# Third-party-Tools to check your configuration - Discussion **URL:** \ **Category:** Help\ **Created:** [November 1, 2018, 2:38pm UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354 "2018-11-01T14:38:28Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [November 1, 2018, 2:38pm UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/1 "2018-11-01T14:38:28Z")
Managing Letsencrypt certificates - sometimes it's difficult. So there is a closed topic with some annotations. Third party Tools to check your configuration > [@Third-party-Tools to check your configuration](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration/76272): > > I… If a link is broken or if you have ideas - send a PM or use this topic. ---
**Author:** ![tdelmas](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tdelmas/32/1866_2.png) [@tdelmas](https://community.letsencrypt.org/u/tdelmas)\ **Post date:** [October 31, 2018, 5:06pm UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/2 "2018-10-31T17:06:11Z")
[https://observatory.mozilla.org/](https://observatory.mozilla.org/) is usefull too (For the TLS scanner mainly) [https://dnssec-analyzer.verisignlabs.com](https://dnssec-analyzer.verisignlabs.com) for DNSSEC [https://tools.keycdn.com/ipv6-ping](https://tools.keycdn.com/ipv6-ping) to test the IPv6 connectivity from different locations maybe off topic : [https://hstspreload.org/](https://hstspreload.org/) ---
**Author:** ![stevenzhu](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/stevenzhu/32/18864_2.png) [@stevenzhu](https://community.letsencrypt.org/u/stevenzhu)\ **Post date:** [October 31, 2018, 5:39pm UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/3 "2018-10-31T17:39:42Z")
[https://tools.keycdn.com/curl](https://tools.keycdn.com/curl) Online curl tool [https://www.mxtoolbox.com/](https://www.mxtoolbox.com/) Check if a record is available from all authoritative NS server. ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [October 31, 2018, 5:51pm UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/4 "2018-10-31T17:51:03Z")
Thanks. Added both, aggregated. If a site has a lot of tools, the start page or the page with the complete tool list is preferred. One day later: Created this discussion topic and moved the replies. ---
**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\ **Post date:** [November 1, 2018, 7:49pm UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/5 "2018-11-01T19:49:44Z")
[https://tools.letsdebug.net/cert-search](https://tools.letsdebug.net/cert-search) - compared to crt.sh, it understands the PSL, understands Let’s Encrypt’s rate limits, and de-duplicates poisoned/real certificates. Since crt.sh is no longer significantly delayed since some weeks now I’m not sure there’s a great reason to continue to prefer Google’s aggregator over crt.sh. Edit: looks like I got IP banned by crt.sh, hold off on this suggestion until I can address it … Edit 2: we wern’t banned, they rotated their IPv4 address and I had them `/etc/hosts`'d from a time when their IPv6 was flakey. Whoops. ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [November 1, 2018, 9:59pm UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/6 "2018-11-01T21:59:47Z")
> [@\_az](#): > > [https://tools.letsdebug.net/](https://tools.letsdebug.net/) Thanks - added with the start page. ---
**Author:** ![ahaw021](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ahaw021/32/14882_2.png) [@ahaw021](https://community.letsencrypt.org/u/ahaw021)\ **Post date:** [November 2, 2018, 3:00am UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/7 "2018-11-02T03:00:14Z")
[WeakDH.org](http://WeakDH.org) [https://weakdh.org/sysadmin.html](https://weakdh.org/sysadmin.html) Cipher.list [https://cipherli.st/](https://cipherli.st/) OWASP: [https://www.owasp.org/index.php/TLS\_Cipher\_String\_Cheat\_Sheet](https://www.owasp.org/index.php/TLS_Cipher_String_Cheat_Sheet) OpenSSL and NMAP - not every server is exposed to the web so offline tools should be included as well SSLYZE - python checker Censys - CT searching via API [https://censys.io/](https://censys.io/) Keychest - CT proactive alerts [https://keychest.net/](https://keychest.net/) My Own Tool which i use for mail protocols (STARTTLS can be tricky to troubleshoot) [https://github.com/ahaw021/SSL-MAIL-PROTOCOLS-TESTING](https://github.com/ahaw021/SSL-MAIL-PROTOCOLS-TESTING) ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [November 4, 2018, 9:51pm UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/8 "2018-11-04T21:51:31Z")
Thanks. Added some links. The main focus are online tools with interactive checks. ---
**Author:** ![kavabill](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/kavabill/32/27463_2.png) [@kavabill](https://community.letsencrypt.org/u/kavabill)\ **Post date:** [November 14, 2018, 6:21am UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/9 "2018-11-14T06:21:13Z")
Just wanted to add to the list of DNS utilities: [https://www.grc.com/dns/dns.htm](https://www.grc.com/dns/dns.htm) very decent I believe. ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [December 4, 2018, 9:51pm UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/10 "2018-12-04T21:51:42Z")
Closed on December 4, 2018, 9:51pm UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed. ---
**Author:** ![tdelmas](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tdelmas/32/1866_2.png) [@tdelmas](https://community.letsencrypt.org/u/tdelmas)\ **Post date:** [December 30, 2018, 11:40pm UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/11 "2018-12-30T23:40:49Z")
Opened on December 30, 2018, 11:40pm UTC ---
**Author:** ![tdelmas](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tdelmas/32/1866_2.png) [@tdelmas](https://community.letsencrypt.org/u/tdelmas)\ **Post date:** [December 30, 2018, 11:43pm UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/12 "2018-12-30T23:43:13Z")
[https://unboundtest.com/](https://unboundtest.com/) from [SERVFAIL looking up TXT (IDNA or DNSSEC issues?)](https://community.letsencrypt.org/t/servfail-looking-up-txt-idna-or-dnssec-issues/81205/4?u=tdelmas) ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [January 6, 2019, 5:28pm UTC](https://community.letsencrypt.org/t/third-party-tools-to-check-your-configuration-discussion/76354/13 "2019-01-06T17:28:32Z")
> [@tdelmas](#): > > [https://unboundtest.com/](https://unboundtest.com/) Thanks, now added. Changed the order, so the (now) three tools of active members are listed as (1).