SSL check results of gmail.it

NEW You can also bulk check multiple servers.

Discover if the mail servers for gmail.it can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Tue, 23 Apr 2024 23:11:36 +0000

The mailservers of gmail.it can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @gmail.it addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mx1.gmail.it
62.141.49.168
10
supported
mail.gmail.it
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
12 s

Outgoing Mails

We have not received any emails from a @gmail.it address so far. Test mail delivery

Certificates

First seen at:

CN=mail.gmail.it

Certificate chain
  • mail.gmail.it
    • remaining
    • 2048 bit
    • sha256WithRSAEncryption

      • R3
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption

          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption

Subject
Common Name (CN)
  • mail.gmail.it
Alternative Names
  • mail.gmail.it
  • mx1.gmail.it
  • pop.gmail.it
  • smtp.gmail.it
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R3
validity period
Not valid before
2024-03-24
Not valid after
2024-06-22
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
E8:09:DA:75:45:13:F5:BC:07:E4:49:23:AC:DA:B6:82:DE:B7:81:04:52:6F:82:CE:44:34:A3:92:5C:CF:C6:18
SHA1
C6:A1:FE:77:3E:7C:A1:ED:22:12:D0:22:F3:68:E1:DE:18:BF:6C:D1
X509v3 extensions
subjectKeyIdentifier
  • 49:25:58:BD:49:C6:86:50:DA:45:8E:B4:85:4A:8E:18:98:9C:FD:14
authorityKeyIdentifier
  • keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
  • OCSP - URI:http://r3.o.lencr.org
  • CA Issuers - URI:http://r3.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
  • 67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
  • Timestamp : Mar 24 23:15:25.487 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:43:E7:07:13:81:1A:8E:F4:7C:60:99:E5:
  • A6:EC:CA:DC:C1:BC:2D:3C:B8:0D:6E:87:E2:56:85:19:
  • BF:30:06:51:02:21:00:A7:DA:87:EF:91:EB:98:EB:98:
  • 1A:AD:BE:1D:89:37:88:69:F5:3A:BC:9B:1C:D2:9B:66:
  • 88:C2:48:C5:F9:1D:0C
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : A2:E2:BF:D6:1E:DE:2F:2F:07:A0:D6:4E:6D:37:A7:DC:
  • 65:43:B0:C6:B5:2E:A2:DA:B7:8A:F8:9A:6D:F5:17:D8
  • Timestamp : Mar 24 23:15:25.512 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:26:0E:13:45:A6:E6:18:70:AC:8A:6F:76:
  • D6:B0:39:09:F0:1B:DB:AA:78:CE:BD:A3:08:ED:02:FD:
  • 53:65:77:3A:02:21:00:C0:C0:05:39:A4:B2:31:5C:DB:
  • 70:87:07:98:4C:C4:00:E2:D9:D7:39:64:BB:66:4A:63:
  • 11:86:F1:1C:9A:F6:82