SSL check results of azal.az

NEW You can also bulk check multiple servers.

Discover if the mail servers for azal.az can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Mon, 02 Aug 2021 13:40:37 +0000

We can not guarantee a secure connection to the mailservers of azal.az!

Please contact the operator of azal.az and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/azal.az

Servers

Incoming Mails

These servers are responsible for incoming mails to @azal.az addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.azal.az
85.132.70.218
0
supported
mail.azal.az
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
6 s
smtp.azal.az
213.172.74.101
Results incomplete
100
unsupported
not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
1 s

Outgoing Mails

We have not received any emails from a @azal.az address so far. Test mail delivery

Certificates

First seen at:

CN=mail.azal.az,OU=IT,O=AZAL,L=Baku,ST=Baku,C=AZ

Certificate chain
  • mail.azal.az
    • remaining
    • 2048 bit
    • sha1WithRSAEncryption
    • Expired
    • Unknown Authority

      AZALroot-CA
Subject
Country (C)
  • AZ
State (ST)
  • Baku
Locality (L)
  • Baku
Organization (O)
  • AZAL
Organizational Unit (OU)
  • IT
Common Name (CN)
  • mail.azal.az
Alternative Names
  • mail.azal.az
  • caslb01.azal.az
  • AutoDiscover.azal.baku.az
  • AutoDiscover.azal.az
  • AutoDiscover.azalsecurity.az
  • AutoDiscover.aaaf.az
  • AutoDiscover.nomail.local
  • AutoDiscover.butaairways.az
  • AutoDiscover.asec.az
  • AutoDiscover.azans.az
  • azal.baku.az
  • azal.az
  • azalsecurity.az
  • aaaf.az
  • nomail.local
  • butaairways.az
  • asec.az
  • azans.az
  • excas01
  • excas01.azal.az
  • excas02
  • excas02.azal.az
  • exmb01
  • exmb01.azal.az
  • exmb02
  • exmb02.azal.az
  • ex04
  • ex04.azal.az
  • edge02
  • edge02.azal.az
  • edge01
  • edge01.azal.az
  • smtp.azal.az
Issuer
Domain Component (DC)
  • az
  • azal
Common Name (CN)
  • AZALroot-CA
validity period
Not valid before
2018-02-07
Not valid after
2020-02-07
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
Fingerprints
SHA256
17:68:6D:B5:C3:BB:AF:EE:7A:9E:04:DC:D4:D8:CF:CC:4D:15:C2:F6:F3:1A:0C:CF:D7:55:3E:B0:8F:2A:6F:23
SHA1
61:AC:0B:C7:EB:6F:41:45:01:FE:F5:62:76:C9:A7:E9:CB:C8:33:85
X509v3 extensions
subjectKeyIdentifier
  • EC:AA:38:25:7A:57:01:E2:02:1A:26:61:97:67:F0:E5:8D:16:AC:B6
authorityKeyIdentifier
  • keyid:D9:4F:75:51:9B:A3:7D:14:A9:60:02:83:8D:1A:CC:50:32:33:22:E4
crlDistributionPoints
  • Full Name:
  • URI:ldap:///CN=AZALroot-CA,CN=rootca01,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=azal,DC=az?certificateRevocationList?base?objectClass=cRLDistributionPoint
authorityInfoAccess
  • CA Issuers - URI:ldap:///CN=AZALroot-CA,CN=AIA,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=azal,DC=az?cACertificate?base?objectClass=certificationAuthority
1_3_6_1_4_1_311_20_2
  • ...W.e.b.S.e.r.v.e.r