SSL-Tools

SSL check results of gsqnet.ch

NEW You can also bulk check multiple servers.

Discover if the mail servers for gsqnet.ch can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Wed, 14 Apr 2021 08:26:42 +0000

The mailservers of gsqnet.ch can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @gsqnet.ch addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mx.gsqnet.ch
2a03:4000:56:e17:38c9:3cff:fe1c:5af0
 10
supported
mx.gsqnet.ch
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
6 s
mx.gsqnet.ch
202.61.227.89
 10
supported
mx.gsqnet.ch
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
5 s

Outgoing Mails

We have not received any emails from a @gsqnet.ch address so far. Test mail delivery

Certificates

First seen at:

CN=mx.gsqnet.ch

Certificate chain
  • mx.gsqnet.ch
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption
      • R3
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption
          • DST Root CA X3 (Certificate is self-signed.)
            • remaining
            • 2048 bit
            • sha1WithRSAEncryption
Subject
Common Name (CN)
  • mx.gsqnet.ch
Alternative Names
  • autoconfig.globi-squad.ch
  • autoconfig.gsqnet.ch
  • autodiscover.globi-squad.ch
  • autodiscover.gsqnet.ch
  • mail.gsqnet.ch
  • mx.gsqnet.ch
  • webmail.gsqnet.ch
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R3
validity period
Not valid before
2021-04-13
Not valid after
2021-07-12
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
36:19:E5:F5:75:E1:08:37:67:4A:56:6F:0F:11:B7:79:E4:BB:38:23:A3:A8:CC:A5:ED:01:C8:96:E0:2A:94:36
SHA1
3A:A6:FA:D6:74:41:C5:B6:36:76:39:B9:88:0D:12:63:66:2C:8B:45
X509v3 extensions
subjectKeyIdentifier
  • 93:18:44:5F:4B:74:55:76:01:3B:0B:F1:6D:E3:CE:C8:8D:78:74:D9
authorityKeyIdentifier
  • keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
  • OCSP - URI:http://r3.o.lencr.org
  • CA Issuers - URI:http://r3.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
  • Policy: 1.3.6.1.4.1.44947.1.1.1
  • CPS: http://cps.letsencrypt.org
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : F6:5C:94:2F:D1:77:30:22:14:54:18:08:30:94:56:8E:
  • E3:4D:13:19:33:BF:DF:0C:2F:20:0B:CC:4E:F1:64:E3
  • Timestamp : Apr 13 19:30:49.270 2021 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:5B:2A:43:50:67:05:69:83:B8:99:AF:AD:
  • 89:14:FF:97:20:52:58:88:A1:9E:DE:89:23:61:0B:20:
  • 14:17:7D:3A:02:21:00:8F:71:67:5A:7C:10:43:67:40:
  • CF:FE:89:8B:D3:17:87:48:84:AD:A0:85:4D:5E:DE:C7:
  • 1A:48:72:C6:10:07:7B
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 44:94:65:2E:B0:EE:CE:AF:C4:40:07:D8:A8:FE:28:C0:
  • DA:E6:82:BE:D8:CB:31:B5:3F:D3:33:96:B5:B6:81:A8
  • Timestamp : Apr 13 19:30:49.750 2021 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:19:F3:0F:8C:F9:68:DB:F5:12:CD:98:D2:
  • 4E:FE:F0:65:BE:30:7D:CD:88:82:20:45:AD:46:F1:72:
  • 36:45:5E:20:02:21:00:A4:86:05:09:25:1A:CB:97:24:
  • 69:B1:F2:C0:5F:9B:E5:9E:3F:9C:4D:EF:FF:E7:61:51:
  • 53:6A:64:DE:65:96:61

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.mx.gsqnet.ch
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
error
Debug
—