Shortcuts: Top | Url-Checks | Comments | Connections | Certificates | CT-Logs | Html-Content | CAA | TXT |


A

Top config

last check:
18.04.2019 11:27:12


Older results

HostTIP-Addressis auth.∑ Queries∑ Timeout
vbcap.noncd.db.de
A
81.200.196.55
yes
1
0

AAAA

yes


www.vbcap.noncd.db.de

Name Error
yes
1
0


Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.05.2019, 00:00:00, Signature-Inception: 11.04.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
de
1 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 01.05.2019, 05:00:00, Signature-Inception: 18.04.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 5674, Flags 256

Public Key with Algorithm 8, KeyTag 39227, Flags 257 (SEP = Secure Entry Point)

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 1 Labels, original TTL: 7200 sec, Signature-expiration: 02.05.2019, 12:00:00, Signature-Inception: 11.04.2019, 12:00:00, KeyTag 39227, Signer-Name: de

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 39227 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 39227, DigestType 2 and Digest "qrcwg7nvcOSl6UdppBisEuiH/DwIde8gbDRR3EC2xPo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
db.de
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


noncd.db.de
0 DS RR in the parent zone found

0 DNSKEY RR found


vbcap.noncd.db.de
0 DS RR in the parent zone found

0 DNSKEY RR found


www.vbcap.noncd.db.de
0 DS RR in the parent zone found


DomainNameserverNS-IP
www.vbcap.noncd.db.de
  ns1.eurodns.com

vbcap.noncd.db.de
  ns1.eurodns.com
204.74.66.130

 
2001:502:f3ff::282
noncd.db.de
  ns1.eurodns.com

db.de
  ns1.eurodns.com


  ns2.eurodns.com


  ns3.eurodns.com


  ns4.eurodns.com

de
  a.nic.de / ns-2.de.de8.bind


  f.nic.de / ns-1.de.de1.bind


  l.de.net / ns-2.de.fr1.bind


  n.de.net / s3.amx


  s.de.net / ns-2.de.de9.bind


  z.nic.de / ns-1.de.de8.bind



SOA - records (beta)

Domain:de
Primary:f.nic.de
Mail:its.denic.de
Serial:2019041845
Refresh:7200
Retry:7200
Expire:3600000
TTL:7200
num Entries:6


Domain:db.de
Primary:ns1.eurodns.com
Mail:hostmaster.eurodns.com
Serial:2019041800
Refresh:43200
Retry:7200
Expire:1209600
TTL:86400
num Entries:4


Domain:noncd.db.de
Primary:ns1.eurodns.com
Mail:hostmaster.eurodns.com
Serial:2019041800
Refresh:43200
Retry:7200
Expire:1209600
TTL:86400
num Entries:1


Domain:vbcap.noncd.db.de
Primary:ns1.eurodns.com
Mail:hostmaster.eurodns.com
Serial:2019041800
Refresh:43200
Retry:7200
Expire:1209600
TTL:86400
num Entries:2



show header:
Domainname Http-StatusredirectSec.G
• http://vbcap.noncd.db.de/
81.200.196.55
302
https://vbcap.noncd.db.de/
0.050
A
Location: https://vbcap.noncd.db.de/
Server: BigIP
Connection: close
Content-Length: 0

• https://vbcap.noncd.db.de/
81.200.196.55
200

0.244
A
Content-Type: text/html
Last-Modified: Wed, 10 Apr 2019 11:39:17 GMT
Accept-Ranges: bytes
ETag: "a849c3792efd41:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 18 Apr 2019 09:27:35 GMT
Connection: close
Content-Length: 703
Strict-Transport-Security: max-age=16070400; includeSubDomains

• http://vbcap.noncd.db.de/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
81.200.196.55
404

0.036
A
Not Found
Visible Content: Challenge-response token not found.
Server: BigIP
Connection: close
Content-Length: 35

Comments

Aname "vbcap.noncd.db.de" is subdomain, public suffix is "de", top-level-domain-type is "country-code", Country is Germany, tld-manager is "DENIC eG"
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
ADNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
Agood: destination is https
Agood - only one version with Http-Status 200
Agood: one preferred version: non-www is preferred
Agood: every https has a Strict Transport Security Header
Agood: HSTS has includeSubdomains - directive
https://vbcap.noncd.db.de/ 81.200.196.55


Url with incomplete Content-Type - header - missing charset
Ahttp://vbcap.noncd.db.de/ 81.200.196.55
302
https://vbcap.noncd.db.de/
correct redirect http - https with the same domain name
Bwarning: HSTS max-age is too short - minimum 31536000 = 365 days required, 16070400 seconds = 186 days found
AGood: Nameserver supports TCP connections: 2 good Nameserver
AGood: Nameserver supports Echo Capitalization: 2 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 2 good Nameserver
Nameserver doesn't pass all EDNS-Checks: ns1.eurodns.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
AInfo: Different Server-Headers found
ADuration: 23614 milliseconds, 23.614 seconds


Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
vbcap.noncd.db.de
81.200.196.55
443
ok
Tls12
ECDH Ephermal
384
Aes128
128
Sha256
error checking OCSP stapling
ok
Chain (complete)
1CN=vbcap.noncd.db.de

2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


Certificates

1.
1.
CN=vbcap.noncd.db.de
14.03.2019
12.06.2019
expires in 52 days
vbcap.noncd.db.de - 1 entry

KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:03463D19490EA004647384BBC0AE94EF3D38
Thumbprint:6B14B96B10F8869545354660083402330D2C2A46
SHA256 / Certificate:ayVhq58FJRSMpPhxr7jDtUXc9gOz43O4e+dyd+5bwHg=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):4275b592ed6519239bf11d40cf1c71b1e8aff3d1b46f60faf456ace4dec7848d
OCSP - Url:http://ocsp.int-x3.letsencrypt.org
OCSP - must staple:no
Certificate Transparency:yes


2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
17.03.2016
17.03.2021
expires in 696 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0A0141420000015385736A0B85ECA708
Thumbprint:E6A3B45B062D509B3382282D196EFE97D5956CCB
SHA256 / Certificate:JYR9Zo608E/dQLErawdAxWfafQJDCOtsLJb+QdneIY0=
SHA256 hex / Cert (DANE * 0 1):25847d668eb4f04fdd40b12b6b0740c567da7d024308eb6c2c96fe41d9de218d
SHA256 hex / PublicKey (DANE * 1 1):60b87575447dcba2a36b7d11ac09fb24a9db406fee12d2cc90180517616e8a18
OCSP - Url:http://isrg.trustid.ocsp.identrust.com
OCSP - must staple:no
Certificate Transparency:no


3.
CN=DST Root CA X3, O=Digital Signature Trust Co.
30.09.2000
30.09.2021
expires in 893 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:44AFB080D6A327BA893039862EF8406B
Thumbprint:DAC9024F54D8F6DF94935FB1732638CA6AD77C13
SHA256 / Certificate:BocmAzGnJAPZCfEF5pvPDTLhvSST/8bZIG0RvNZ3Bzk=
SHA256 hex / Cert (DANE * 0 1):0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739
SHA256 hex / PublicKey (DANE * 1 1):563b3caf8cfef34c2335caf560a7a95906e8488462eb75ac59784830df9e5b2b
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no



Last Certificates - Certificate Transparency Log Check (BETA)

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
1
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1291703448
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-14 10:34:31
2019-06-12 09:34:31
vbcap.noncd.db.de
1 entries



Html-Content - Entries (BETA - mixed content and other checks)

Summary

DomainnameHtmlElementrel/property∑ size∑ problems
https://vbcap.noncd.db.de/
81.200.196.55
a

1

0

img

1
99,710 Bytes
0

meta
other
1

0

Details

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://vbcap.noncd.db.de/
81.200.196.55
a

http://go.microsoft.com/fwlink/?linkid=66138&clcid=0x409


1
ok



img
src
iisstart.png
200
99710 Bytes

1
ok



meta
Content-Type
text/html; charset=iso-8859-1


1
ok



CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
vbcap.noncd.db.de
0

no CAA entry found
1
0
noncd.db.de
0

no CAA entry found
1
0
db.de
0

no CAA entry found
1
0
de
0

no CAA entry found
1
0


TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
vbcap.noncd.db.de

ok
1
0
_acme-challenge.vbcap.noncd.db.de

Name Error - The domain name does not exist
1
0
_acme-challenge.vbcap.noncd.db.de.vbcap.noncd.db.de

Name Error - The domain name does not exist
1
0



Permalink: https://check-your-website.server-daten.de/?i=397f88a6-2f16-417e-b97c-525db54df83f


Last Result: https://check-your-website.server-daten.de/?q=vbcap.noncd.db.de