dfm.com.pl - TLS / STARTTLS Test

Discover if the mail servers for dfm.com.pl can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Sun, 02 Aug 2026 07:20:54 +0000

Certificates

Problems found
Protocol

Secure
DANE

Missing

The mailservers of dfm.com.pl can be reached through an encrypted connection.

However, we found problems that may affect the security.

Servers

Incoming Mails

These servers are responsible for incoming mails to @dfm.com.pl addresses.

Hostname / IP address	Priority	STARTTLS	Certificates	Protocol
email2.dfm.com.pl 176.97.255.251	10	supported	*.dfm.com.pl	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2026-08-02 2 s
email1.dfm.com.pl 83.16.30.98	20	supported	*.dfm.com.pl	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2026-08-02 3 s

Outgoing Mails

We have received emails from these servers with @dfm.com.pl sender addresses. Test mail delivery

Host	TLS Version & Cipher
email2.dfm.com.pl (176.97.255.251)	TLSv1.2 ADH-AES256-GCM-SHA384	2020-08-06

Certificates

First seen at: 2025-11-30

CN=*.dfm.com.pl

Certificate chain

*.dfm.com.pl
- 2026-11-30 remaining
- 2048 bit
- sha256WithRSAEncryption
- Unknown Authority

Subject

Common Name (CN)

*.dfm.com.pl

Alternative Names

*.dfm.com.pl
dfm.com.pl

Issuer

Country (C)

Organization (O)

home.pl S.A.

Common Name (CN)

home pl DV TLS G2 R35 CA

validity period

Not valid before: 2025-10-31
Not valid after: 2026-11-30

This certifcate has been verified for the following usages:

Digital Signature
Key Encipherment
TLS Web Server Authentication

Fingerprints

SHA256: F6:64:B1:D9:09:41:35:C0:76:3C:3B:A5:C3:58:E4:6B:BF:4F:3F:63:23:BA:0C:9D:8B:F1:38:DC:BB:40:07:DD
SHA1: 23:60:8B:5D:E7:D5:F5:3A:C0:A4:BE:B8:15:66:39:39:B7:00:59:DD

X509v3 extensions

crlDistributionPoints

Full Name:
URI:http://homepldvtlsg2r35ca.crl.certum.pl/homepldvtlsg2r35ca.crl

authorityInfoAccess

OCSP - URI:http://homepldvtlsg2r35ca.ocsp-certum.com
CA Issuers - URI:http://homepldvtlsg2r35ca.repository.certum.pl/homepldvtlsg2r35ca.cer

authorityKeyIdentifier

keyid:CE:4B:2D:89:DE:1F:D4:79:BD:EE:4D:37:C2:4A:A0:AF:A1:47:38:5A

certificatePolicies

Policy: 2.23.140.1.2.1
Policy: 1.2.616.1.113527.2.101.1

ct_precert_scts

Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11:
1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3
Timestamp : Oct 31 00:23:19.735 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:A2:D9:B1:7E:6A:1D:C1:E7:48:C7:54:
D4:A3:20:B5:D7:44:B2:6A:A4:D4:1A:25:33:61:D2:15:
33:D4:0A:04:F1:02:21:00:81:F9:43:57:90:E7:0F:F1:
03:3C:53:67:33:9E:4E:27:9A:00:05:FA:0F:1C:50:20:
9F:BD:C6:7A:10:EE:11:55
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:
82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77
Timestamp : Oct 31 00:23:19.746 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:54:ED:8D:E2:10:AC:8D:55:1A:91:62:32:
99:CE:31:B1:00:09:F3:1C:8F:13:E2:6C:44:55:D4:11:
D0:CB:EB:92:02:20:33:93:02:3C:05:5E:CB:63:2F:B4:
83:99:09:FA:E8:1A:AE:C9:0F:F8:6D:0A:95:3C:E2:00:
0B:6E:FB:BB:3E:C2
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:
C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD
Timestamp : Oct 31 00:23:19.769 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:4B:7A:E4:51:B9:79:87:6E:CB:13:32:A0:
63:6F:E4:99:D3:76:F3:32:AA:96:BC:91:5D:FC:61:6E:
7B:27:66:4A:02:21:00:D0:69:12:A4:C8:A3:CB:CA:84:
E3:EB:47:53:CC:2A:94:31:F5:3A:E1:F4:03:B1:46:57:
4C:68:F7:26:A7:1A:A8

SSL check results of dfm.com.pl