SSL-Tools

SSL check results of empoer.li

NEW You can also bulk check multiple servers.

Discover if the mail servers for empoer.li can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Sun, 24 May 2020 23:50:09 +0000

No connection to the mailservers of empoer.li could be established.

Servers

Incoming Mails

These servers are responsible for incoming mails to @empoer.li addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mx1.edge-mail.de
213.109.161.59
Results incomplete
10
supported
edge-mail.de
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mx2.edge-mail.de
195.110.20.22
Results incomplete
10 not checked
DANE
errors
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
4 s

Outgoing Mails

We have not received any emails from a @empoer.li address so far. Test mail delivery

Certificates

First seen at:

CN=edge-mail.de

Certificate chain
Subject
Common Name (CN)
  • edge-mail.de
Alternative Names
  • *.edge-mail.de
  • edge-mail.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • Let's Encrypt Authority X3
validity period
Not valid before
2020-05-08
Not valid after
2020-08-06
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
D1:1B:5B:DF:7C:AF:C8:CB:81:54:61:C2:6E:B6:44:2D:34:CD:FB:B1:54:65:E8:82:F1:BE:0C:81:81:E4:91:48
SHA1
30:F4:0B:4D:50:DB:73:9D:B5:46:60:B9:6C:15:E5:DA:69:2D:F1:88
X509v3 extensions
subjectKeyIdentifier
  • C1:8E:31:0E:71:2B:E3:15:EE:90:40:60:DE:45:3D:E9:34:31:37:D4
authorityKeyIdentifier
  • keyid:A8:4A:6A:63:04:7D:DD:BA:E6:D1:39:B7:A6:45:65:EF:F3:A8:EC:A1
authorityInfoAccess
  • OCSP - URI:http://ocsp.int-x3.letsencrypt.org
  • CA Issuers - URI:http://cert.int-x3.letsencrypt.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
  • Policy: 1.3.6.1.4.1.44947.1.1.1
  • CPS: http://cps.letsencrypt.org
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 5E:A7:73:F9:DF:56:C0:E7:B5:36:48:7D:D0:49:E0:32:
  • 7A:91:9A:0C:84:A1:12:12:84:18:75:96:81:71:45:58
  • Timestamp : May 8 20:06:38.956 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:1D:9F:6F:13:CA:6C:95:95:A8:73:93:7F:
  • 0B:D0:08:8D:C4:DF:8A:B3:75:0C:87:5D:F1:41:24:64:
  • 47:58:1F:58:02:21:00:84:FB:01:EC:8B:55:EA:B9:07:
  • 97:76:FB:03:4C:89:3C:2B:D5:44:B2:CA:7D:9D:7A:41:
  • 4C:FA:29:A4:35:A8:39
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 07:B7:5C:1B:E5:7D:68:FF:F1:B0:C6:1D:23:15:C7:BA:
  • E6:57:7C:57:94:B7:6A:EE:BC:61:3A:1A:69:D3:A2:1C
  • Timestamp : May 8 20:06:38.993 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:EB:CC:0F:9A:0C:70:48:DA:C1:30:76:
  • A3:A1:3B:A9:ED:46:C8:18:1C:32:37:8D:F3:09:9F:5D:
  • 26:9D:03:F5:DF:02:21:00:AE:CA:EC:B0:49:A6:8D:EA:
  • 5A:27:F7:A0:52:41:E4:08:99:DF:D9:37:60:F0:02:10:
  • 58:76:9C:65:36:4C:46:2A

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.mx1.edge-mail.de
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
valid
_25._tcp.mx1.edge-mail.de
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
valid
_25._tcp.mx1.edge-mail.de
  • DANE-TA: Trust Anchor Assertion
  • Use full certificate
  • SHA-512 Hash
valid
valid
_25._tcp.mx1.edge-mail.de
  • DANE-TA: Trust Anchor Assertion
  • Use full certificate
  • SHA-256 Hash
valid
valid
_25._tcp.mx1.edge-mail.de
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-512 Hash
valid
valid
_25._tcp.mx1.edge-mail.de
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.mx1.edge-mail.de
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-512 Hash
valid
valid
_25._tcp.mx1.edge-mail.de
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-512 Hash
valid
—
_25._tcp.mx2.edge-mail.de
  • DANE-TA: Trust Anchor Assertion
  • Use full certificate
  • SHA-512 Hash
valid
—
_25._tcp.mx2.edge-mail.de
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.mx2.edge-mail.de
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-512 Hash
valid
—
_25._tcp.mx2.edge-mail.de
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.mx2.edge-mail.de
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-512 Hash
valid
—
_25._tcp.mx2.edge-mail.de
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.mx2.edge-mail.de
  • DANE-TA: Trust Anchor Assertion
  • Use full certificate
  • SHA-256 Hash
valid
—
_25._tcp.mx2.edge-mail.de
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-512 Hash
valid
—