Check DNS, Urls + Redirects, Certificates and Content of your Website

hide

skip EDNS-Check

skip Content-Check

check links

Wrong redirect http ⇒ https with new domain name

Checked:
28.10.2019 16:25:12

Older results

No older results found

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
wyok.net	A	78.142.210.144 Bornova/Izmir/Turkey (TR) - Veridyen Bilisim Teknolojileri Sanayi ve Ticaret Limited Sirketi Hostname: nova.veridyen.com	yes	2	0
	AAAA		yes
www.wyok.net	CNAME	wyok.net	yes	1	0
	A	78.142.210.144 Bornova/Izmir/Turkey (TR) - Veridyen Bilisim Teknolojileri Sanayi ve Ticaret Limited Sirketi Hostname: nova.veridyen.com	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 22545, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 11.11.2019, 00:00:00 +, Signature-Inception: 21.10.2019, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: net
net	1 DS RR in the parent zone found


	1 RRSIG RR to validate DS RR found


	RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 10.11.2019, 05:00:00 +, Signature-Inception: 28.10.2019, 04:00:00 +, KeyTag 22545, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 22545 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 35886, Flags 257 (SEP = Secure Entry Point)


	Public Key with Algorithm 8, KeyTag 36407, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 11.11.2019, 16:28:30 +, Signature-Inception: 27.10.2019, 16:23:30 +, KeyTag 35886, Signer-Name: net


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 35886 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 35886, DigestType 2 and Digest "eGKyf19Rbr4ZaARE1M5edimBkxhCxGXwAjZAHYvZc+4=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: wyok.net
wyok.net	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "uicu20b5bespmjga15cd42rt1btthe25" between the hashed NSEC3-owner "uic8gleqrdkg5pjp0r49tqqret7ugb7f" and the hashed NextOwner "uid3vhngc57b15l41evs6l01rflgrge2". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner uic8gleqrdkg5pjp0r49tqqret7ugb7f.net., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 04.11.2019, 07:12:55 +, Signature-Inception: 28.10.2019, 05:02:55 +, KeyTag 36407, Signer-Name: net


	0 DNSKEY RR found




Zone: www.wyok.net
www.wyok.net	0 DS RR in the parent zone found

3. Name Servers

Domain	Nameserver	NS-IP
wyok.net	• ns1.veridyen.com	185.149.103.254 Izmir/Turkey (TR) - Veridyen Datacenter	•
	• ns2.veridyen.com	78.142.208.8 Bornova/Izmir/Turkey (TR) - Veridyen Bilisim Teknolojileri Sanayi ve Ticaret Limited Sirketi	•
net	• a.gtld-servers.net		•
	• b.gtld-servers.net		•
	• c.gtld-servers.net		•
	• d.gtld-servers.net		•
	• e.gtld-servers.net		•
	• f.gtld-servers.net		•
	• g.gtld-servers.net		•
	• h.gtld-servers.net		•
	• i.gtld-servers.net		•
	• j.gtld-servers.net		•
	• k.gtld-servers.net		•
	• l.gtld-servers.net		•
	• m.gtld-servers.net		•

4. SOA-Entries

Domain:	net
Zone-Name:
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1572276289
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	86400
num Entries:	9

Domain:	net
Zone-Name:
Primary:	a.gtld-servers.net
Mail:	nstld.verisign-grs.com
Serial:	1572276309
Refresh:	1800
Retry:	900
Expire:	604800
TTL:	86400
num Entries:	4

Domain:	wyok.net
Zone-Name:
Primary:	ns1.veridyen.com
Mail:	veridyen.gmail.com
Serial:	2019102857
Refresh:	3600
Retry:	7200
Expire:	1209600
TTL:	86400
num Entries:	2

5. Screenshots

No Screenshot listed, because no screenshot found. Perhaps the check is too old, the feature startet 2019-12-23.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://wyok.net/ 78.142.210.144	301	https://wyok.net/	0.156	A
Connection: close
Content-Type: text/html; charset=UTF-8
X-Pingback: http://wyok.net/xmlrpc.php
X-Redirect-By: WordPress
Location: https://wyok.net/
X-LiteSpeed-Cache: hit
Content-Length: 0
Date: Mon, 28 Oct 2019 15:25:33 GMT
Server: LiteSpeed

• http://www.wyok.net/ 78.142.210.144	301	https://wyok.net/	0.737	E
Connection: close
Content-Type: text/html; charset=UTF-8
X-Pingback: http://wyok.net/xmlrpc.php
X-Redirect-By: WordPress
Location: https://wyok.net/
X-Litespeed-Cache: miss
Content-Length: 0
Date: Mon, 28 Oct 2019 15:25:34 GMT
Server: LiteSpeed

• https://www.wyok.net/ 78.142.210.144	301	https://wyok.net/	3.860	B
Connection: close
Content-Type: text/html; charset=UTF-8
X-Pingback: https://wyok.net/xmlrpc.php
X-Redirect-By: WordPress
Location: https://wyok.net/
X-Litespeed-Cache: miss
Content-Length: 0
Date: Mon, 28 Oct 2019 15:25:39 GMT
Server: LiteSpeed
Alt-Svc: quic=":443"; ma=2592000; v="39,43,46", h3-Q039=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-22=":443"; ma=2592000

• https://wyok.net/ 78.142.210.144 GZip used - 6575 / 27646 - 76.22 % Inline-JavaScript (∑/total): 2/2601 Inline-CSS (∑/total): 2/351	200	Html is minified: 125.92 %	3.703	B
Connection: close
Content-Type: text/html; charset=UTF-8
X-Pingback: https://wyok.net/xmlrpc.php
Link: <https://wyok.net/wp-json/>; rel="https://api.w.org/",<https://wyok.net/>; rel=shortlink
Etag: "26-1572256324;gz"
X-LiteSpeed-Cache: hit
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 28 Oct 2019 15:25:35 GMT
Server: LiteSpeed
Alt-Svc: quic=":443"; ma=2592000; v="39,43,46", h3-Q039=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-22=":443"; ma=2592000

• http://www.wyok.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 78.142.210.144 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	301	http://wyok.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.423	D
Visible Content:
Connection: close
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Content-Type: text/html; charset=UTF-8
X-Redirect-By: WordPress
Location: http://wyok.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
X-Litespeed-Cache: miss
Content-Length: 0
Date: Mon, 28 Oct 2019 15:25:43 GMT
Server: LiteSpeed

• http://wyok.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 78.142.210.144 GZip used - 3025 / 7743 - 60.93 % Inline-JavaScript (∑/total): 1/2163 Inline-CSS (∑/total): 2/351	404	Html is minified: 187.48 %	0.517	A
Not Found
Visible Content: WOSO WORLD WİEV'S Menu Skip to content ANASAYFA This is somewhat embarrassing, isn’t it? It seems we can’t find what you’re looking for. Perhaps searching can help. Search for: Proudly powered by WordPress Info: Html-Content with meta and/or script, may be a problem creating a Letsencrypt certificate using http-01 validation
Connection: close
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Content-Type: text/html; charset=UTF-8
Link: <https://wyok.net/wp-json/>; rel="https://api.w.org/"
X-Litespeed-Cache: miss
Content-Length: 3025
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 28 Oct 2019 15:25:43 GMT
Server: LiteSpeed

7. Comments

	1. General Results, most used to calculate the result
A	name "wyok.net" is domain, public suffix is "net", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services"
A	good: All ip addresses are public addresses
A	good: No asked Authoritative Name Server had a timeout
A	good: destination is https
A	good - only one version with Http-Status 200
A	good: one preferred version: non-www is preferred
	HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
A	http://wyok.net/ 78.142.210.144	301	https://wyok.net/	correct redirect http - https with the same domain name
B	https://wyok.net/ 78.142.210.144	200		Missing HSTS-Header
B	https://www.wyok.net/ 78.142.210.144	301		Missing HSTS-Header
D	http://www.wyok.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 78.142.210.144	301	http://wyok.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	Wrong redirect one domain http to other domain http. First redirect to https without changing the domain, so no new dns query is required. So the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
E	http://www.wyok.net/ 78.142.210.144	301	https://wyok.net/	Wrong redirect one domain http to other domain https. First redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
I	http://wyok.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 78.142.210.144	404		Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Not used to calculate the result because it's a http - check. But listed so you should fix it.
N	78.142.210.144:465			Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	78.142.210.144:2083			Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	78.142.210.144:2087			Error - Certificate isn't trusted, RemoteCertificateNameMismatch
N	78.142.210.144:2096			Error - Certificate isn't trusted, RemoteCertificateNameMismatch
	2. DNS- and NameServer - Checks
A	Good: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: ns1.veridyen.com,ns2.veridyen.com
A	Good: Nameserver supports TCP connections: 2 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 2 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 2 good Nameserver
A	Good: All SOA have the same Serial Number
	Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.
	3. Content- and Performance-critical Checks
A	Good: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: Every https result with status 200 supports GZip.
	https://wyok.net/ 78.142.210.144	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
	https://wyok.net/ 78.142.210.144	200		Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
A	Good: All CSS / JavaScript files are sent with GZip. That reduces the content of the files. 22 external CSS / JavaScript files found
	Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 8 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 3 with Cache-Control max-age too short (minimum 7 days), 19 with Cache-Control long enough, 30 complete.
	Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 1 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 7 with Cache-Control long enough, 8 complete.
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Duration: 96230 milliseconds, 96.230 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

wyok.net

78.142.210.144

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

wyok.net

78.142.210.144

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported

no Tls.1.2
no Tls.1.1
no Tls.1.0

http/2 via ALPN supported

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - incomplete	1	CN=wyok.net
	2	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

www.wyok.net

78.142.210.144

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

www.wyok.net

78.142.210.144

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported

no Tls.1.2
no Tls.1.1
no Tls.1.0

http/2 via ALPN supported

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - incomplete	1	CN=wyok.net
	2	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

wyok.net

465

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

wyok.net

465

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - incomplete	1	CN=wyok.net
	2	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

wyok.net

2083

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

wyok.net

2083

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - incomplete	1	CN=wyok.net
	2	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

wyok.net

2087

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

wyok.net

2087

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - incomplete	1	CN=wyok.net
	2	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

wyok.net

2096

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

wyok.net

2096

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - incomplete	1	CN=wyok.net
	2	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

www.wyok.net

465

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

www.wyok.net

465

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - incomplete	1	CN=wyok.net
	2	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

www.wyok.net

2083

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

www.wyok.net

2083

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - incomplete	1	CN=wyok.net
	2	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

www.wyok.net

2087

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

www.wyok.net

2087

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - incomplete	1	CN=wyok.net
	2	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

www.wyok.net

2096

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

www.wyok.net

2096

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - incomplete	1	CN=wyok.net
	2	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

78.142.210.144

465

name does not match

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

78.142.210.144

465

name does not match

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - too much certificates, don't send root certificates	1	CN=nova.veridyen.com, OU=PositiveSSL
	2	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, C=US, ST=TX
	3	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, C=GB, ST=Greater Manchester

78.142.210.144

2083

name does not match

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

78.142.210.144

2083

name does not match

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - too much certificates, don't send root certificates	1	CN=nova.veridyen.com, OU=PositiveSSL
	2	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, C=US, ST=TX
	3	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, C=GB, ST=Greater Manchester

78.142.210.144

2087

name does not match

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

78.142.210.144

2087

name does not match

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - too much certificates, don't send root certificates	1	CN=nova.veridyen.com, OU=PositiveSSL
	2	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, C=US, ST=TX
	3	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, C=GB, ST=Greater Manchester

78.142.210.144

2096

name does not match

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

78.142.210.144

2096

name does not match

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

error checking OCSP stapling

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

no http/2 via ALPN

no Tls.1.2
no Tls.1.1
no Tls.1.0

Chain - too much certificates, don't send root certificates	1	CN=nova.veridyen.com, OU=PositiveSSL
	2	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, C=US, ST=TX
	3	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, C=GB, ST=Greater Manchester

9. Certificates

CN=wyok.net

27.10.2019

25.01.2020
888 days expired

autodiscover.wyok.net, cpanel.wyok.net, mail.wyok.net, webdisk.wyok.net, webmail.wyok.net, www.wyok.net, wyok.net - 7 entries

CN=wyok.net

27.10.2019

25.01.2020
888 days expired

autodiscover.wyok.net, cpanel.wyok.net, mail.wyok.net, webdisk.wyok.net, webmail.wyok.net, www.wyok.net, wyok.net - 7 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	0334ED80B3F81E6E3C3BB439D2348330A4B3
Thumbprint:	EB63E937601D4B15304804BB75365F10696CCA5A
SHA256 / Certificate:	RjAaL6jToAaZiyI3/gQhBVLTz7U+u1F7SoD/KXYYLtA=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	0c85454969cf8718dc6d02ef43a008eb95b5097ea398a4fd99129c64fb3a1f3c
SHA256 hex / Subject Public Key Information (SPKI):	0c85454969cf8718dc6d02ef43a008eb95b5097ea398a4fd99129c64fb3a1f3c
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp.int-x3.letsencrypt.org
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

17.03.2016

17.03.2021
471 days expired

CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

17.03.2016

17.03.2021
471 days expired

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	0A0141420000015385736A0B85ECA708
Thumbprint:	E6A3B45B062D509B3382282D196EFE97D5956CCB
SHA256 / Certificate:	JYR9Zo608E/dQLErawdAxWfafQJDCOtsLJb+QdneIY0=
SHA256 hex / Cert (DANE * 0 1):	25847d668eb4f04fdd40b12b6b0740c567da7d024308eb6c2c96fe41d9de218d
SHA256 hex / PublicKey (DANE * 1 1):	60b87575447dcba2a36b7d11ac09fb24a9db406fee12d2cc90180517616e8a18
SHA256 hex / Subject Public Key Information (SPKI):	60b87575447dcba2a36b7d11ac09fb24a9db406fee12d2cc90180517616e8a18
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://isrg.trustid.ocsp.identrust.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=DST Root CA X3, O=Digital Signature Trust Co.

30.09.2000

30.09.2021
274 days expired

CN=DST Root CA X3, O=Digital Signature Trust Co.

30.09.2000

30.09.2021
274 days expired

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA-1 with RSA Encryption
Serial Number:	44AFB080D6A327BA893039862EF8406B
Thumbprint:	DAC9024F54D8F6DF94935FB1732638CA6AD77C13
SHA256 / Certificate:	BocmAzGnJAPZCfEF5pvPDTLhvSST/8bZIG0RvNZ3Bzk=
SHA256 hex / Cert (DANE * 0 1):	0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739
SHA256 hex / PublicKey (DANE * 1 1):	563b3caf8cfef34c2335caf560a7a95906e8488462eb75ac59784830df9e5b2b
SHA256 hex / Subject Public Key Information (SPKI):	563b3caf8cfef34c2335caf560a7a95906e8488462eb75ac59784830df9e5b2b
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=nova.veridyen.com, OU=PositiveSSL, OU=Domain Control Validated

07.02.2019

08.02.2020
874 days expired

nova.veridyen.com, www.nova.veridyen.com - 2 entries

CN=nova.veridyen.com, OU=PositiveSSL, OU=Domain Control Validated

07.02.2019

08.02.2020
874 days expired

nova.veridyen.com, www.nova.veridyen.com - 2 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00FB6A8B0D8CABE6EC8C7C4C33C42371A9
Thumbprint:	4F7403A6E4429A354C0096A7707681019C56BC6F
SHA256 / Certificate:	H2wdMj1eHPrUYTttzkg9Xg/y2LNhhlgzjGdunL7HPPc=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	d3914d9b15ac6dd264b187176f6ed17112fdf5f017e2149c25b4884d4dadb8b5
SHA256 hex / Subject Public Key Information (SPKI):	d3914d9b15ac6dd264b187176f6ed17112fdf5f017e2149c25b4884d4dadb8b5
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:	http://ocsp.comodoca.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, S=TX, C=US

18.05.2015

18.05.2025
expires in 1052 days

CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, S=TX, C=US

18.05.2015

18.05.2025
expires in 1052 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	00F01D4BEE7B7CA37B3C0566AC05972458
Thumbprint:	764D2FA59ED123F9C95570C403C92FEF338EA745
SHA256 / Certificate:	ghzFXOfsXHT+u0L2JOtqNsR4IVox7Wfjz3I6Z+jHXro=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	84e175ba988efb17af9c3110d77837698dccdd4a9ae3844de6b565c2f536582f
SHA256 hex / Subject Public Key Information (SPKI):	84e175ba988efb17af9c3110d77837698dccdd4a9ae3844de6b565c2f536582f
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.comodoca.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

19.01.2010

19.01.2038
expires in 5681 days

CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

19.01.2010

19.01.2038
expires in 5681 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA384 With RSA Encryption
Serial Number:	4CAAF9CADB636FE01FF74ED85B03869D
Thumbprint:	AFE5D244A8D1194230FF479FE2F897BBCD7A8CB4
SHA256 / Certificate:	UvDhxOWOxikpG2AxfwdGcbhdfqgNWwcnNGNTSzK0AjQ=
SHA256 hex / Cert (DANE * 0 1):	52f0e1c4e58ec629291b60317f074671b85d7ea80d5b07273463534b32b40234
SHA256 hex / PublicKey (DANE * 1 1):	82b5f84daf47a59c7ab521e4982aefa40a53406a3aec26039efa6b2e0e7244c1
SHA256 hex / Subject Public Key Information (SPKI):	82b5f84daf47a59c7ab521e4982aefa40a53406a3aec26039efa6b2e0e7244c1
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuer				last 7 days	active	num Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US				0	0	6
CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, C=US, ST=TX				0	0	1

CertSpotter-Id	Issuer	not before	not after	Domain names	LE-Duplicate	next LE
1209516526 leaf cert	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	2019-10-27 21:09:09	2020-01-25 21:09:09	autodiscover.wyok.net, cpanel.wyok.net, mail.wyok.net, webdisk.wyok.net, webmail.wyok.net, www.wyok.net, wyok.net - 7 entries
1183806771 leaf cert	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	2019-10-13 21:51:25	2020-01-11 21:51:25	cpanel.wyok.net, mail.wyok.net, webdisk.wyok.net, webmail.wyok.net, whm.wyok.net, www.wyok.net, wyok.net - 7 entries
1181740162 leaf cert	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, C=US, ST=TX	2019-10-12 00:00:00	2020-01-10 23:59:59	autodiscover.wyok.net, cpanel.wyok.net, mail.wyok.net, webdisk.wyok.net, webmail.wyok.net, www.wyok.matcoz.com, www.wyok.net, wyok.matcoz.com, wyok.net - 9 entries
1180203771 leaf cert	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	2019-10-11 17:49:04	2020-01-09 17:49:04	www.wyok.net, wyok.net - 2 entries
1086809259 leaf cert	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	2019-08-22 15:53:13	2019-11-20 15:53:13	autodiscover.wyok.net, cpanel.wyok.net, mail.wyok.net, webdisk.wyok.net, webmail.wyok.net, www.wyok.net, wyok.net - 7 entries
1086541672 leaf cert	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	2019-08-22 12:42:37	2019-11-20 12:42:37	www.wyok.net - 1 entries
1086130413 leaf cert	CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US	2019-08-22 08:00:15	2019-11-20 08:00:15	*.wyok.net, wyok.net - 2 entries

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > 2019 are listed

No CRT - CT-Log entries found

11. Html-Content - Entries

Summary

No data found or small Code-update

Details

Small Code Update - wait one minute

12. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers:

No NameServer - IP address informations found. The feature is new (2020-05-07), so recheck this domain.

13. CAA - Entries

Domainname	flag	Value	∑ Queries
www.wyok.net			1
wyok.net	0	no CAA entry found	1
net	0	no CAA entry found	1

14. TXT - Entries

Domainname	TXT Entry	Status	∑ Queries
wyok.net	v=spf1 include:_spf.protection.veridyen.com ~all	ok	1
www.wyok.net	v=spf1 include:_spf.protection.veridyen.com ~all	ok	1
_acme-challenge.wyok.net		Name Error - The domain name does not exist	1
_acme-challenge.www.wyok.net		Name Error - The domain name does not exist	1
_acme-challenge.wyok.net.wyok.net		Name Error - The domain name does not exist	1
_acme-challenge.www.wyok.net.wyok.net		Name Error - The domain name does not exist	1
_acme-challenge.www.wyok.net.www.wyok.net		Name Error - The domain name does not exist	1

15. Portchecks

Domain or IP	Port	Description
wyok.net	21	FTP

wyok.net	21	FTP
wyok.net	22	SSH

wyok.net	22	SSH
wyok.net	25	SMTP

wyok.net	25	SMTP
wyok.net	53	DNS

wyok.net	53	DNS
wyok.net	110	POP3

wyok.net	110	POP3
wyok.net	143	IMAP

wyok.net	143	IMAP
wyok.net	465	SMTP (encrypted)

wyok.net	465	SMTP (encrypted)
wyok.net	587	SMTP (encrypted, submission)

wyok.net	587	SMTP (encrypted, submission)
wyok.net	993	IMAP (encrypted)

wyok.net	993	IMAP (encrypted)
wyok.net	995	POP3 (encrypted)

wyok.net	995	POP3 (encrypted)
wyok.net	1433	MS SQL

wyok.net	1433	MS SQL
wyok.net	2082	cPanel (http)

wyok.net	2082	cPanel (http)
wyok.net	2083	cPanel (https)

wyok.net	2083	cPanel (https)
wyok.net	2086	WHM (http)

wyok.net	2086	WHM (http)
wyok.net	2087	WHM (https)

wyok.net	2087	WHM (https)
wyok.net	2089	cPanel Licensing

wyok.net	2089	cPanel Licensing
wyok.net	2095	cPanel Webmail (http)

wyok.net	2095	cPanel Webmail (http)
wyok.net	2096	cPanel Webmail (https)

wyok.net	2096	cPanel Webmail (https)
wyok.net	2222	DirectAdmin (http)

wyok.net	2222	DirectAdmin (http)
wyok.net	2222	DirectAdmin (https)

wyok.net	2222	DirectAdmin (https)
wyok.net	3306	mySql

wyok.net	3306	mySql
wyok.net	5224	Plesk Licensing

wyok.net	5224	Plesk Licensing
wyok.net	5432	PostgreSQL

wyok.net	5432	PostgreSQL
wyok.net	8080	Ookla Speedtest (http)

wyok.net	8080	Ookla Speedtest (http)
wyok.net	8080	Ookla Speedtest (https)

wyok.net	8080	Ookla Speedtest (https)
wyok.net	8083	VestaCP http

wyok.net	8083	VestaCP http
wyok.net	8083	VestaCP https

wyok.net	8083	VestaCP https
wyok.net	8443	Plesk Administration (https)

wyok.net	8443	Plesk Administration (https)
wyok.net	8447	Plesk Installer + Updates

wyok.net	8447	Plesk Installer + Updates
wyok.net	8880	Plesk Administration (http)

wyok.net	8880	Plesk Administration (http)
wyok.net	10000	Webmin (http)

wyok.net	10000	Webmin (http)
wyok.net	10000	Webmin (https)

wyok.net	10000	Webmin (https)
www.wyok.net	21	FTP

www.wyok.net	21	FTP
www.wyok.net	22	SSH

www.wyok.net	22	SSH
www.wyok.net	25	SMTP

www.wyok.net	25	SMTP
www.wyok.net	53	DNS

www.wyok.net	53	DNS
www.wyok.net	110	POP3

www.wyok.net	110	POP3
www.wyok.net	143	IMAP

www.wyok.net	143	IMAP
www.wyok.net	465	SMTP (encrypted)

www.wyok.net	465	SMTP (encrypted)
www.wyok.net	587	SMTP (encrypted, submission)

www.wyok.net	587	SMTP (encrypted, submission)
www.wyok.net	993	IMAP (encrypted)

www.wyok.net	993	IMAP (encrypted)
www.wyok.net	995	POP3 (encrypted)

www.wyok.net	995	POP3 (encrypted)
www.wyok.net	1433	MS SQL

www.wyok.net	1433	MS SQL
www.wyok.net	2082	cPanel (http)

www.wyok.net	2082	cPanel (http)
www.wyok.net	2083	cPanel (https)

www.wyok.net	2083	cPanel (https)
www.wyok.net	2086	WHM (http)

www.wyok.net	2086	WHM (http)
www.wyok.net	2087	WHM (https)

www.wyok.net	2087	WHM (https)
www.wyok.net	2089	cPanel Licensing

www.wyok.net	2089	cPanel Licensing
www.wyok.net	2095	cPanel Webmail (http)

www.wyok.net	2095	cPanel Webmail (http)
www.wyok.net	2096	cPanel Webmail (https)

www.wyok.net	2096	cPanel Webmail (https)
www.wyok.net	2222	DirectAdmin (http)

www.wyok.net	2222	DirectAdmin (http)
www.wyok.net	2222	DirectAdmin (https)

www.wyok.net	2222	DirectAdmin (https)
www.wyok.net	3306	mySql

www.wyok.net	3306	mySql
www.wyok.net	5224	Plesk Licensing

www.wyok.net	5224	Plesk Licensing
www.wyok.net	5432	PostgreSQL

www.wyok.net	5432	PostgreSQL
www.wyok.net	8080	Ookla Speedtest (http)

www.wyok.net	8080	Ookla Speedtest (http)
www.wyok.net	8080	Ookla Speedtest (https)

www.wyok.net	8080	Ookla Speedtest (https)
www.wyok.net	8083	VestaCP http

www.wyok.net	8083	VestaCP http
www.wyok.net	8083	VestaCP https

www.wyok.net	8083	VestaCP https
www.wyok.net	8443	Plesk Administration (https)

www.wyok.net	8443	Plesk Administration (https)
www.wyok.net	8447	Plesk Installer + Updates

www.wyok.net	8447	Plesk Installer + Updates
www.wyok.net	8880	Plesk Administration (http)

www.wyok.net	8880	Plesk Administration (http)
www.wyok.net	10000	Webmin (http)

www.wyok.net	10000	Webmin (http)
www.wyok.net	10000	Webmin (https)

www.wyok.net	10000	Webmin (https)
78.142.210.144	21	FTP

78.142.210.144	21	FTP
78.142.210.144	22	SSH

78.142.210.144	22	SSH
78.142.210.144	25	SMTP

78.142.210.144	25	SMTP
78.142.210.144	53	DNS

78.142.210.144	53	DNS
78.142.210.144	110	POP3

78.142.210.144	110	POP3
78.142.210.144	143	IMAP

78.142.210.144	143	IMAP
78.142.210.144	465	SMTP (encrypted)

78.142.210.144	465	SMTP (encrypted)
78.142.210.144	587	SMTP (encrypted, submission)

78.142.210.144	587	SMTP (encrypted, submission)
78.142.210.144	993	IMAP (encrypted)

78.142.210.144	993	IMAP (encrypted)
78.142.210.144	995	POP3 (encrypted)

78.142.210.144	995	POP3 (encrypted)
78.142.210.144	1433	MS SQL

78.142.210.144	1433	MS SQL
78.142.210.144	2082	cPanel (http)

78.142.210.144	2082	cPanel (http)
78.142.210.144	2083	cPanel (https)

78.142.210.144	2083	cPanel (https)
78.142.210.144	2086	WHM (http)

78.142.210.144	2086	WHM (http)
78.142.210.144	2087	WHM (https)

78.142.210.144	2087	WHM (https)
78.142.210.144	2089	cPanel Licensing

78.142.210.144	2089	cPanel Licensing
78.142.210.144	2095	cPanel Webmail (http)

78.142.210.144	2095	cPanel Webmail (http)
78.142.210.144	2096	cPanel Webmail (https)

78.142.210.144	2096	cPanel Webmail (https)
78.142.210.144	2222	DirectAdmin (http)

78.142.210.144	2222	DirectAdmin (http)
78.142.210.144	2222	DirectAdmin (https)

78.142.210.144	2222	DirectAdmin (https)
78.142.210.144	3306	mySql

78.142.210.144	3306	mySql
78.142.210.144	5224	Plesk Licensing

78.142.210.144	5224	Plesk Licensing
78.142.210.144	5432	PostgreSQL

78.142.210.144	5432	PostgreSQL
78.142.210.144	8080	Ookla Speedtest (http)

78.142.210.144	8080	Ookla Speedtest (http)
78.142.210.144	8080	Ookla Speedtest (https)

78.142.210.144	8080	Ookla Speedtest (https)
78.142.210.144	8083	VestaCP http

78.142.210.144	8083	VestaCP http
78.142.210.144	8083	VestaCP https

78.142.210.144	8083	VestaCP https
78.142.210.144	8443	Plesk Administration (https)

78.142.210.144	8443	Plesk Administration (https)
78.142.210.144	8447	Plesk Installer + Updates

78.142.210.144	8447	Plesk Installer + Updates
78.142.210.144	8880	Plesk Administration (http)

78.142.210.144	8880	Plesk Administration (http)
78.142.210.144	10000	Webmin (http)

78.142.210.144	10000	Webmin (http)
78.142.210.144	10000	Webmin (https)

78.142.210.144	10000	Webmin (https)

Permalink: https://check-your-website.server-daten.de/?i=be8ec8fe-a60e-43e2-ac75-09d14aedcbb1

Last Result: https://check-your-website.server-daten.de/?q=wyok.net - 2019-10-28 16:25:12

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=wyok.net" target="_blank">Check this Site: wyok.net</a>

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. DNS- and NameServer - Checks

3. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > 2019 are listed

11. Html-Content - Entries

Summary

Details

12. Nameserver - IP-Adresses

13. CAA - Entries

14. TXT - Entries

15. Portchecks