SSL check results of bergroot.co.za

NEW You can also bulk check multiple servers.

Discover if the mail servers for bergroot.co.za can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Fri, 25 Jul 2025 10:51:04 +0000

The mailservers of bergroot.co.za can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @bergroot.co.za addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.bergroot.co.za
196.40.97.154
10
supported
bergroot.co.za
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
29 s

Outgoing Mails

We have not received any emails from a @bergroot.co.za address so far. Test mail delivery

Certificates

First seen at:

CN=bergroot.co.za

Certificate chain
  • bergroot.co.za
    • remaining
    • 2048 bit
    • sha256WithRSAEncryption

      • R11
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption

          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption

Subject
Common Name (CN)
  • bergroot.co.za
Alternative Names
  • bergroot.co.za
  • imap.bergroot.co.za
  • mail.bergroot.co.za
  • smtp.bergroot.co.za
  • www.bergroot.co.za
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R11
validity period
Not valid before
2025-07-04
Not valid after
2025-10-02
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
8C:85:3A:56:8B:35:37:D3:8F:31:82:26:E2:F3:41:BD:F9:9C:D4:BB:8D:A3:3E:B5:D0:5B:B3:CB:A1:18:A9:E1
SHA1
14:46:DE:E3:BA:4A:DE:1F:E6:FA:5B:19:D4:BE:C1:88:AF:36:20:97
X509v3 extensions
subjectKeyIdentifier
  • 05:EB:F2:58:36:42:18:D2:B5:C3:C9:09:16:D1:F4:7A:D6:0E:6B:93
authorityKeyIdentifier
  • keyid:C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
authorityInfoAccess
  • CA Issuers - URI:http://r11.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://r11.c.lencr.org/103.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
  • 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
  • Timestamp : Jul 4 10:04:27.896 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:BC:C4:8F:7B:25:FE:DD:02:C1:6E:E9:
  • E7:C4:99:23:9B:1E:96:48:79:03:27:D5:8E:D9:9E:AB:
  • 8C:60:6F:B7:9E:02:21:00:B6:A4:20:3B:F2:9C:AA:12:
  • 68:FF:95:73:C6:39:78:58:F6:FC:88:4F:A0:58:0A:6B:
  • 01:65:5A:A3:50:65:7F:90
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : AF:18:1A:28:D6:8C:A3:E0:A9:8A:4C:9C:67:AB:09:F8:
  • BB:BC:22:BA:AE:BC:B1:38:A3:A1:9D:D3:F9:B6:03:0D
  • Timestamp : Jul 4 10:04:27.952 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:AF:0E:59:2C:92:BB:16:25:26:F2:AF:
  • A9:1D:7E:A3:A4:45:E3:4A:51:E9:F1:9F:5C:76:8F:45:
  • 3D:3B:86:29:AC:02:21:00:CA:AB:9A:9A:67:EA:9D:85:
  • 4D:A2:B9:B4:0A:F7:53:3F:B2:62:B4:FC:77:6A:77:90:
  • 54:60:54:42:42:59:27:75