SSL-Tools

SSL check results of edupsy.nl

NEW You can also bulk check multiple servers.

Discover if the mail servers for edupsy.nl can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Mon, 06 May 2024 13:36:06 +0000

We can not guarantee a secure connection to the mailservers of edupsy.nl!

Please contact the operator of edupsy.nl and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/edupsy.nl

Servers

Incoming Mails

These servers are responsible for incoming mails to @edupsy.nl addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.xmedia.nl
194.163.138.74
 10
supported
mail.xmedia.nl
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
supported
  • ECDHE_ECDSA_WITH_RC4_128_SHA
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
2 s
mx2.antispam-login.net
2a01:518:1:42:8::132
Results incomplete
20
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mx2.antispam-login.net
2a01:518:1:42:8::133
Results incomplete
20
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mx2.antispam-login.net
93.94.228.133
Results incomplete
20
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mx2.antispam-login.net
93.94.228.132
Results incomplete
20
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s

Outgoing Mails

We have not received any emails from a @edupsy.nl address so far. Test mail delivery

Certificates

First seen at:

CN=mail.xmedia.nl

Certificate chain
  • mail.xmedia.nl
    • remaining
    • 256 bit
    • sha256WithRSAEncryption
      • R3
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • mail.xmedia.nl
Alternative Names
  • mail.xmedia.nl
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R3
validity period
Not valid before
2024-05-06
Not valid after
2024-08-04
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
A6:C2:9E:32:75:AD:62:D3:55:6F:B6:BB:FC:4A:C8:66:CA:5A:4B:9D:00:AC:57:E2:3B:E8:1D:D1:6D:DC:5E:F2
SHA1
E3:C2:E5:E0:07:38:4F:B7:86:CC:8D:73:7D:80:F4:E8:E4:5A:EB:19
X509v3 extensions
subjectKeyIdentifier
  • 41:F5:63:1F:29:74:30:26:93:0E:9D:B4:C3:6C:41:3D:93:D1:1A:1C
authorityKeyIdentifier
  • keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
  • OCSP - URI:http://r3.o.lencr.org
  • CA Issuers - URI:http://r3.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
  • ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
  • Timestamp : May 6 13:31:36.074 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:A3:97:98:DB:B1:47:8D:9E:15:D4:89:
  • CF:96:57:47:1E:EE:4C:E7:7A:71:13:BC:53:B6:86:D7:
  • E4:2D:68:E3:F1:02:21:00:B8:9B:EE:51:01:F5:AB:2A:
  • 21:2F:54:E4:DA:7D:DC:FB:B1:7B:32:CC:5A:8A:9E:1F:
  • 11:31:36:27:32:80:E0:60
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
  • 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
  • Timestamp : May 6 13:31:36.067 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:97:9C:89:F5:85:79:BC:80:4E:01:91:
  • 6B:2F:89:FA:06:A7:52:C5:04:E2:33:3F:E2:41:0A:AF:
  • AC:22:BE:FC:88:02:21:00:8B:BC:D2:A9:C8:4E:36:2E:
  • 56:6E:0D:F0:45:43:CD:D1:31:1D:16:D8:C2:43:0E:96:
  • 7B:89:9B:D5:7C:99:22:54

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.mx2.antispam-login.net
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
—