The domain www.itanhaem.sp.gov.br is being served through Cloudflare CDN. Any Let's Encrypt certificate installed on the origin server will only encrypt traffic between the server and Cloudflare. It is strongly recommended that the SSL option 'Full SSL (strict)' be enabled.
https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the-SSL-options-mean-
CAA records control authorization for certificate authorities to issue certificates for a domain
itanhaem.sp.gov.br. 0 IN CAA 0 issue "pki.goog; cansignhttpexchanges=yes"
itanhaem.sp.gov.br. 0 IN CAA 0 issue "sectigo.com"
itanhaem.sp.gov.br. 0 IN CAA 0 issue "comodoca.com"
itanhaem.sp.gov.br. 0 IN CAA 0 issue "digicert.com; cansignhttpexchanges=yes"
itanhaem.sp.gov.br. 0 IN CAA 0 issue "letsencrypt.org"
itanhaem.sp.gov.br. 0 IN CAA 0 issuewild "comodoca.com"
itanhaem.sp.gov.br. 0 IN CAA 0 issuewild "digicert.com; cansignhttpexchanges=yes"
itanhaem.sp.gov.br. 0 IN CAA 0 issuewild "letsencrypt.org"
itanhaem.sp.gov.br. 0 IN CAA 0 issuewild "pki.goog; cansignhttpexchanges=yes"
itanhaem.sp.gov.br. 0 IN CAA 0 issuewild "sectigo.com"
Requests made to the domain
Request to: www.itanhaem.sp.gov.br/2606:4700:3030::ac43:95c0, Result: [Address=2606:4700:3030::ac43:95c0,Address Type=IPv6,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test (using initial IP 2606:4700:3030::ac43:95c0)
@0ms: Dialing 2606:4700:3030::ac43:95c0
@340ms: Server response: HTTP 301 Moved Permanently
@340ms: Received redirect to https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test
@341ms: Dialing 2606:4700:3030::ac43:95c0
@785ms: Server response: HTTP 404 Not Found
Request to: www.itanhaem.sp.gov.br/2606:4700:3031::6815:5ff5, Result: [Address=2606:4700:3031::6815:5ff5,Address Type=IPv6,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test (using initial IP 2606:4700:3031::6815:5ff5)
@0ms: Dialing 2606:4700:3031::6815:5ff5
@345ms: Server response: HTTP 301 Moved Permanently
@345ms: Received redirect to https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test
@345ms: Dialing 2606:4700:3031::6815:5ff5
@864ms: Server response: HTTP 404 Not Found
Request to: www.itanhaem.sp.gov.br/104.21.95.245, Result: [Address=104.21.95.245,Address Type=IPv4,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test (using initial IP 104.21.95.245)
@0ms: Dialing 104.21.95.245
@302ms: Server response: HTTP 301 Moved Permanently
@302ms: Received redirect to https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test
@302ms: Dialing 104.21.95.245
@752ms: Server response: HTTP 404 Not Found
Request to: www.itanhaem.sp.gov.br/172.67.149.192, Result: [Address=172.67.149.192,Address Type=IPv4,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test (using initial IP 172.67.149.192)
@0ms: Dialing 172.67.149.192
@291ms: Server response: HTTP 301 Moved Permanently
@291ms: Received redirect to https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test
@291ms: Dialing 172.67.149.192
@742ms: Server response: HTTP 404 Not Found
A and AAAA records found for this domain
www.itanhaem.sp.gov.br. 0 IN A 104.21.95.245
www.itanhaem.sp.gov.br. 0 IN A 172.67.149.192
www.itanhaem.sp.gov.br. 0 IN AAAA 2606:4700:3030::ac43:95c0
www.itanhaem.sp.gov.br. 0 IN AAAA 2606:4700:3031::6815:5ff5
Challenge update failures for www.itanhaem.sp.gov.br in order https://acme-staging-v02.api.letsencrypt.org/acme/order/5751349/7156021243
acme: error code 403 "urn:ietf:params:acme:error:unauthorized": 2606:4700:3030::ac43:95c0: Invalid response from https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/B0QtoMHOgFzjvJSaun4NKipn9DGoubF3D3L6YZ2e--4: 404
The IANA public suffix is the TLD of the Registered Domain
The TLD for www.itanhaem.sp.gov.br is: sp.gov.br
13 Certificates contributing to rate limits for this domain
Serial: 354108932450468161156015756138800153539216
NotBefore: 2023-02-10 13:43:58 +0000 UTC
Names: [museuvirtual.itanhaem.sp.gov.br]
Serial: 362517967499637157744991170334484666941448
NotBefore: 2023-02-10 13:36:33 +0000 UTC
Names: [consentimento.itanhaem.sp.gov.br]
Serial: 359263521870791197726493975623876976047072
NotBefore: 2023-02-10 13:36:17 +0000 UTC
Names: [biblioteca.itanhaem.sp.gov.br]
Serial: 392327138168729446763773249265483349311180
NotBefore: 2023-02-10 13:36:02 +0000 UTC
Names: [sigonline.itanhaem.sp.gov.br]
Serial: 362403746008227189289980224996891097504075
NotBefore: 2023-02-10 13:35:43 +0000 UTC
Names: [consultaiss.itanhaem.sp.gov.br]
Serial: 409564602956956311602346639449247582677511
NotBefore: 2023-02-10 13:35:25 +0000 UTC
Names: [sesmt.itanhaem.sp.gov.br]
Serial: 371305072595262591690533093302839751052937
NotBefore: 2023-02-10 13:35:10 +0000 UTC
Names: [portalservidor.itanhaem.sp.gov.br]
Serial: 380222457697230874460474069915727314844289
NotBefore: 2023-02-10 13:34:53 +0000 UTC
Names: [online.itanhaem.sp.gov.br]
Serial: 423761231808474093872196721400491346213551
NotBefore: 2023-02-10 13:23:08 +0000 UTC
Names: [procsel.itanhaem.sp.gov.br]
Serial: 275810294068379522191376371174346129068647
NotBefore: 2023-02-10 13:19:23 +0000 UTC
Names: [www2.itanhaem.sp.gov.br]
Serial: 419780628647651186776726928594141912399296
NotBefore: 2023-02-10 13:19:14 +0000 UTC
Names: [www.itanhaem.sp.gov.br]
Serial: 370008539516375734686897692147044591267696
NotBefore: 2023-02-10 13:19:05 +0000 UTC
Names: [transparencia.itanhaem.sp.gov.br]
Serial: 426732314515711395416411488752089555129969
NotBefore: 2023-02-10 13:18:56 +0000 UTC
Names: [itanhaem.sp.gov.br]