0
mirror.linux.ro
0

no CAA entry found
1
0

0

no CAA entry found
1
0
linux.ro
0

no CAA entry found
1
0

0

no CAA entry found
1
0

0

no CAA entry found
1
0
ro
0

no CAA entry found
1
0

0

no CAA entry found
1
0

0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
mirrors.linux.ro


1
0
ubuntu.mirrors.linux.ro


1
0
_acme-challenge.mirror.linux.ro

Name Error - The domain name does not exist
1
0
_acme-challenge.ubuntu.mirror.linux.ro

Name Error - The domain name does not exist
1
0
_acme-challenge.ubuntu.mirrors.linux.ro

Name Error - The domain name does not exist
1
0
_acme-challenge.mirror.linux.ro.mirror.linux.ro

Name Error - The domain name does not exist
1
0
_acme-challenge.ubuntu.mirrors.linux.ro.mirrors.linux.ro

Name Error - The domain name does not exist
1
0
_acme-challenge.ubuntu.mirror.linux.ro.ubuntu.mirror.linux.ro

Name Error - The domain name does not exist
1
0
_acme-challenge.ubuntu.mirrors.linux.ro.ubuntu.mirrors.linux.ro

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
SPF
TXT
ubuntu.mirrors.linux.ro

32768TXT expected, but CNAME found. CNAME not allowed, only TXT queries are allowed. See RFC 7208, 4.4.

 

 

17. Cipher Suites

Summary
DomainIPPortnum CipherstimeStd.ProtocolForward Secrecy
ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
25
29 Ciphers143.52 secSMTP
13 without, 16 FS
55.17 %
ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
587
29 Ciphers142.39 secSMTP (encrypted, submission)
13 without, 16 FS
55.17 %
Complete

2
58 Ciphers
29.00 Ciphers/Check
285.91 sec142.95 sec/Check
26 without, 32 FS
55.17 %

Details
DomainIPPortCipher (OpenSsl / IANA)
ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
25
ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS
29 Ciphers, 143.52 sec
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

DH
RSA
AESGCM(256)
AEAD




ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ECDH
RSA
AESGCM(128)
AEAD




DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

DH
RSA
AESGCM(128)
AEAD




ECDHE-RSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x28
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

ECDH
RSA
AES(256)
SHA384




DHE-RSA-AES256-SHA256
(Weak)
TLSv1.2
0x00,0x6B
FS

TLS_DHE_RSA_WITH_AES_256_CBC_SHA256

DH
RSA
AES(256)
SHA256




AES256-GCM-SHA384
(Weak)
TLSv1.2
0x00,0x9D
No FS

TLS_RSA_WITH_AES_256_GCM_SHA384

RSA
RSA
AESGCM(256)
AEAD




AES256-SHA256
(Weak)
TLSv1.2
0x00,0x3D
No FS

TLS_RSA_WITH_AES_256_CBC_SHA256

RSA
RSA
AES(256)
SHA256




ECDHE-RSA-AES128-SHA256
(Weak)
TLSv1.2
0xC0,0x27
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

ECDH
RSA
AES(128)
SHA256




DHE-RSA-AES128-SHA256
(Weak)
TLSv1.2
0x00,0x67
FS

TLS_DHE_RSA_WITH_AES_128_CBC_SHA256

DH
RSA
AES(128)
SHA256




AES128-GCM-SHA256
(Weak)
TLSv1.2
0x00,0x9C
No FS

TLS_RSA_WITH_AES_128_GCM_SHA256

RSA
RSA
AESGCM(128)
AEAD




AES128-SHA256
(Weak)
TLSv1.2
0x00,0x3C
No FS

TLS_RSA_WITH_AES_128_CBC_SHA256

RSA
RSA
AES(128)
SHA256




ECDHE-RSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x14
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

ECDH
RSA
AES(256)
SHA1




ECDHE-RSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x13
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

ECDH
RSA
AES(128)
SHA1




DHE-RSA-CAMELLIA256-SHA
(Weak)
SSLv3
0x00,0x88
FS

TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA

DH
RSA
Camellia(256)
SHA1




DHE-RSA-AES256-SHA
(Weak)
SSLv3
0x00,0x39
FS

TLS_DHE_RSA_WITH_AES_256_CBC_SHA

DH
RSA
AES(256)
SHA1




CAMELLIA256-SHA
(Weak)
SSLv3
0x00,0x84
No FS

TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

RSA
RSA
Camellia(256)
SHA1




AES256-SHA
(Weak)
SSLv3
0x00,0x35
No FS

TLS_RSA_WITH_AES_256_CBC_SHA

RSA
RSA
AES(256)
SHA1




ECDHE-RSA-DES-CBC3-SHA
(Weak)
SSLv3
0xC0,0x12
FS

TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

ECDH
RSA
3DES(168)
SHA1




DES-CBC3-SHA
(Weak)
SSLv3
0x00,0x0A
No FS

TLS_RSA_WITH_3DES_EDE_CBC_SHA

RSA
RSA
3DES(168)
SHA1




DHE-RSA-CAMELLIA128-SHA
(Weak)
SSLv3
0x00,0x45
FS

TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA

DH
RSA
Camellia(128)
SHA1




DHE-RSA-AES128-SHA
(Weak)
SSLv3
0x00,0x33
FS

TLS_DHE_RSA_WITH_AES_128_CBC_SHA

DH
RSA
AES(128)
SHA1




DHE-RSA-SEED-SHA
(Weak)
SSLv3
0x00,0x9A
FS

TLS_DHE_RSA_WITH_SEED_CBC_SHA

DH
RSA
SEED(128)
SHA1




CAMELLIA128-SHA
(Weak)
SSLv3
0x00,0x41
No FS

TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

RSA
RSA
Camellia(128)
SHA1




AES128-SHA
(Weak)
SSLv3
0x00,0x2F
No FS

TLS_RSA_WITH_AES_128_CBC_SHA

RSA
RSA
AES(128)
SHA1




SEED-SHA
(Weak)
SSLv3
0x00,0x96
No FS

TLS_RSA_WITH_SEED_CBC_SHA

RSA
RSA
SEED(128)
SHA1




ECDHE-RSA-RC4-SHA
(Insecure)
SSLv3
0xC0,0x11
No FS

TLS_ECDHE_RSA_WITH_RC4_128_SHA

ECDH
RSA
RC4(128)
SHA1




RC4-SHA
(Insecure)
SSLv3
0x00,0x05
No FS

TLS_RSA_WITH_RC4_128_SHA

RSA
RSA
RC4(128)
SHA1




RC4-MD5
(Insecure)
SSLv3
0x00,0x04
No FS

TLS_RSA_WITH_RC4_128_MD5

RSA
RSA
RC4(128)
MD5



587
ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS
29 Ciphers, 142.39 sec
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

DH
RSA
AESGCM(256)
AEAD




ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ECDH
RSA
AESGCM(128)
AEAD




DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

DH
RSA
AESGCM(128)
AEAD




ECDHE-RSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x28
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

ECDH
RSA
AES(256)
SHA384




DHE-RSA-AES256-SHA256
(Weak)
TLSv1.2
0x00,0x6B
FS

TLS_DHE_RSA_WITH_AES_256_CBC_SHA256

DH
RSA
AES(256)
SHA256




AES256-GCM-SHA384
(Weak)
TLSv1.2
0x00,0x9D
No FS

TLS_RSA_WITH_AES_256_GCM_SHA384

RSA
RSA
AESGCM(256)
AEAD




AES256-SHA256
(Weak)
TLSv1.2
0x00,0x3D
No FS

TLS_RSA_WITH_AES_256_CBC_SHA256

RSA
RSA
AES(256)
SHA256




ECDHE-RSA-AES128-SHA256
(Weak)
TLSv1.2
0xC0,0x27
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

ECDH
RSA
AES(128)
SHA256




DHE-RSA-AES128-SHA256
(Weak)
TLSv1.2
0x00,0x67
FS

TLS_DHE_RSA_WITH_AES_128_CBC_SHA256

DH
RSA
AES(128)
SHA256




AES128-GCM-SHA256
(Weak)
TLSv1.2
0x00,0x9C
No FS

TLS_RSA_WITH_AES_128_GCM_SHA256

RSA
RSA
AESGCM(128)
AEAD




AES128-SHA256
(Weak)
TLSv1.2
0x00,0x3C
No FS

TLS_RSA_WITH_AES_128_CBC_SHA256

RSA
RSA
AES(128)
SHA256




ECDHE-RSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x14
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

ECDH
RSA
AES(256)
SHA1




ECDHE-RSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x13
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

ECDH
RSA
AES(128)
SHA1




DHE-RSA-CAMELLIA256-SHA
(Weak)
SSLv3
0x00,0x88
FS

TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA

DH
RSA
Camellia(256)
SHA1




DHE-RSA-AES256-SHA
(Weak)
SSLv3
0x00,0x39
FS

TLS_DHE_RSA_WITH_AES_256_CBC_SHA

DH
RSA
AES(256)
SHA1




CAMELLIA256-SHA
(Weak)
SSLv3
0x00,0x84
No FS

TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

RSA
RSA
Camellia(256)
SHA1




AES256-SHA
(Weak)
SSLv3
0x00,0x35
No FS

TLS_RSA_WITH_AES_256_CBC_SHA

RSA
RSA
AES(256)
SHA1




ECDHE-RSA-DES-CBC3-SHA
(Weak)
SSLv3
0xC0,0x12
FS

TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

ECDH
RSA
3DES(168)
SHA1




DES-CBC3-SHA
(Weak)
SSLv3
0x00,0x0A
No FS

TLS_RSA_WITH_3DES_EDE_CBC_SHA

RSA
RSA
3DES(168)
SHA1




DHE-RSA-CAMELLIA128-SHA
(Weak)
SSLv3
0x00,0x45
FS

TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA

DH
RSA
Camellia(128)
SHA1




DHE-RSA-AES128-SHA
(Weak)
SSLv3
0x00,0x33
FS

TLS_DHE_RSA_WITH_AES_128_CBC_SHA

DH
RSA
AES(128)
SHA1




DHE-RSA-SEED-SHA
(Weak)
SSLv3
0x00,0x9A
FS

TLS_DHE_RSA_WITH_SEED_CBC_SHA

DH
RSA
SEED(128)
SHA1




CAMELLIA128-SHA
(Weak)
SSLv3
0x00,0x41
No FS

TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

RSA
RSA
Camellia(128)
SHA1




AES128-SHA
(Weak)
SSLv3
0x00,0x2F
No FS

TLS_RSA_WITH_AES_128_CBC_SHA

RSA
RSA
AES(128)
SHA1




SEED-SHA
(Weak)
SSLv3
0x00,0x96
No FS

TLS_RSA_WITH_SEED_CBC_SHA

RSA
RSA
SEED(128)
SHA1




ECDHE-RSA-RC4-SHA
(Insecure)
SSLv3
0xC0,0x11
No FS

TLS_ECDHE_RSA_WITH_RC4_128_SHA

ECDH
RSA
RC4(128)
SHA1




RC4-SHA
(Insecure)
SSLv3
0x00,0x05
No FS

TLS_RSA_WITH_RC4_128_SHA

RSA
RSA
RC4(128)
SHA1




RC4-MD5
(Insecure)
SSLv3
0x00,0x04
No FS

TLS_RSA_WITH_RC4_128_MD5

RSA
RSA
RC4(128)
MD5

 

18. Portchecks

DomainIPPortDescriptionResultAnswer
ubuntu.mirrors.linux.ro
81.196.9.142
21
FTP
open
220-

ubuntu.mirrors.linux.ro
81.196.9.142
21
FTP
open
220-

ubuntu.mirrors.linux.ro
81.196.9.142
22
SSH



ubuntu.mirrors.linux.ro
81.196.9.142
22
SSH



ubuntu.mirrors.linux.ro
81.196.9.142
25
SMTP



ubuntu.mirrors.linux.ro
81.196.9.142
25
SMTP



ubuntu.mirrors.linux.ro
81.196.9.142
53
DNS



ubuntu.mirrors.linux.ro
81.196.9.142
53
DNS



ubuntu.mirrors.linux.ro
81.196.9.142
110
POP3



ubuntu.mirrors.linux.ro
81.196.9.142
110
POP3



ubuntu.mirrors.linux.ro
81.196.9.142
143
IMAP



ubuntu.mirrors.linux.ro
81.196.9.142
143
IMAP



ubuntu.mirrors.linux.ro
81.196.9.142
465
SMTP (encrypted)



ubuntu.mirrors.linux.ro
81.196.9.142
465
SMTP (encrypted)



ubuntu.mirrors.linux.ro
81.196.9.142
587
SMTP (encrypted, submission)



ubuntu.mirrors.linux.ro
81.196.9.142
587
SMTP (encrypted, submission)



ubuntu.mirrors.linux.ro
81.196.9.142
993
IMAP (encrypted)



ubuntu.mirrors.linux.ro
81.196.9.142
993
IMAP (encrypted)



ubuntu.mirrors.linux.ro
81.196.9.142
995
POP3 (encrypted)



ubuntu.mirrors.linux.ro
81.196.9.142
995
POP3 (encrypted)



ubuntu.mirrors.linux.ro
81.196.9.142
1433
MS SQL



ubuntu.mirrors.linux.ro
81.196.9.142
1433
MS SQL



ubuntu.mirrors.linux.ro
81.196.9.142
2082
cPanel (http)



ubuntu.mirrors.linux.ro
81.196.9.142
2082
cPanel (http)



ubuntu.mirrors.linux.ro
81.196.9.142
2083
cPanel (https)



ubuntu.mirrors.linux.ro
81.196.9.142
2083
cPanel (https)



ubuntu.mirrors.linux.ro
81.196.9.142
2086
WHM (http)



ubuntu.mirrors.linux.ro
81.196.9.142
2086
WHM (http)



ubuntu.mirrors.linux.ro
81.196.9.142
2087
WHM (https)



ubuntu.mirrors.linux.ro
81.196.9.142
2087
WHM (https)



ubuntu.mirrors.linux.ro
81.196.9.142
2089
cPanel Licensing



ubuntu.mirrors.linux.ro
81.196.9.142
2089
cPanel Licensing



ubuntu.mirrors.linux.ro
81.196.9.142
2095
cPanel Webmail (http)



ubuntu.mirrors.linux.ro
81.196.9.142
2095
cPanel Webmail (http)



ubuntu.mirrors.linux.ro
81.196.9.142
2096
cPanel Webmail (https)



ubuntu.mirrors.linux.ro
81.196.9.142
2096
cPanel Webmail (https)



ubuntu.mirrors.linux.ro
81.196.9.142
2222
DirectAdmin (http)



ubuntu.mirrors.linux.ro
81.196.9.142
2222
DirectAdmin (http)



ubuntu.mirrors.linux.ro
81.196.9.142
2222
DirectAdmin (https)



ubuntu.mirrors.linux.ro
81.196.9.142
2222
DirectAdmin (https)



ubuntu.mirrors.linux.ro
81.196.9.142
3306
mySql



ubuntu.mirrors.linux.ro
81.196.9.142
3306
mySql



ubuntu.mirrors.linux.ro
81.196.9.142
5224
Plesk Licensing



ubuntu.mirrors.linux.ro
81.196.9.142
5224
Plesk Licensing



ubuntu.mirrors.linux.ro
81.196.9.142
5432
PostgreSQL



ubuntu.mirrors.linux.ro
81.196.9.142
5432
PostgreSQL



ubuntu.mirrors.linux.ro
81.196.9.142
8080
Ookla Speedtest (http)



ubuntu.mirrors.linux.ro
81.196.9.142
8080
Ookla Speedtest (http)



ubuntu.mirrors.linux.ro
81.196.9.142
8080
Ookla Speedtest (https)



ubuntu.mirrors.linux.ro
81.196.9.142
8080
Ookla Speedtest (https)



ubuntu.mirrors.linux.ro
81.196.9.142
8083
VestaCP http



ubuntu.mirrors.linux.ro
81.196.9.142
8083
VestaCP http



ubuntu.mirrors.linux.ro
81.196.9.142
8083
VestaCP https



ubuntu.mirrors.linux.ro
81.196.9.142
8083
VestaCP https



ubuntu.mirrors.linux.ro
81.196.9.142
8443
Plesk Administration (https)



ubuntu.mirrors.linux.ro
81.196.9.142
8443
Plesk Administration (https)



ubuntu.mirrors.linux.ro
81.196.9.142
8447
Plesk Installer + Updates



ubuntu.mirrors.linux.ro
81.196.9.142
8447
Plesk Installer + Updates



ubuntu.mirrors.linux.ro
81.196.9.142
8880
Plesk Administration (http)



ubuntu.mirrors.linux.ro
81.196.9.142
8880
Plesk Administration (http)



ubuntu.mirrors.linux.ro
81.196.9.142
10000
Webmin (http)



ubuntu.mirrors.linux.ro
81.196.9.142
10000
Webmin (http)



ubuntu.mirrors.linux.ro
81.196.9.142
10000
Webmin (https)



ubuntu.mirrors.linux.ro
81.196.9.142
10000
Webmin (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
21
FTP
open
220-

ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
21
FTP
open
220-

ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
22
SSH
open
SSH-2.0-OpenSSH_5.3

ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
22
SSH
open
SSH-2.0-OpenSSH_5.3
Bad: SSH without DNS SSHFP Record found

Possible DNS SSHFP Entries:
ubuntu.mirrors.linux.ro IN SSHFP 1 2 313fb5437e29efb40849e52f93f511c5b090e0207373b43e4801aa47bdb8eac2
ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
25
SMTP
open
220 mirror.linux.ro ESMTP Exim 4.92.3 Sun, 30 Aug 2026 16:02:45 +0300

 

Answer EHLO: 250-mirror.linux.ro Hello intern.server-daten.de [2a01:238:301b::1227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP

 

Answer AUTH LOGIN: (no AUTH option found)
Mail certificate is invalid
ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
25
SMTP
open
220 mirror.linux.ro ESMTP Exim 4.92.3 Sun, 30 Aug 2026 16:02:45 +0300
Mail certificate is invalid

Answer EHLO: 250-mirror.linux.ro Hello intern.server-daten.de [2a01:238:301b::1227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP Good: STARTTLS found


Excellent: No unencrypted login possible

Mail From: openrelay-test@check-your-website.server-daten.de
RCPT TO: openrelay-result@check-your-website.server-daten.de
Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
53
DNS



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
53
DNS



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
110
POP3



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
110
POP3



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
143
IMAP



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
143
IMAP



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
465
SMTP (encrypted)
open


ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
465
SMTP (encrypted)
open


ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
587
SMTP (encrypted, submission)
open
220 mirror.linux.ro ESMTP Exim 4.92.3 Sun, 30 Aug 2026 16:02:45 +0300

 

Answer EHLO: 250-mirror.linux.ro Hello intern.server-daten.de [2a01:238:301b::1227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP

 

Answer AUTH LOGIN: (no AUTH option found)
Mail certificate is invalid
ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
587
SMTP (encrypted, submission)
open
220 mirror.linux.ro ESMTP Exim 4.92.3 Sun, 30 Aug 2026 16:02:45 +0300
Mail certificate is invalid

Answer EHLO: 250-mirror.linux.ro Hello intern.server-daten.de [2a01:238:301b::1227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-CHUNKING 250-STARTTLS 250-PRDR 250 HELP Good: STARTTLS found


Excellent: No unencrypted login possible

Mail From: openrelay-test@check-your-website.server-daten.de
RCPT TO: openrelay-result@check-your-website.server-daten.de
Excellent: Server want's Renegotiating after sending the RCPT TO - Command, no open relay after STARTTLS
ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
993
IMAP (encrypted)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
993
IMAP (encrypted)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
995
POP3 (encrypted)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
995
POP3 (encrypted)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
1433
MS SQL



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
1433
MS SQL



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2082
cPanel (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2082
cPanel (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2083
cPanel (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2083
cPanel (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2086
WHM (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2086
WHM (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2087
WHM (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2087
WHM (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2089
cPanel Licensing



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2089
cPanel Licensing



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2095
cPanel Webmail (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2095
cPanel Webmail (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2096
cPanel Webmail (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2096
cPanel Webmail (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2222
DirectAdmin (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2222
DirectAdmin (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2222
DirectAdmin (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
2222
DirectAdmin (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
3306
mySql



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
3306
mySql



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
5224
Plesk Licensing



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
5224
Plesk Licensing



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
5432
PostgreSQL



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
5432
PostgreSQL



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8080
Ookla Speedtest (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8080
Ookla Speedtest (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8080
Ookla Speedtest (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8080
Ookla Speedtest (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8083
VestaCP http



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8083
VestaCP http



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8083
VestaCP https



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8083
VestaCP https



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8443
Plesk Administration (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8443
Plesk Administration (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8447
Plesk Installer + Updates



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8447
Plesk Installer + Updates



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8880
Plesk Administration (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
8880
Plesk Administration (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
10000
Webmin (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
10000
Webmin (http)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
10000
Webmin (https)



ubuntu.mirrors.linux.ro
2a02:2f0c:d000:14::2
10000
Webmin (https)



 

 

Permalink: https://check-your-website.server-daten.de/?i=cb9bf909-6f10-404f-97d9-183a38822971

 

Last Result: https://check-your-website.server-daten.de/?q=ubuntu.mirrors.linux.ro - 2026-08-30 15:00:51

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=ubuntu.mirrors.linux.ro" target="_blank">Check this Site: ubuntu.mirrors.linux.ro</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=ubuntu.mirrors.linux.ro