SSL check results of firemail.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for firemail.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Tue, 05 Sep 2023 10:25:32 +0000

The mailservers of firemail.de can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @firemail.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.firemail.de
88.99.137.45
9
supported
*.firemail.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
10 s

Outgoing Mails

We have received emails from these servers with @firemail.de sender addresses. Test mail delivery

Host TLS Version & Cipher
firemail.de (88.99.137.45)
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
f26.my.com (185.30.177.53)
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384

Certificates

First seen at:

CN=*.firemail.de

Certificate chain
Subject
Common Name (CN)
  • *.firemail.de
Alternative Names
  • *.firemail.de
  • firemail.de
Issuer
Country (C)
  • BE
Organization (O)
  • GlobalSign nv-sa
Common Name (CN)
  • AlphaSSL CA - SHA256 - G4
validity period
Not valid before
2023-09-05
Not valid after
2024-10-06
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
75:78:22:0E:6E:2D:70:3A:83:BD:EF:5F:19:DF:49:0A:20:02:23:01:40:4E:B2:F6:6B:03:99:21:8A:BF:71:33
SHA1
AB:53:82:A6:EA:66:09:6F:C1:69:06:D8:8C:80:86:75:F4:F8:F1:2B
X509v3 extensions
authorityInfoAccess
  • CA Issuers - URI:http://secure.globalsign.com/cacert/alphasslcasha256g4.crt
  • OCSP - URI:http://ocsp.globalsign.com/alphasslcasha256g4
certificatePolicies
  • Policy: 2.23.140.1.2.1
  • Policy: 1.3.6.1.4.1.4146.10.1.3
  • CPS: https://www.globalsign.com/repository/
crlDistributionPoints
  • Full Name:
  • URI:http://crl.globalsign.com/alphasslcasha256g4.crl
authorityKeyIdentifier
  • keyid:4F:CB:AC:A8:C2:EF:AB:DD:83:6F:6B:BF:CE:98:3D:5C:58:25:76:15
subjectKeyIdentifier
  • 28:9F:CA:A7:C7:99:D1:89:9B:21:26:17:78:C5:8D:D7:CD:8B:E2:9E
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
  • 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
  • Timestamp : Sep 5 10:16:02.298 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:FF:68:BA:19:1A:BB:CD:BE:C7:16:49:
  • AF:C5:3C:96:9A:90:1E:EB:A6:9E:92:CA:34:A6:AF:62:
  • 02:58:86:DA:08:02:20:06:7B:66:1F:30:8C:E4:B9:5C:
  • 20:2D:85:58:7F:59:40:D4:B0:67:1C:89:BA:74:BC:3B:
  • 11:97:7C:E7:75:11:C6
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
  • 1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
  • Timestamp : Sep 5 10:16:02.315 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:EC:00:85:B9:30:97:BF:2A:8F:D1:BF:
  • C8:7E:93:07:CB:B9:88:FF:CA:3F:58:E0:44:74:6B:96:
  • 61:CD:6A:60:0E:02:21:00:AF:9D:85:F3:99:B2:E7:71:
  • A3:E9:2B:E7:2D:8C:C3:F7:02:FB:DB:D5:C1:0C:E9:22:
  • 09:C3:96:D3:43:92:A6:E6
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
  • 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
  • Timestamp : Sep 5 10:16:02.347 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:3E:6E:69:62:82:FD:DC:6A:B4:D3:1D:2B:
  • C1:4A:E1:58:2C:17:30:3F:29:10:20:C4:22:A6:99:BB:
  • 3B:DF:AE:05:02:20:34:7B:70:E2:D7:F4:DE:A4:41:EB:
  • 65:D6:A4:BB:17:E2:A1:F7:F6:A8:21:1E:55:78:AD:54:
  • D9:52:7E:8B:D6:97