SSL-Tools

SSL check results of stjapan.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for stjapan.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Mon, 21 Oct 2024 00:30:21 +0000

We can not guarantee a secure connection to the mailservers of stjapan.de!

Please contact the operator of stjapan.de and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/stjapan.de

Servers

Incoming Mails

These servers are responsible for incoming mails to @stjapan.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
stj4.stjapan.de
142.132.233.52
Results incomplete
5
supported
not checked
DANE
missing
PFS
not checked
Heartbleed
not vulnerable
Weak ciphers
not checked
3 s
stj5.stjapan.de
82.165.237.26
Results incomplete
25
supported
not checked
DANE
missing
PFS
not checked
Heartbleed
not vulnerable
Weak ciphers
not checked
2 s
mailrelay.netcologne.de
194.8.194.96
 100
supported
mailrelay.netcologne.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
4 s
stj6.stjapan.de
78.35.146.61
Results incomplete
120 not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
1 s
chaos.stjapan.de
78.35.43.26
Results incomplete
150 not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
11 s
atlas.stjapan.de
87.79.200.227
Results incomplete
200 not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
11 s

Outgoing Mails

We have not received any emails from a @stjapan.de address so far. Test mail delivery

Certificates

First seen at:

CN=mailrelay.netcologne.de

Certificate chain
  • mailrelay.netcologne.de
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption
      • R10
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • mailrelay.netcologne.de
Alternative Names
  • mailrelay.netcologne.de
  • mailrelay3.netcologne.de
  • mailrelay4.netcologne.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R10
validity period
Not valid before
2024-10-01
Not valid after
2024-12-30
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
49:AA:34:AC:A5:07:DE:31:BE:67:33:1A:09:A5:EA:C2:5C:57:54:A7:7A:26:5A:6E:AB:C0:D9:80:0A:03:CB:27
SHA1
67:D9:97:C6:66:5D:3F:C9:CC:13:CC:6E:E5:91:BD:53:2C:A4:FC:CB
X509v3 extensions
subjectKeyIdentifier
  • 9D:5A:BA:26:5C:85:8F:8B:6F:3D:BC:46:C4:56:57:E1:D3:64:0D:11
authorityKeyIdentifier
  • keyid:BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
authorityInfoAccess
  • OCSP - URI:http://r10.o.lencr.org
  • CA Issuers - URI:http://r10.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
  • ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
  • Timestamp : Oct 1 07:07:32.265 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:26:70:68:8D:40:91:2D:29:20:B2:9F:41:
  • B5:C1:42:8B:9F:E0:CC:78:D0:D9:B9:EE:2F:95:BF:11:
  • 8B:5C:87:C3:02:20:66:1B:21:95:5A:59:46:0F:39:93:
  • E3:92:7B:92:B3:A5:76:E4:80:86:FC:7E:8D:ED:0C:01:
  • FA:5D:D5:01:55:1F
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
  • 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
  • Timestamp : Oct 1 07:07:32.263 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:41:37:C2:AB:E4:80:B3:10:63:E5:AC:15:
  • C8:5A:5B:63:D7:75:55:9D:8E:8A:40:7A:10:39:E9:6B:
  • A1:4A:49:C0:02:20:40:3A:AB:2A:6D:A2:88:3F:E9:17:
  • 44:D1:2E:85:FD:67:FC:73:9A:78:CC:6E:0D:26:56:27:
  • 97:B3:46:A6:23:96