SSL check results of ezorg.nl

NEW You can also bulk check multiple servers.

Discover if the mail servers for ezorg.nl can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Fri, 11 Mar 2022 11:41:55 +0000

No connection to the mailservers of ezorg.nl could be established.

Servers

Incoming Mails

These servers are responsible for incoming mails to @ezorg.nl addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mailfilters.ezorg.nl
2a07:b701:0:50::14
Results incomplete
10
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilters.ezorg.nl
2a07:b701:0:50::13
Results incomplete
10
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilters.ezorg.nl
2a07:b701:0:50::11
Results incomplete
10
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilters.ezorg.nl
2a07:b701:0:50::12
Results incomplete
10
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilters.ezorg.nl
37.9.218.13
Results incomplete
10
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilters.ezorg.nl
37.9.218.14
Results incomplete
10
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilters.ezorg.nl
37.9.218.12
Results incomplete
10
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilters.ezorg.nl
37.9.218.11
Results incomplete
10
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilter01.ezorg.nl
2a07:b701:0:50::12
Results incomplete
20
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilter01.ezorg.nl
2a07:b701:0:50::11
Results incomplete
20
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilter01.ezorg.nl
37.9.218.11
Results incomplete
20
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilter01.ezorg.nl
37.9.218.12
Results incomplete
20
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilter02.ezorg.nl
2a07:b701:0:50::14
Results incomplete
30
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilter02.ezorg.nl
2a07:b701:0:50::13
Results incomplete
30
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilter02.ezorg.nl
37.9.218.13
Results incomplete
30
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilter02.ezorg.nl
37.9.218.14
Results incomplete
30
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilter03.ezorg.nl
2a07:b701:0:50::14
Results incomplete
40
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilter03.ezorg.nl
2a07:b701:0:50::12
Results incomplete
40
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilter03.ezorg.nl
37.9.218.14
Results incomplete
40
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailfilter03.ezorg.nl
37.9.218.12
Results incomplete
40
supported
*.ezorg.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s

Outgoing Mails

We have received emails from these servers with @ezorg.nl sender addresses. Test mail delivery

Host TLS Version & Cipher
halonfilter02.ezorg.nl (IPv6:2a07:b701:0:50::12)
TLSv1.3 TLS_AES_256_GCM_SHA384

Certificates

First seen at:

CN=*.ezorg.nl

Certificate chain
Subject
Common Name (CN)
  • *.ezorg.nl
Alternative Names
  • *.ezorg.nl
  • ezorg.nl
Issuer
Country (C)
  • GB
State (ST)
  • Greater Manchester
Locality (L)
  • Salford
Organization (O)
  • Sectigo Limited
Common Name (CN)
  • Sectigo RSA Domain Validation Secure Server CA
validity period
Not valid before
2021-09-20
Not valid after
2022-09-20
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
B8:E4:D6:B7:39:85:CB:3E:A2:6D:A8:30:97:2D:A2:B1:52:46:6A:18:92:2F:F7:C4:B6:CC:64:33:1C:31:9B:B5
SHA1
66:E4:81:06:0A:19:D7:1A:26:F5:CC:ED:91:41:02:0C:17:21:C3:E5
X509v3 extensions
authorityKeyIdentifier
  • keyid:8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
subjectKeyIdentifier
  • 39:45:2B:52:71:88:16:38:DE:29:0F:6B:BF:88:39:9A:AC:88:ED:89
certificatePolicies
  • Policy: 1.3.6.1.4.1.6449.1.2.2.7
  • CPS: https://sectigo.com/CPS
  • Policy: 2.23.140.1.2.1
authorityInfoAccess
  • CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
  • OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 46:A5:55:EB:75:FA:91:20:30:B5:A2:89:69:F4:F3:7D:
  • 11:2C:41:74:BE:FD:49:B8:85:AB:F2:FC:70:FE:6D:47
  • Timestamp : Sep 20 06:46:48.350 2021 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:B7:F2:31:8F:F7:1A:3D:A1:D2:D9:FF:
  • E3:3E:BD:6E:CF:68:30:24:B0:C9:C4:DC:C6:90:FE:3D:
  • 60:11:7A:E4:C6:02:21:00:EA:CE:EF:32:27:EC:DA:23:
  • 91:A1:53:AD:9E:04:97:38:BB:2B:69:CB:66:1B:56:18:
  • 33:1C:4E:96:D7:68:B6:66
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 41:C8:CA:B1:DF:22:46:4A:10:C6:A1:3A:09:42:87:5E:
  • 4E:31:8B:1B:03:EB:EB:4B:C7:68:F0:90:62:96:06:F6
  • Timestamp : Sep 20 06:46:48.296 2021 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:F2:E5:E1:F0:15:25:9B:28:7E:54:56:
  • 96:EB:D2:37:37:29:81:71:18:E2:0B:BB:AC:3A:7A:48:
  • 3B:88:BC:1D:8C:02:20:09:D0:76:3E:69:B5:84:BD:96:
  • 1B:6D:4A:CF:C9:A4:A8:D1:35:A5:B4:87:46:D6:1E:0D:
  • 6C:E6:00:A6:04:F8:A1
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 29:79:BE:F0:9E:39:39:21:F0:56:73:9F:63:A5:77:E5:
  • BE:57:7D:9C:60:0A:F8:F9:4D:5D:26:5C:25:5D:C7:84
  • Timestamp : Sep 20 06:46:48.246 2021 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:B7:C6:6E:54:5B:7F:D7:1D:AF:F3:B3:
  • F1:D4:CC:7E:3D:9F:6D:B8:24:1E:8B:0F:1A:9D:42:97:
  • 11:BE:80:50:66:02:20:77:A5:C7:25:34:85:8C:42:6A:
  • 17:1F:34:59:E4:CF:2C:41:41:56:BB:16:F7:0A:37:98:
  • 79:13:D8:50:23:47:4C

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.mailfilter03.ezorg.nl
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
valid
_25._tcp.mailfilter01.ezorg.nl
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
valid
_25._tcp.mailfilter02.ezorg.nl
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
valid
_25._tcp.mailfilters.ezorg.nl
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
valid