SSL check results of dewa.gov.ae

NEW You can also bulk check multiple servers.

Discover if the mail servers for dewa.gov.ae can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Mon, 22 Jun 2020 00:31:41 +0000

The mailservers of dewa.gov.ae can be reached through an encrypted connection.

However, we found problems that may affect the security.

Servers

Incoming Mails

These servers are responsible for incoming mails to @dewa.gov.ae addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mx2.dewa.gov.ae
151.253.189.66
10
supported
MX1.dewa.gov.ae
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
20 s
mx1.dewa.gov.ae
151.253.189.65
10
supported
Cisco ESA Certificate
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
18 s
mx3.dewa.gov.ae
213.42.49.65
20
supported
MX1.dewa.gov.ae
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
18 s
mx4.dewa.gov.ae
213.42.49.66
20
supported
MX1.dewa.gov.ae
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
18 s

Outgoing Mails

We have not received any emails from a @dewa.gov.ae address so far. Test mail delivery

Certificates

First seen at:

OU=IT,ST=Dubai,O=DEWA,L=Dubai,CN=MX1.dewa.gov.ae,C=AE

Certificate chain
  • MX1.dewa.gov.ae (Certificate is self-signed.)
    • remaining
    • 2048 bit
    • sha256WithRSAEncryption
    • Unknown Authority

Subject
Country (C)
  • AE
Common Name (CN)
  • MX1.dewa.gov.ae
Common Name is not included in Alternative Names
Locality (L)
  • Dubai
Organization (O)
  • DEWA
State (ST)
  • Dubai
Organizational Unit (OU)
  • IT
Alternative Names
  • mx2.dewa.gov.ae
  • mx3.dewa.gov.ae
  • mx4.dewa.gov.ae
Issuer

Certificate is self-signed.

validity period
Not valid before
2018-10-15
Not valid after
2028-10-12
This certifcate has been verified for the following usages:
  • Digital Signature
  • Non Repudiation
  • Key Encipherment
  • E-mail Protection
Fingerprints
SHA256
2A:3D:E0:48:75:07:52:88:47:C2:87:B5:B6:EF:48:E6:12:25:22:19:32:0D:6A:13:88:61:D2:9C:63:CF:99:02
SHA1
6D:EA:25:16:CC:E6:EB:40:F6:01:7E:F7:F3:8A:B5:F5:19:19:19:16
First seen at:

CN=Cisco ESA Certificate,O=Cisco Systems,L=San Jose,ST=California,C=US

Certificate chain
  • Cisco ESA Certificate (Certificate is self-signed.)
    • remaining
    • 2048 bit
    • sha256WithRSAEncryption
    • Hostname Mismatch
    • Unknown Authority

Subject
Country (C)
  • US
State (ST)
  • California
Locality (L)
  • San Jose
Organization (O)
  • Cisco Systems
Common Name (CN)
  • Cisco ESA Certificate
Issuer

Certificate is self-signed.

validity period
Not valid before
2018-09-25
Not valid after
2021-09-24
Fingerprints
SHA256
0E:20:EE:B8:AD:4F:3A:9E:5F:D8:7F:58:D4:56:FB:B8:B4:3C:09:A7:EA:7B:60:E5:07:20:01:F5:8D:EE:4F:F1
SHA1
DB:48:D0:06:12:F6:6F:24:62:29:BF:14:3A:C3:EA:0A:0B:81:8D:E9