SSL-Tools

SSL check results of czso.cz

NEW You can also bulk check multiple servers.

Discover if the mail servers for czso.cz can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Mon, 20 Mar 2023 20:23:03 +0000

We can not guarantee a secure connection to the mailservers of czso.cz!

Please contact the operator of czso.cz and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/czso.cz

Servers

Incoming Mails

These servers are responsible for incoming mails to @czso.cz addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
smtp3.czso.cz
194.48.241.146
Results incomplete
50
unsupported
not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
2 s
mspool.gts.cz
193.85.201.247
 300
supported
*.cz.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
12 s

Outgoing Mails

We have not received any emails from a @czso.cz address so far. Test mail delivery

Certificates

First seen at:

CN=*.cz.net,O=T-Mobile Czech Republic a.s.,L=Praha,C=CZ

Certificate chain
Subject
Country (C)
  • CZ
Locality (L)
  • Praha
Organization (O)
  • T-Mobile Czech Republic a.s.
Common Name (CN)
  • *.cz.net
Alternative Names
  • *.cz.net
  • cz.net
Issuer
Country (C)
  • US
Organization (O)
  • Entrust, Inc.
Organizational Unit (OU)
  • See www.entrust.net/legal-terms
  • (c) 2012 Entrust, Inc. - for authorized use only
Common Name (CN)
  • Entrust Certification Authority - L1K
validity period
Not valid before
2023-02-20
Not valid after
2024-03-03
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
99:34:0D:0F:42:6B:47:FB:B2:FE:B8:00:73:AE:FF:A5:46:BB:69:AD:72:E2:5C:0C:18:DE:C7:C1:55:81:C3:71
SHA1
AF:A7:6B:16:87:A9:A4:EF:03:D7:FE:92:F2:A1:74:C1:5E:8A:12:1B
X509v3 extensions
subjectKeyIdentifier
  • 00:D3:B4:F5:64:44:AC:20:C2:6D:50:1C:34:B7:99:AC:78:A8:F3:73
authorityKeyIdentifier
  • keyid:82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF
authorityInfoAccess
  • OCSP - URI:http://ocsp.entrust.net
  • CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer
crlDistributionPoints
  • Full Name:
  • URI:http://crl.entrust.net/level1k.crl
certificatePolicies
  • Policy: 2.16.840.1.114028.10.1.5
  • CPS: https://www.entrust.net/rpa
  • Policy: 2.23.140.1.2.2
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 55:81:D4:C2:16:90:36:01:4A:EA:0B:9B:57:3C:53:F0:
  • C0:E4:38:78:70:25:08:17:2F:A3:AA:1D:07:13:D3:0C
  • Timestamp : Feb 20 12:35:42.901 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:6C:A1:20:4D:63:4B:F4:F2:F9:61:0B:9C:
  • 5A:FE:63:83:08:4A:85:00:83:5F:03:84:8A:AD:B6:21:
  • 60:88:82:37:02:21:00:EC:9F:25:74:81:4E:B7:05:DF:
  • FC:47:EC:41:1E:95:AE:C7:27:FE:8D:26:86:7A:52:51:
  • 16:E2:9F:32:56:52:5F
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
  • 67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
  • Timestamp : Feb 20 12:35:42.947 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:88:F4:4F:DF:6C:BF:37:2B:65:09:1A:
  • D1:A0:D5:7C:9B:80:A4:8E:C3:4F:ED:CD:7E:0C:25:FC:
  • 9F:DD:71:0A:28:02:20:03:85:2C:4E:92:A1:57:A0:F1:
  • 98:18:8B:48:94:59:E6:5E:0C:9E:74:BE:76:B7:68:E7:
  • 00:7F:96:0E:C5:F9:DF
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
  • B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
  • Timestamp : Feb 20 12:35:43.147 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:26:8B:F3:89:FF:72:97:56:3F:93:EF:B7:
  • E4:38:38:40:B5:F7:56:BB:89:8C:7E:BB:54:39:CA:77:
  • FB:D9:C7:B4:02:21:00:A6:13:3C:CB:0E:32:C0:09:9E:
  • 3A:BB:22:97:44:BC:65:C5:4C:95:EC:FA:6B:F2:38:97:
  • 12:C5:02:AA:07:DA:EE