SSL-Tools

SSL check results of ballerina.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for ballerina.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Mon, 14 Jun 2021 06:18:18 +0000

We can not guarantee a secure connection to the mailservers of ballerina.de!

Please contact the operator of ballerina.de and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/ballerina.de

Servers

Incoming Mails

These servers are responsible for incoming mails to @ballerina.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.ballerina.de
87.245.6.140
 10
supported
https.proxy.nul
DANE
missing
PFS
unsupported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
2 s
mail4.marcant.net
217.14.168.74
Results incomplete
100
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s

Outgoing Mails

We have not received any emails from a @ballerina.de address so far. Test mail delivery

Certificates

First seen at:

CN=https.proxy.nul,OU=Fireware,O=WatchGuard_Technologies

Certificate chain
Subject
Organization (O)
  • WatchGuard_Technologies
Organizational Unit (OU)
  • Fireware
Common Name (CN)
  • https.proxy.nul
Issuer
Organization (O)
  • WatchGuard_Technologies
Organizational Unit (OU)
  • Fireware
Common Name (CN)
  • Fireware HTTPS Proxy (SN 8013074C18FEA 2020-04-01 12:23:19 UTC) CA
validity period
Not valid before
2020-03-02
Not valid after
2030-03-30
This certifcate has been verified for the following usages:
  • TLS Web Client Authentication
Fingerprints
SHA256
5D:AB:99:B7:A6:55:72:A5:2B:88:0B:21:E8:D2:05:A5:41:CE:77:39:B4:F4:29:52:17:48:80:84:4B:95:81:6B
SHA1
38:8F:34:79:9B:A1:F7:9F:5F:40:43:79:5B:D3:17:F7:DD:14:CE:1F

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.mail4.marcant.net
  • DANE-EE: Domain Issued Certificate
  • Use full certificate
  • SHA-256 Hash
valid
—
_25._tcp.mail4.marcant.net
  • DANE-EE: Domain Issued Certificate
  • Use full certificate
  • SHA-256 Hash
valid
—