andreae.hamburg - TLS / STARTTLS Test

Discover if the mail servers for andreae.hamburg can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Sat, 07 Dec 2024 19:46:32 +0000

Certificates

Trustworthy
Protocol

Secure
DANE

Valid

The mailservers of andreae.hamburg can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @andreae.hamburg addresses.

Hostname / IP address	Priority	STARTTLS	Certificates	Protocol
mail24.andreae.hamburg 2a01:4f8:c012:f5c5::1	20	supported	mail24.andreae.hamburg	DANE valid PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 ~~SSLv3~~	2024-12-07 1 s
mail24.andreae.hamburg 157.90.146.225	20	supported	mail24.andreae.hamburg	DANE valid PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 ~~SSLv3~~	2024-12-07 1 s

Outgoing Mails

We have not received any emails from a @andreae.hamburg address so far. Test mail delivery

Certificates

First seen at: 2024-12-07

CN=mail24.andreae.hamburg

Certificate chain

mail24.andreae.hamburg
- 2025-02-17 remaining
- 256 bit
- ecdsa-with-SHA384

Subject

Common Name (CN)

mail24.andreae.hamburg

Alternative Names

mail24.andreae.hamburg

Issuer

Country (C)

Organization (O)

Let's Encrypt

Common Name (CN)

validity period

Not valid before: 2024-11-19
Not valid after: 2025-02-17

This certifcate has been verified for the following usages:

Digital Signature
TLS Web Server Authentication
TLS Web Client Authentication

Fingerprints

SHA256: 77:26:35:B4:3F:46:3F:66:5E:D9:69:8B:F0:E6:04:D3:92:04:01:0D:BA:64:DB:E7:8A:7B:C5:11:2A:34:6B:58
SHA1: 11:EB:82:7C:99:B0:8D:FE:99:96:F8:2C:ED:4D:E8:1B:C2:30:96:A8

X509v3 extensions

subjectKeyIdentifier

71:0C:AB:7A:F6:45:0F:09:63:E9:57:CD:AE:BC:FC:05:08:15:DE:D9

authorityKeyIdentifier

keyid:93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2

authorityInfoAccess

OCSP - URI:http://e6.o.lencr.org
CA Issuers - URI:http://e6.i.lencr.org/

certificatePolicies

Policy: 2.23.140.1.2.1

ct_precert_scts

Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : Nov 19 07:19:59.493 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:2E:00:86:0F:FE:FF:EC:E8:31:62:2A:5A:
8A:0F:F7:4C:DE:75:EE:3F:83:AB:47:3F:A9:6F:EC:C4:
11:A4:57:09:02:20:76:91:71:0B:CC:41:6F:A7:44:A0:
95:9C:44:25:C3:F6:D7:80:BE:C9:69:DF:3E:9C:88:76:
F9:C3:FD:66:02:BB
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
Timestamp : Nov 19 07:19:59.547 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:DA:DE:6C:93:47:92:3B:78:C5:D2:B6:
02:04:A2:7D:B5:C4:4C:14:86:0E:EB:7E:53:32:84:DD:
88:5A:32:38:89:02:20:24:21:4D:1F:9C:24:B6:38:02:
72:94:75:8D:62:6E:DE:AB:E5:89:7C:35:FC:79:FD:97:
05:E2:EF:B8:00:CC:13

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name	Options	DNSSEC	Matches
_25._tcp.mail24.andreae.hamburg	DANE-TA: Trust Anchor Assertion Use subject public key SHA-256 Hash	valid	—
_25._tcp.mail24.andreae.hamburg	DANE-TA: Trust Anchor Assertion Use subject public key SHA-256 Hash	valid	valid
_25._tcp.mail24.andreae.hamburg	DANE-TA: Trust Anchor Assertion Use subject public key SHA-256 Hash	valid	valid

SSL check results of andreae.hamburg