SSL-Tools

SSL check results of cli.ist

NEW You can also bulk check multiple servers.

Discover if the mail servers for cli.ist can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Thu, 09 Apr 2026 01:17:06 +0000

We can not guarantee a secure connection to the mailservers of cli.ist!

Please contact the operator of cli.ist and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/cli.ist

Servers

Incoming Mails

These servers are responsible for incoming mails to @cli.ist addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.steju.net
2605:a140:2226:9126::1
 5
supported
orchid.steju.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
14 s
mail.steju.net
217.77.1.116
 5
supported
orchid.steju.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
13 s
mailn.steju.net
2001:470:1f10:b53::2
 10
supported
smtp.steju.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
13 s
mailn.steju.net
216.48.88.18
 10
supported
smtp.steju.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
12 s
mailr.steju.net
216.48.88.11
Results incomplete
15
unsupported
not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
11 s

Outgoing Mails

We have not received any emails from a @cli.ist address so far. Test mail delivery

Certificates

First seen at:

CN=orchid.steju.net

Certificate chain
  • orchid.steju.net
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption
    • Hostname Mismatch
      • R13
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • orchid.steju.net
Alternative Names
  • orchid.steju.net
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R13
validity period
Not valid before
2026-03-10
Not valid after
2026-06-08
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
Fingerprints
SHA256
61:02:73:1E:B1:EE:19:20:D4:33:88:4F:5F:00:AE:32:AA:FB:77:D3:A1:9E:59:FC:1C:3F:D5:A1:45:6A:8B:A4
SHA1
6D:B6:9E:E5:44:48:6C:19:B9:AB:1D:3D:73:83:65:CB:F1:B0:7E:BE
X509v3 extensions
subjectKeyIdentifier
  • 8C:87:93:D4:B6:D3:45:73:F1:49:65:FD:4A:27:8A:D8:64:FD:00:85
authorityKeyIdentifier
  • keyid:E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
authorityInfoAccess
  • CA Issuers - URI:http://r13.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://r13.c.lencr.org/65.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
  • 5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
  • Timestamp : Mar 10 09:43:37.058 2026 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:95:C6:35:21:FF:02:DB:BD:7D:78:C5:
  • F1:FB:98:F4:B8:FA:9C:5D:8C:2D:11:8C:A6:01:74:70:
  • 3E:C4:C0:55:DC:02:20:76:A1:62:29:BF:BD:60:9B:43:
  • 7E:C9:74:86:1A:6E:E5:F6:E4:B8:87:C7:F5:44:06:1C:
  • 54:A6:8C:19:BD:E2:8A
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
  • E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
  • Timestamp : Mar 10 09:43:37.124 2026 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:62:F5:A3:2F:4A:E9:D9:50:9A:DB:97:E9:
  • FC:B3:44:E3:94:62:AD:4C:6D:9E:1B:89:2B:2C:98:DC:
  • 43:64:81:F8:02:21:00:DD:58:29:E8:B3:EB:24:41:E4:
  • 82:B7:ED:AB:9C:A2:DD:71:54:18:3D:F8:ED:10:95:C3:
  • 2A:EF:94:83:A2:9B:92
First seen at:

CN=smtp.steju.net

Certificate chain
  • smtp.steju.net
    • remaining
    • 256 bit
    • ecdsa-with-SHA384
    • Hostname Mismatch
      • E7
        • remaining
        • 384 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • smtp.steju.net
Alternative Names
  • smtp.steju.net
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • E7
validity period
Not valid before
2026-04-08
Not valid after
2026-07-07
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
Fingerprints
SHA256
34:28:CD:B3:E0:EA:DD:62:A0:CC:55:B7:0F:A9:35:E4:58:07:DA:13:8F:55:85:4F:A7:DE:F5:2B:6F:E2:0D:A3
SHA1
DE:E9:E6:90:DC:A0:80:E9:58:7E:89:50:A1:FF:62:6E:6F:BF:8C:F9
X509v3 extensions
subjectKeyIdentifier
  • 2A:00:DE:E7:C1:EB:16:73:0D:7A:21:71:C3:F3:F5:6B:94:59:F1:B8
authorityKeyIdentifier
  • keyid:AE:48:9E:DC:87:1D:44:A0:6F:DA:A2:E5:60:74:04:78:C2:9C:00:80
authorityInfoAccess
  • CA Issuers - URI:http://e7.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://e7.c.lencr.org/96.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:
  • E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A
  • Timestamp : Apr 8 05:02:47.523 2026 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:18:FF:0E:F2:91:20:81:2D:CB:CC:CE:0C:
  • B4:2B:0B:89:8F:6A:4B:2E:04:8C:52:C2:91:52:53:D4:
  • 29:9C:4F:8A:02:21:00:CB:6B:56:0E:6E:65:5E:FE:F3:
  • B5:10:BB:8B:71:FC:2D:94:36:65:B3:A6:4F:89:0A:4C:
  • 17:85:10:F0:20:69:FD
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19:
  • D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27
  • Timestamp : Apr 8 05:02:48.498 2026 GMT
  • Extensions: 00:00:05:00:06:0E:0E:03
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:AF:A5:14:A7:6E:F3:A5:33:D9:D9:73:
  • 55:D0:2B:E7:7A:5D:D8:83:00:F2:FD:03:32:14:A7:5F:
  • F2:33:B3:9C:0F:02:20:3E:82:95:80:1C:E6:D5:A3:69:
  • 14:B9:6E:2C:05:B0:2D:6B:98:3C:3F:EC:67:21:96:56:
  • 08:75:24:2C:1D:50:3E