SSL check results of dnr.id

NEW You can also bulk check multiple servers.

Discover if the mail servers for dnr.id can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Thu, 23 Jun 2022 04:41:19 +0000

We can not guarantee a secure connection to the mailservers of dnr.id!

Please contact the operator of dnr.id and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/dnr.id

Servers

Incoming Mails

These servers are responsible for incoming mails to @dnr.id addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mx.spamexperts.com
2001:978:2:7::162:100
10
supported
mx286.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
1 s
mx.spamexperts.com
130.117.53.188
10
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
2 s
fallbackmx.spamexperts.eu
2001:978:2:2c::137:100
20
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
3 s
fallbackmx.spamexperts.eu
2001:978:2:19::e:100
20
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
2 s
fallbackmx.spamexperts.eu
2001:978:2:7::162:100
20
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
1 s
fallbackmx.spamexperts.eu
130.117.54.106
20
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
3 s
fallbackmx.spamexperts.eu
130.117.53.188
20
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
2 s
fallbackmx.spamexperts.eu
149.13.75.27
20
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
2 s
lastmx.spamexperts.net
2001:978:2:2c::137:100
30
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
3 s
lastmx.spamexperts.net
2001:978:2:7::162:100
30
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
2 s
lastmx.spamexperts.net
2001:550:2:9::280:100
Results incomplete
30 not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
11 s
lastmx.spamexperts.net
2001:550:2:61::2fc:100
30
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
6 s
lastmx.spamexperts.net
149.13.75.27
30
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
2 s
lastmx.spamexperts.net
38.89.254.156
30
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
7 s
lastmx.spamexperts.net
38.111.198.185
30
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
13 s
lastmx.spamexperts.net
130.117.53.188
30
supported
*.antispamcloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
3 s

Outgoing Mails

We have not received any emails from a @dnr.id address so far. Test mail delivery

Certificates

First seen at:

emailAddress=postmaster@mx286.antispamcloud.com,CN=mx286.antispamcloud.com,OU=Domain,O=antispamcloud.com,L=Cluster

Certificate chain
  • mx286.antispamcloud.com (Certificate is self-signed.)
    • remaining
    • 2048 bit
    • sha512WithRSAEncryption
    • Hostname Mismatch
    • Unknown Authority

Subject
Locality (L)
  • Cluster
Organization (O)
  • antispamcloud.com
Organizational Unit (OU)
  • Domain
Common Name (CN)
  • mx286.antispamcloud.com
Email
  • postmaster@mx286.antispamcloud.com
Issuer

Certificate is self-signed.

validity period
Not valid before
2022-04-22
Not valid after
2025-04-21
Fingerprints
SHA256
38:18:9E:B5:D0:D4:DA:19:6A:CE:BD:07:0C:F2:AF:E8:A3:7A:E5:92:4A:AD:13:5B:E0:5F:19:95:76:7E:60:D9
SHA1
4C:D3:97:F9:78:F1:61:C4:15:CB:66:3A:56:EE:FE:E2:A3:BE:4D:90
First seen at:

CN=*.antispamcloud.com,O=N-ABLE TECHNOLOGIES LTD,L=Dundee,C=GB

Certificate chain
Subject
Country (C)
  • GB
Locality (L)
  • Dundee
Organization (O)
  • N-ABLE TECHNOLOGIES LTD
Common Name (CN)
  • *.antispamcloud.com
Alternative Names
  • *.antispamcloud.com
  • *.spamexperts.com
  • *.spamexperts.eu
  • *.spamexperts.net
  • *.mtaroutes.com
  • *.smtp.antispamcloud.com
Issuer
Country (C)
  • US
Organization (O)
  • DigiCert Inc
Common Name (CN)
  • DigiCert TLS RSA SHA256 2020 CA1
validity period
Not valid before
2022-01-10
Not valid after
2023-01-10
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
D9:62:6C:3F:5B:CE:00:A7:4D:A2:9E:26:8D:2B:08:A0:65:22:66:38:37:21:9E:3D:3B:99:CF:A3:93:18:F5:99
SHA1
B7:1C:B1:4D:89:C0:0B:D7:FA:C5:72:E5:5F:B8:FE:15:15:25:64:07
X509v3 extensions
authorityKeyIdentifier
  • keyid:B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4
subjectKeyIdentifier
  • ED:78:68:50:D5:F8:19:00:6C:6D:FB:E6:48:E4:A2:8A:FD:BA:7F:E7
crlDistributionPoints
  • Full Name:
  • URI:http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
  • Full Name:
  • URI:http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
certificatePolicies
  • Policy: 2.23.140.1.2.2
  • CPS: http://www.digicert.com/CPS
authorityInfoAccess
  • OCSP - URI:http://ocsp.digicert.com
  • CA Issuers - URI:http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:
  • 03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E
  • Timestamp : Jan 10 15:52:11.663 2022 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:AF:77:0D:86:6B:38:73:D9:D8:E7:A8:
  • BF:B3:C6:E3:7F:B0:D4:B7:FC:98:3B:7A:58:4B:1A:73:
  • 25:8D:0F:35:78:02:20:15:92:7E:80:BD:EA:07:D4:34:
  • FA:61:A1:FC:B1:DA:BC:48:CE:CB:99:26:8A:7E:F1:8E:
  • C9:95:87:22:A0:C3:5B
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 35:CF:19:1B:BF:B1:6C:57:BF:0F:AD:4C:6D:42:CB:BB:
  • B6:27:20:26:51:EA:3F:E1:2A:EF:A8:03:C3:3B:D6:4C
  • Timestamp : Jan 10 15:52:11.702 2022 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:6E:0E:5D:81:00:D6:E7:D2:FC:51:0D:49:
  • 1C:79:D1:20:60:47:35:04:65:CE:37:EF:68:75:8A:F8:
  • 62:07:74:2C:02:21:00:88:08:80:D0:82:D4:88:CA:42:
  • E7:A6:68:44:6F:0E:BC:E6:55:07:F5:8E:B6:12:6B:14:
  • 3F:C2:69:87:58:B4:70
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : B3:73:77:07:E1:84:50:F8:63:86:D6:05:A9:DC:11:09:
  • 4A:79:2D:B1:67:0C:0B:87:DC:F0:03:0E:79:36:A5:9A
  • Timestamp : Jan 10 15:52:11.744 2022 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:E8:CA:20:74:32:5C:4F:1C:B1:DB:AF:
  • 35:A6:38:CE:8F:02:A3:3A:A2:20:9C:55:57:56:47:C4:
  • 51:C1:7D:95:2E:02:20:36:EA:DE:B4:86:4E:B5:6D:16:
  • CD:8F:79:D9:C8:BB:91:E5:87:B2:C1:2F:99:01:4F:B8:
  • 72:3D:6A:0D:AA:E1:E1