SSL check results of vietinbank.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for vietinbank.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Mon, 19 Oct 2020 11:27:34 +0000

We can not guarantee a secure connection to the mailservers of vietinbank.de!

Please contact the operator of vietinbank.de and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/vietinbank.de

Servers

Incoming Mails

These servers are responsible for incoming mails to @vietinbank.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mx01.vietinbank.de
212.211.194.83
5
supported
mail.vietinbank.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
15 s
cloudmx1.spxs.net
2001:a78:1:13:212:75:53:139
Results incomplete
10
supported
not checked
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
cloudmx1.spxs.net
212.75.53.139
Results incomplete
10
supported
not checked
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
cloudmx2.spxs.net
2001:a78:1:12:212:211:181:135
Results incomplete
20
supported
not checked
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
cloudmx2.spxs.net
212.211.181.135
Results incomplete
20
supported
not checked
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s

Outgoing Mails

We have not received any emails from a @vietinbank.de address so far. Test mail delivery

Certificates

First seen at:

CN=mail.vietinbank.de,OU=Domain Control Validated

Certificate chain
  • mail.vietinbank.de
    • remaining
    • 2048 bit
    • sha256WithRSAEncryption
    • Unknown Authority

      Sectigo RSA Domain Validation Secure Server CA
Subject
Organizational Unit (OU)
  • Domain Control Validated
Common Name (CN)
  • mail.vietinbank.de
Alternative Names
  • mail.vietinbank.de
  • autodiscover.vietinbank.de
  • mx01.vietinbank.de
  • td-vietb-ex01.ads.vietinbank.de
Issuer
Country (C)
  • GB
State (ST)
  • Greater Manchester
Locality (L)
  • Salford
Organization (O)
  • Sectigo Limited
Common Name (CN)
  • Sectigo RSA Domain Validation Secure Server CA
validity period
Not valid before
2019-03-19
Not valid after
2021-06-16
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
AD:CF:78:BF:7E:2F:45:C7:95:03:42:E9:48:9D:98:E2:54:00:A2:52:65:67:19:30:1E:A8:13:90:A2:8E:C2:EF
SHA1
32:2F:DF:52:8A:CB:A4:F7:AA:29:5D:F0:82:60:D7:8D:91:1C:42:93
X509v3 extensions
authorityKeyIdentifier
  • keyid:8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
subjectKeyIdentifier
  • 22:F9:31:CA:83:43:72:EB:45:4D:C6:99:36:FA:52:D2:86:C3:BB:B8
certificatePolicies
  • Policy: 1.3.6.1.4.1.6449.1.2.2.7
  • CPS: https://sectigo.com/CPS
  • Policy: 2.23.140.1.2.1
authorityInfoAccess
  • CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
  • OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : BB:D9:DF:BC:1F:8A:71:B5:93:94:23:97:AA:92:7B:47:
  • 38:57:95:0A:AB:52:E8:1A:90:96:64:36:8E:1E:D1:85
  • Timestamp : Mar 19 15:23:05.780 2019 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:05:10:79:D1:A4:8A:F0:83:9D:5A:72:01:
  • 9F:3F:6A:FE:8F:80:F3:AE:6A:6D:5E:87:A4:0D:6B:03:
  • 17:27:FB:30:02:21:00:B0:2B:EC:6B:6D:39:49:BD:63:
  • 2A:EE:06:07:DC:E7:AB:63:57:FC:22:2F:B6:1D:73:99:
  • 33:6F:2A:25:9B:8B:AE
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 44:94:65:2E:B0:EE:CE:AF:C4:40:07:D8:A8:FE:28:C0:
  • DA:E6:82:BE:D8:CB:31:B5:3F:D3:33:96:B5:B6:81:A8
  • Timestamp : Mar 19 15:23:05.845 2019 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:23:AD:10:AD:3B:B6:32:1A:28:2D:A7:A2:
  • 11:82:7E:5E:E1:C7:BE:04:23:12:75:D3:13:0E:92:54:
  • 2E:95:76:1D:02:21:00:BE:5C:71:98:43:E5:91:3E:4C:
  • 98:E6:94:AD:07:11:AC:E7:C4:E3:FD:9F:81:6E:8D:97:
  • 4C:DF:4B:59:9D:60:06
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 5C:DC:43:92:FE:E6:AB:45:44:B1:5E:9A:D4:56:E6:10:
  • 37:FB:D5:FA:47:DC:A1:73:94:B2:5E:E6:F6:C7:0E:CA
  • Timestamp : Mar 19 15:23:06.018 2019 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:A6:54:FB:22:0E:F5:6D:A5:C7:EC:CD:
  • 53:8D:38:E6:F9:1F:49:1B:D5:33:1B:DF:73:C0:47:75:
  • 7C:2A:76:0F:CB:02:20:75:C5:67:D5:1E:F9:55:94:22:
  • C7:58:3F:E6:71:82:2B:AF:09:15:7D:20:FC:C3:7B:6F:
  • 8F:FC:79:E2:9B:B3:79