Shortcuts: Top | Url-Checks | Comments | Connections | Certificates | CT-Logs | Html-Content | CAA | TXT |


N

No trusted Certificate

last check:
15.04.2019 11:46:43


Older results

No older results found
HostTIP-Addressis auth.∑ Queries∑ Timeout
val.teacup.fr
A
92.175.249.181
yes
1
0

AAAA

yes


www.val.teacup.fr

Name Error
yes
1
0


Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.05.2019, 00:00:00, Signature-Inception: 11.04.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
fr
2 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 28.04.2019, 05:00:00, Signature-Inception: 15.04.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

3 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 24135, Flags 256

Public Key with Algorithm 8, KeyTag 42104, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 50650, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 1 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2019, 07:52:26, Signature-Inception: 02.04.2019, 07:52:26, KeyTag 42104, Signer-Name: fr

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 42104 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 42104, DigestType 2 and Digest "jZE6ScP6Kjm6AGW04Yunk+OtEo98bIqgCK7+ChRDXdU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
teacup.fr
1 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 2 Labels, original TTL: 172800 sec, Signature-expiration: 11.06.2019, 17:20:03, Signature-Inception: 12.04.2019, 16:20:03, KeyTag 24135, Signer-Name: fr

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 24135 used to validate the DS RRSet in the parent zone

2 DNSKEY RR found

Public Key with Algorithm 7, KeyTag 5874, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 7, KeyTag 46952, Flags 256

2 RRSIG RR to validate DNSKEY RR found

Algorithm: 7, 2 Labels, original TTL: 86400 sec, Signature-expiration: 11.05.2019, 15:42:11, Signature-Inception: 11.04.2019, 15:42:11, KeyTag 5874, Signer-Name: teacup.fr

Algorithm: 7, 2 Labels, original TTL: 86400 sec, Signature-expiration: 11.05.2019, 15:42:11, Signature-Inception: 11.04.2019, 15:42:11, KeyTag 46952, Signer-Name: teacup.fr

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 5874 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 46952 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 5874, DigestType 2 and Digest "ilgn+DawXbt+K23Kl8Zt6s38kTRmkbsZ7Mvy23L2tpk=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
val.teacup.fr
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found



RRSIG Type 1, expiration 2019-05-11 15:42:11 validates the A - Result: 92.175.249.181

RRSIG Type 50, expiration 2019-05-11 15:42:11 validates the NSEC3 RR that proves the not-existence of the CNAME RR

RRSIG Type 50, expiration 2019-05-11 15:42:11 validates the NSEC3 RR that proves the not-existence of the TXT RR

RRSIG Type 50, expiration 2019-05-11 15:42:11 validates the NSEC3 RR that proves the not-existence of the AAAA RR

RRSIG Type 50, expiration 2019-05-11 15:42:11 validates the NSEC3 RR that proves the not-existence of the TLSA RR

RRSIG Type 50, expiration 2019-05-11 15:42:11 validates the NSEC3 RR that proves the not-existence of the CAA RR
www.val.teacup.fr
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.


DomainNameserverNS-IP
www.val.teacup.fr
  dns102.ovh.net

val.teacup.fr
  dns102.ovh.net
213.251.188.146

 
2001:41d0:1:4a92::1
teacup.fr
  dns102.ovh.net


  ns102.ovh.net

fr
  d.ext.nic.fr


  d.nic.fr / dns.fra.nic.fr


  e.ext.nic.fr / ns-ext1a.sidn.nl


  f.ext.nic.fr / s2.amx


  g.ext.nic.fr / 2.ber.pch



SOA - records (beta)

Domain:fr
Primary:nsmaster.nic.fr
Mail:hostmaster.nic.fr
Serial:2225164341
Refresh:3600
Retry:1800
Expire:3600000
TTL:5400
num Entries:1


Domain:fr
Primary:nsmaster.nic.fr
Mail:hostmaster.nic.fr
Serial:2225164343
Refresh:3600
Retry:1800
Expire:3600000
TTL:5400
num Entries:4


Domain:teacup.fr
Primary:dns102.ovh.net
Mail:tech.ovh.net
Serial:2019041109
Refresh:86400
Retry:3600
Expire:3600000
TTL:300
num Entries:2


Domain:val.teacup.fr
Primary:dns102.ovh.net
Mail:tech.ovh.net
Serial:2019041109
Refresh:86400
Retry:3600
Expire:3600000
TTL:300
num Entries:2



show header:
Domainname Http-StatusredirectSec.G
• http://val.teacup.fr/
92.175.249.181
-14

10.023
T
Timeout - The operation has timed out

• https://val.teacup.fr/
92.175.249.181
403

0.783
N
Forbidden
Certificate error: RemoteCertificateChainErrors
Date: Mon, 15 Apr 2019 09:47:26 GMT
Server: Apache/2.4.10 (Debian)
Status: 403 Forbidden
Content-Length: 773
Connection: close
Content-Type: text/html; charset=UTF-8

• http://val.teacup.fr/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
92.175.249.181
-14

10.030
T
Timeout - The operation has timed out
Visible Content:

Comments

Aname "val.teacup.fr" is subdomain, public suffix is "fr", top-level-domain-type is "country-code", Country is France, tld-manager is "Association Française pour le Nommage Internet en Coopération (A.F.N.I.C.)"
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
CError - no version with Http-Status 200
Hfatal error: No https - result with http-status 200, no encryption
Mhttps://val.teacup.fr/ 92.175.249.181
403

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://val.teacup.fr/ 92.175.249.181
403

Error - Certificate isn't trusted, RemoteCertificateChainErrors
AGood: Nameserver supports TCP connections: 2 good Nameserver
AGood: Nameserver supports Echo Capitalization: 2 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 2 good Nameserver
Nameserver doesn't pass all EDNS-Checks: d.ext.nic.fr: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. COOKIE: fatal timeout. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: dns102.ovh.net: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
ADuration: 57630 milliseconds, 57.630 seconds


Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
val.teacup.fr
92.175.249.181
443
Certificate/chain invalid
Tls12
DiffieHellman
2048
Aes128
128
Sha256
error checking OCSP stapling
ok
Chain (complete)
1CN=val.teacup.fr

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


Certificates

1.
1.
CN=val.teacup.fr
13.01.2019
14.04.2019
7 days expired
val.teacup.fr - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:036964AAA1B7F5C686C9704AA9322F67185D
Thumbprint:217F77F93531428AFBFAC5C9F5F65AD60CCF9004
SHA256 / Certificate:06jbsBDFL2yy62NNRPwCVkDXUWmWOpCOYUawE6Ppdwo=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):0c675dbaf0e2fbf2ea56402df94ff7a0305f8ea785ce69d44bd1eec312fb8efc
OCSP - Url:http://ocsp.int-x3.letsencrypt.org
OCSP - must staple:no
Certificate Transparency:yes

NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
17.03.2016
17.03.2021
expires in 696 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0A0141420000015385736A0B85ECA708
Thumbprint:E6A3B45B062D509B3382282D196EFE97D5956CCB
SHA256 / Certificate:JYR9Zo608E/dQLErawdAxWfafQJDCOtsLJb+QdneIY0=
SHA256 hex / Cert (DANE * 0 1):25847d668eb4f04fdd40b12b6b0740c567da7d024308eb6c2c96fe41d9de218d
SHA256 hex / PublicKey (DANE * 1 1):60b87575447dcba2a36b7d11ac09fb24a9db406fee12d2cc90180517616e8a18
OCSP - Url:http://isrg.trustid.ocsp.identrust.com
OCSP - must staple:no
Certificate Transparency:no


3.
CN=DST Root CA X3, O=Digital Signature Trust Co.
30.09.2000
30.09.2021
expires in 893 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:44AFB080D6A327BA893039862EF8406B
Thumbprint:DAC9024F54D8F6DF94935FB1732638CA6AD77C13
SHA256 / Certificate:BocmAzGnJAPZCfEF5pvPDTLhvSST/8bZIG0RvNZ3Bzk=
SHA256 hex / Cert (DANE * 0 1):0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739
SHA256 hex / PublicKey (DANE * 1 1):563b3caf8cfef34c2335caf560a7a95906e8488462eb75ac59784830df9e5b2b
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no



Last Certificates - Certificate Transparency Log Check (BETA)

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
0
12
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, C=GB, ST=Greater Manchester
0
0
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1108078139
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-01-13 21:52:31
2019-04-13 20:52:31
val.teacup.fr
1 entries


946978659
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-11-14 21:08:22
2019-02-12 21:08:22
val.teacup.fr
1 entries


838987111
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-09-15 19:16:36
2018-12-14 20:16:36
val.teacup.fr
1 entries


705020317
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-07-17 19:55:40
2018-10-15 19:55:40
val.teacup.fr
1 entries


470996829
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-05-18 19:48:07
2018-08-16 19:48:07
val.teacup.fr
1 entries


359459025
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-03-19 09:24:45
2018-06-17 08:24:45
val.teacup.fr
1 entries


306614783
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-01-18 09:46:32
2018-04-18 08:46:32
val.teacup.fr
1 entries


258483871
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-11-19 09:40:44
2018-02-17 09:40:44
val.teacup.fr
1 entries


213985351
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-09-20 07:54:00
2017-12-19 08:54:00
val.teacup.fr
1 entries


176910039
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-07-22 07:30:00
2017-10-20 07:30:00
val.teacup.fr
1 entries


142846149
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-05-23 07:05:00
2017-08-21 07:05:00
val.teacup.fr
1 entries


108238145
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-03-24 07:09:00
2017-06-22 06:09:00
val.teacup.fr
1 entries


319511839
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, C=GB, ST=Greater Manchester
2016-07-04 22:00:00
2017-07-05 21:59:59
Domain Control Validated, PositiveSSL, val.teacup.fr, www.val.teacup.fr
2 entries



Html-Content - Entries (BETA - mixed content and other checks)

Summary

DomainnameHtmlElementrel/property∑ size∑ problems
https://val.teacup.fr/
92.175.249.181
a

1

0

img

1
38,804 Bytes
0

meta
other
1

0

Details

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://val.teacup.fr/
92.175.249.181
a

/val7777


1
ok



img / src

val7777/logovalmartin.jpg
200
38804 Bytes

1
ok



meta
Content-type
text/html;charset=ISO-8859-1


1
ok



CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
val.teacup.fr
0

no CAA entry found
1
0
teacup.fr
0

no CAA entry found
1
0
fr
0

no CAA entry found
1
0


TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
val.teacup.fr

ok
1
0
_acme-challenge.val.teacup.fr

Name Error - The domain name does not exist
1
0
_acme-challenge.val.teacup.fr.val.teacup.fr

Name Error - The domain name does not exist
1
0



Permalink: https://check-your-website.server-daten.de/?i=8ebec6e3-4bba-436e-b017-adad7381fa42


Last Result: https://check-your-website.server-daten.de/?q=val.teacup.fr