acs-international.online - TLS / STARTTLS Test

Discover if the mail servers for acs-international.online can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Tue, 23 Apr 2024 09:44:32 +0000

Certificates

Trustworthy
Protocol

Secure
DANE

Problems found

The mailservers of acs-international.online can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @acs-international.online addresses.

Hostname / IP address	Priority	STARTTLS	Certificates	Protocol
mail.acs-international.online 2a01:4f8:c0c:f80b::1	10	supported	mail.acs-international.online	DANE errors PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-04-23 6 s
mail.acs-international.online 78.47.240.138	10	supported	mail.acs-international.online	DANE errors PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-04-23 2 s

Outgoing Mails

We have not received any emails from a @acs-international.online address so far. Test mail delivery

Certificates

First seen at: 2024-04-23

CN=mail.acs-international.online

Certificate chain

mail.acs-international.online
- 2024-07-07 remaining
- 4096 bit
- sha256WithRSAEncryption

Subject

Common Name (CN)

mail.acs-international.online

Alternative Names

mail.acs-international.online

Issuer

Country (C)

Organization (O)

Let's Encrypt

Common Name (CN)

validity period

Not valid before: 2024-04-08
Not valid after: 2024-07-07

This certifcate has been verified for the following usages:

Digital Signature
Key Encipherment
TLS Web Server Authentication
TLS Web Client Authentication

Fingerprints

SHA256: 6E:F9:B2:DA:EF:A9:EB:54:FD:4D:07:E1:A1:54:B8:34:CF:6A:D5:97:5C:74:44:A2:CA:3E:05:65:AA:B0:E4:76
SHA1: DD:6D:37:95:B9:1D:7A:C9:5B:75:FC:1C:07:89:CC:28:5A:E5:5B:6C

X509v3 extensions

subjectKeyIdentifier

99:66:D5:72:92:75:72:A7:BE:BE:48:3D:66:D3:23:81:C8:BD:0A:F1

authorityKeyIdentifier

keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6

authorityInfoAccess

OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/

certificatePolicies

Policy: 2.23.140.1.2.1

ct_precert_scts

Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Apr 8 09:35:59.216 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:B6:81:8C:30:35:9F:69:6D:DE:23:E5:
3B:36:CA:40:7B:A5:C3:6C:32:B2:21:47:30:7A:50:16:
0E:0F:38:C6:2F:02:21:00:A5:99:54:7E:83:E1:A8:CE:
0C:5B:8E:CC:F0:11:BE:B6:12:0F:2D:B4:15:42:E8:C2:
FC:EC:C2:07:96:C1:BD:EB
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
Timestamp : Apr 8 09:35:59.408 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:D6:E1:21:14:2E:1A:EB:75:56:7C:D6:
87:52:2E:D4:A9:29:B9:76:F4:F7:E6:70:8B:63:62:B6:
04:B3:95:C1:FD:02:21:00:AE:38:BC:08:18:2F:01:27:
4C:59:32:35:8D:52:95:7C:5F:FA:7F:19:B6:2E:32:A6:
49:FA:32:A0:62:76:63:74

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name	Options	DNSSEC	Matches
_25._tcp.mail.acs-international.online	DANE-EE: Domain Issued Certificate Use subject public key SHA-256 Hash	valid	—

SSL check results of acs-international.online