SSL check results of benshoogrendementfondsen.nl

NEW You can also bulk check multiple servers.

Discover if the mail servers for benshoogrendementfondsen.nl can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Sat, 01 Aug 2020 08:55:13 +0000

We can not guarantee a secure connection to the mailservers of benshoogrendementfondsen.nl!

Please contact the operator of benshoogrendementfondsen.nl and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/benshoogrendementfondsen.nl

Servers

Incoming Mails

These servers are responsible for incoming mails to @benshoogrendementfondsen.nl addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
filter01.mx-relay.com
82.204.43.40
Results incomplete
5
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
filter02.mx-relay.com
82.204.43.40
Results incomplete
5
supported
not checked
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
fallbackdt.mx-relay.com
185.18.239.2
Results incomplete
20
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
filter.cyso.net
93.94.228.132
Results incomplete
25
supported
not checked
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
filter.cyso.net
93.94.228.133
Results incomplete
25
supported
not checked
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mx1.cyso.net
85.158.200.78
30
supported
mx1.mail.cyso.net
DANE
missing
PFS
unsupported
Heartbleed
not vulnerable
Weak ciphers
supported
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.0
  • SSLv3
7 s
mx2.cyso.net
85.158.202.246
35
supported
mx2.mail.cyso.net
DANE
missing
PFS
unsupported
Heartbleed
not vulnerable
Weak ciphers
supported
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.0
  • SSLv3
6 s

Outgoing Mails

We have not received any emails from a @benshoogrendementfondsen.nl address so far. Test mail delivery

Certificates

First seen at:

emailAddress=admin@node0,CN=mx1.mail.cyso.net,OU=Sendmail Server,O=Sendmail

Certificate chain
  • mx1.mail.cyso.net (Certificate is self-signed.)
    • remaining
    • 2048 bit
    • md5WithRSAEncryption
    • Hostname Mismatch
    • Expired
    • Unknown Authority

Subject
Organization (O)
  • Sendmail
Organizational Unit (OU)
  • Sendmail Server
Common Name (CN)
  • mx1.mail.cyso.net
Email
  • admin@node0
Issuer

Certificate is self-signed.

validity period
Not valid before
2007-01-26
Not valid after
2017-01-23
Fingerprints
SHA256
EC:08:2C:49:F8:91:60:9B:C8:33:D6:28:A2:51:00:21:AC:4B:2E:C3:28:8B:F6:9E:D1:BB:9D:14:5A:BE:DC:73
SHA1
E1:2A:5F:A4:B2:2A:FB:36:A1:40:90:6F:43:6D:17:EC:6E:F3:08:A9
First seen at:

emailAddress=admin@mx2.cyso.net,CN=mx2.mail.cyso.net,OU=Sendmail Server,O=Sendmail

Certificate chain
  • mx2.mail.cyso.net (Certificate is self-signed.)
    • remaining
    • 2048 bit
    • sha1WithRSAEncryption
    • Hostname Mismatch
    • Expired
    • Unknown Authority

Subject
Organization (O)
  • Sendmail
Organizational Unit (OU)
  • Sendmail Server
Common Name (CN)
  • mx2.mail.cyso.net
Email
  • admin@mx2.cyso.net
Issuer

Certificate is self-signed.

validity period
Not valid before
2008-06-12
Not valid after
2018-06-10
Fingerprints
SHA256
34:11:0A:38:57:0B:59:53:F3:36:4E:6D:42:47:CF:7C:62:B1:18:BA:A8:2A:41:C4:AF:CA:BE:82:A9:F1:E5:2D
SHA1
4B:3D:EF:82:77:A4:7F:2D:A7:3E:AA:D8:C8:EE:E7:73:6D:B1:F4:88

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.filter01.mx-relay.com
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
_25._tcp.fallbackdt.mx-relay.com
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid