SSL-Tools

SSL check results of baerkarrer.ch

NEW You can also bulk check multiple servers.

Discover if the mail servers for baerkarrer.ch can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Sat, 08 Jan 2022 09:05:20 +0000

No connection to the mailservers of baerkarrer.ch could be established.

Servers

Incoming Mails

These servers are responsible for incoming mails to @baerkarrer.ch addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.baerkarrer.ch
212.243.160.199
Results incomplete
10
supported
*.baerkarrer.ch
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mail2.baerkarrer.ch
212.243.160.195
Results incomplete
20
supported
*.baerkarrer.ch
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s

Outgoing Mails

We have not received any emails from a @baerkarrer.ch address so far. Test mail delivery

Certificates

First seen at:

CN=*.baerkarrer.ch,OU=IT Department,O=Bär & Karrer AG,L=Zürich,ST=Zürich,C=CH

Certificate chain
Subject
Country (C)
  • CH
State (ST)
  • Zürich
Locality (L)
  • Zürich
Organization (O)
  • Bär & Karrer AG
Organizational Unit (OU)
  • IT Department
Common Name (CN)
  • *.baerkarrer.ch
Alternative Names
  • *.baerkarrer.ch
  • baerkarrer.ch
Issuer
Country (C)
  • CH
Organization (O)
  • SwissSign AG
Common Name (CN)
  • SwissSign Server Gold CA 2014 - G22
validity period
Not valid before
2020-05-25
Not valid after
2022-05-25
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
E6:62:1D:3C:E7:47:49:D4:60:96:AC:93:E0:A5:E3:3A:FF:1E:5D:83:D9:53:95:96:46:24:88:0F:27:43:08:9E
SHA1
04:06:6D:7C:6B:B8:4B:EA:69:22:04:E9:BC:80:3F:E1:8F:8F:DA:F6
X509v3 extensions
subjectKeyIdentifier
  • 38:C1:05:1F:58:C1:C4:81:ED:D6:DD:E4:1F:40:D8:B0:04:8E:A1:5F
authorityKeyIdentifier
  • keyid:E7:F1:E7:FD:2E:53:AD:11:E5:81:1A:57:A4:73:8F:12:7D:98:C8:AE
crlDistributionPoints
  • Full Name:
  • URI:http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
  • Full Name:
  • URI:ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
certificatePolicies
  • Policy: 2.16.756.1.89.1.2.1.13
  • CPS: http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf
  • Policy: 0.4.0.2042.1.7
  • Policy: 2.23.140.1.2.2
authorityInfoAccess
  • CA Issuers - URI:http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
  • OCSP - URI:http://ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 41:C8:CA:B1:DF:22:46:4A:10:C6:A1:3A:09:42:87:5E:
  • 4E:31:8B:1B:03:EB:EB:4B:C7:68:F0:90:62:96:06:F6
  • Timestamp : May 25 12:07:56.642 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:19:52:E9:51:87:52:59:A8:6D:F9:96:7C:
  • BF:20:25:EA:6A:87:B3:0B:88:82:A3:C7:65:9A:71:4E:
  • 9B:C0:E9:00:02:21:00:F6:32:80:F7:11:A5:F8:2C:AE:
  • E1:87:1B:16:4E:E4:5F:DD:89:33:C3:C5:6D:BE:49:B1:
  • EE:6D:5B:00:9C:3B:2B
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 46:A5:55:EB:75:FA:91:20:30:B5:A2:89:69:F4:F3:7D:
  • 11:2C:41:74:BE:FD:49:B8:85:AB:F2:FC:70:FE:6D:47
  • Timestamp : May 25 12:07:56.268 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:EB:2B:D0:4E:3B:85:28:5D:06:19:B5:
  • A7:74:A8:D2:17:BE:91:5B:F7:AD:20:34:75:15:13:6E:
  • 7C:1E:48:22:4A:02:21:00:C0:D7:08:4E:79:83:BD:65:
  • 74:06:C7:0B:36:10:BB:DE:0D:FE:ED:94:B7:54:A1:D6:
  • 5E:EC:66:CD:67:8B:76:F7
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 6F:53:76:AC:31:F0:31:19:D8:99:00:A4:51:15:FF:77:
  • 15:1C:11:D9:02:C1:00:29:06:8D:B2:08:9A:37:D9:13
  • Timestamp : May 25 12:07:56.521 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:EC:96:C5:01:96:0F:FF:11:E5:1C:55:
  • 6B:62:CE:6F:A4:64:BF:31:E6:17:7E:0D:9F:DF:69:14:
  • 3D:3D:D6:A0:3F:02:21:00:F7:30:7B:5F:B5:48:A2:FD:
  • FF:F6:3B:B3:80:77:A1:71:B4:BA:5F:8D:00:48:92:DB:
  • 77:73:7C:67:72:F5:04:89
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : BB:D9:DF:BC:1F:8A:71:B5:93:94:23:97:AA:92:7B:47:
  • 38:57:95:0A:AB:52:E8:1A:90:96:64:36:8E:1E:D1:85
  • Timestamp : May 25 12:07:56.405 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:10:F7:D2:09:AE:F8:BC:AF:FC:33:BC:DD:
  • 01:53:9C:E7:44:3A:EB:9E:3B:85:01:8A:EA:86:F9:0A:
  • 8E:5D:00:2B:02:21:00:9C:51:C9:13:FC:7A:6B:26:44:
  • 3D:7A:0B:CD:9F:65:4C:3C:B6:0D:1A:D9:84:32:C8:E6:
  • B6:9C:0D:F2:3F:4C:80