SSL-Tools

SSL check results of mail.kafemarat.net

NEW You can also bulk check multiple servers.

Discover if the mail servers for mail.kafemarat.net can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Tue, 05 Nov 2024 16:59:12 +0000

The mailservers of mail.kafemarat.net can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @mail.kafemarat.net addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
kafemarat.net
45.136.29.68
 10
supported
kafemarat.net
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
7 s

Outgoing Mails

We have not received any emails from a @mail.kafemarat.net address so far. Test mail delivery

Certificates

First seen at:

CN=kafemarat.net

Certificate chain
  • kafemarat.net
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption
      • R10
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • kafemarat.net
Alternative Names
  • kafemarat.net
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R10
validity period
Not valid before
2024-11-03
Not valid after
2025-02-01
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
01:CA:EB:36:93:5F:4F:5F:54:7C:82:38:05:9E:0C:74:C5:17:E6:2E:6C:A6:F9:02:CE:DB:88:EF:A9:74:48:A5
SHA1
DF:58:D4:35:72:5B:01:E3:92:BA:09:80:91:98:D4:80:D3:3C:1B:10
X509v3 extensions
subjectKeyIdentifier
  • C6:D7:74:89:0C:C5:9A:60:CE:3D:20:16:30:5D:F6:DD:60:E5:3D:48
authorityKeyIdentifier
  • keyid:BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
authorityInfoAccess
  • OCSP - URI:http://r10.o.lencr.org
  • CA Issuers - URI:http://r10.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
  • D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
  • Timestamp : Nov 3 05:10:42.094 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:A5:16:C4:44:A3:EE:39:76:41:47:93:
  • F2:E0:88:31:AD:2E:24:B1:40:D2:5B:58:7F:55:BE:89:
  • 56:20:73:C0:90:02:21:00:E8:B9:26:A6:61:84:40:00:
  • 53:A6:58:9E:B0:A3:FB:B2:5F:84:8C:08:41:E3:89:4D:
  • 94:40:C8:7C:BF:27:24:B7
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
  • 1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
  • Timestamp : Nov 3 05:10:42.149 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:B4:EB:BF:6A:A6:67:65:87:BC:DF:29:
  • 34:9C:D9:2D:09:C8:88:CF:32:AE:68:7A:66:24:90:9F:
  • DC:57:3D:1B:8F:02:21:00:BD:A5:E2:45:E2:0A:5D:59:
  • 29:1A:73:73:E7:27:8D:AC:78:E1:43:16:FA:A9:DF:94:
  • 83:5B:37:EC:FE:0C:BD:74

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.kafemarat.net
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.kafemarat.net
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.kafemarat.net
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.kafemarat.net
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.kafemarat.net
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.kafemarat.net
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.kafemarat.net
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
valid
_25._tcp.kafemarat.net
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.kafemarat.net
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.kafemarat.net
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—