SSL check results of foresta.cz

NEW You can also bulk check multiple servers.

Discover if the mail servers for foresta.cz can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Wed, 15 May 2024 11:03:54 +0000

We can not guarantee a secure connection to the mailservers of foresta.cz!

Please contact the operator of foresta.cz and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/foresta.cz

Servers

Incoming Mails

These servers are responsible for incoming mails to @foresta.cz addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mx1.foresta.cz
93.89.110.180
10
supported
mx1.foresta.cz
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
16 s
mx2.foresta.cz
90.182.204.181
Results incomplete
20
unsupported
not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
11 s

Outgoing Mails

We have not received any emails from a @foresta.cz address so far. Test mail delivery

Certificates

First seen at:

CN=mx1.foresta.cz

Certificate chain
Subject
Common Name (CN)
  • mx1.foresta.cz
Alternative Names
  • mx1.foresta.cz
Issuer
Country (C)
  • US
Organization (O)
  • DigiCert Inc
Organizational Unit (OU)
  • www.digicert.com
Common Name (CN)
  • Encryption Everywhere DV TLS CA - G2
validity period
Not valid before
2023-06-16
Not valid after
2024-06-15
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
53:CB:74:B9:22:91:B8:E8:11:D5:11:07:22:DB:8A:99:16:AB:8C:7E:04:B0:6C:16:76:33:3D:01:87:5D:11:00
SHA1
14:BE:41:1B:DE:E7:BC:78:32:76:4F:95:E6:9B:C6:83:B8:F0:24:61
X509v3 extensions
authorityKeyIdentifier
  • keyid:78:DF:91:90:5F:EE:DE:AC:F6:C5:75:EB:D5:4C:55:53:EF:24:4A:B6
subjectKeyIdentifier
  • E2:F1:DF:30:C2:46:5C:CF:5E:7E:70:77:CA:DB:E1:D1:61:5F:3E:3C
certificatePolicies
  • Policy: 2.23.140.1.2.1
  • CPS: http://www.digicert.com/CPS
authorityInfoAccess
  • OCSP - URI:http://ocsp.digicert.com
  • CA Issuers - URI:http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
  • 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
  • Timestamp : Jun 16 14:44:10.304 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:37:51:7D:FD:F0:CA:80:8A:4E:6F:D0:71:
  • 81:55:54:DC:5D:75:D3:88:65:89:28:31:37:E0:52:52:
  • 71:13:D5:3A:02:20:50:19:28:CB:E9:B2:F5:13:76:7A:
  • 6E:E6:88:71:39:63:02:C1:9E:11:3F:0B:7F:0F:C5:A8:
  • 73:87:65:0F:A3:54
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
  • 1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
  • Timestamp : Jun 16 14:44:10.243 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:DA:55:10:08:1A:31:AC:14:E2:75:40:
  • DF:55:61:9F:26:7F:B8:03:82:E4:9A:EE:C1:80:05:0D:
  • EB:40:EE:EF:9E:02:21:00:C2:35:CA:54:BD:A3:F9:5E:
  • 25:8F:94:2A:39:7C:1C:6E:C1:1D:37:C5:7A:F5:CC:D9:
  • 1B:A4:C5:7D:86:DE:31:6C
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
  • 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
  • Timestamp : Jun 16 14:44:10.158 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:62:E2:7F:D7:F8:78:85:E9:04:D6:9A:51:
  • EB:00:3F:D9:B6:4D:37:4E:A0:9A:60:F7:41:38:1F:45:
  • BF:A6:3A:59:02:20:36:3B:BA:C6:94:D7:DB:F7:90:8C:
  • 9E:89:69:54:65:7B:90:B8:9E:20:EE:B9:DF:5B:84:DC:
  • 81:28:3F:E8:42:05