SSL check results of fpt.vn

NEW You can also bulk check multiple servers.

Discover if the mail servers for fpt.vn can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Mon, 25 May 2020 10:33:49 +0000

We can not guarantee a secure connection to the mailservers of fpt.vn!

Please contact the operator of fpt.vn and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/fpt.vn

Servers

Incoming Mails

These servers are responsible for incoming mails to @fpt.vn addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
isp-mta1.fpt.vn
210.245.0.172
10
supported
isp-mta1.fpt.vn
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
supported
  • SSL_RSA_WITH_RC4_128_SHA
  • SSL_RSA_EXPORT_WITH_RC4_40_MD5
  • TLSv1.0
  • SSLv3
18 s
isp-mta4.fpt.vn
210.245.0.168
Results incomplete
20
unsupported
not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
6 s
tarbaby.junkemailfilter.com
184.105.182.228
Results incomplete
30
unsupported
not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
1 s
tarbaby.junkemailfilter.com
184.105.182.219
30
supported
junkemailfilter.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
supported
  • ECDHE_RSA_WITH_RC4_128_SHA
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
32 s
tarbaby.junkemailfilter.com
184.105.182.217
30
supported
junkemailfilter.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
supported
  • ECDHE_RSA_WITH_RC4_128_SHA
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
32 s
tarbaby.junkemailfilter.com
184.105.182.227
30
supported
junkemailfilter.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
supported
  • ECDHE_RSA_WITH_RC4_128_SHA
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
32 s
tarbaby.junkemailfilter.com
184.105.182.229
30
supported
junkemailfilter.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
supported
  • ECDHE_RSA_WITH_RC4_128_SHA
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
30 s
tarbaby.junkemailfilter.com
184.105.182.218
30
supported
junkemailfilter.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
supported
  • ECDHE_RSA_WITH_RC4_128_SHA
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
35 s

Outgoing Mails

We have received emails from these servers with @fpt.vn sender addresses. Test mail delivery

Host TLS Version & Cipher
unknown (210.245.51.23)
Insecure - not encrypted!
unknown (210.245.51.14)
Insecure - not encrypted!
unknown (210.245.51.31)
Insecure - not encrypted!
unknown (210.245.51.51)
Insecure - not encrypted!
unknown (210.245.51.15)
Insecure - not encrypted!
unknown (118.71.253.20)
Insecure - not encrypted!
unknown (210.245.51.1)
Insecure - not encrypted!
unknown (210.245.51.76)
Insecure - not encrypted!
unknown (210.245.51.19)
Insecure - not encrypted!
unknown (210.245.51.5)
Insecure - not encrypted!
unknown (210.245.51.65)
Insecure - not encrypted!
unknown (210.245.51.17)
Insecure - not encrypted!
unknown (210.245.51.26)
Insecure - not encrypted!
unknown (210.245.51.33)
Insecure - not encrypted!
unknown (210.245.51.56)
Insecure - not encrypted!
unknown (210.245.51.43)
Insecure - not encrypted!

Certificates

First seen at:

CN=junkemailfilter.com

Certificate chain
Subject
Common Name (CN)
  • junkemailfilter.com
Alternative Names
  • *.junkemailfilter.com
  • junkemailfilter.com
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • Let's Encrypt Authority X3
validity period
Not valid before
2020-05-11
Not valid after
2020-08-09
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
67:BD:75:21:38:48:26:5E:D6:E2:0D:46:51:35:54:41:18:C9:62:B8:17:8D:EB:A7:2C:3A:1E:11:0A:67:CB:DD
SHA1
86:AE:7F:ED:09:D3:39:40:93:E9:FA:1A:D3:EF:D1:4F:1F:73:9C:A4
X509v3 extensions
subjectKeyIdentifier
  • FB:20:D2:FC:30:AA:F6:DC:89:B0:30:23:C6:40:1C:8E:85:77:B1:BD
authorityKeyIdentifier
  • keyid:A8:4A:6A:63:04:7D:DD:BA:E6:D1:39:B7:A6:45:65:EF:F3:A8:EC:A1
authorityInfoAccess
  • OCSP - URI:http://ocsp.int-x3.letsencrypt.org
  • CA Issuers - URI:http://cert.int-x3.letsencrypt.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
  • Policy: 1.3.6.1.4.1.44947.1.1.1
  • CPS: http://cps.letsencrypt.org
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : B2:1E:05:CC:8B:A2:CD:8A:20:4E:87:66:F9:2B:B9:8A:
  • 25:20:67:6B:DA:FA:70:E7:B2:49:53:2D:EF:8B:90:5E
  • Timestamp : May 11 10:40:28.205 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:D6:27:75:B2:C3:04:DF:26:18:B1:36:
  • 1E:90:55:E2:62:47:10:72:94:AA:4C:5D:23:C5:84:1B:
  • 4A:8F:E1:97:19:02:21:00:9A:2F:A6:BB:60:96:BE:B9:
  • 0C:46:EF:E4:A0:75:1F:6A:16:B0:12:C5:FB:23:6D:EE:
  • 6D:63:9A:5B:DC:C7:C8:85
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 6F:53:76:AC:31:F0:31:19:D8:99:00:A4:51:15:FF:77:
  • 15:1C:11:D9:02:C1:00:29:06:8D:B2:08:9A:37:D9:13
  • Timestamp : May 11 10:40:28.378 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:87:2D:7F:7C:D3:F8:CD:7A:18:9A:7A:
  • 20:47:38:20:01:58:62:F3:C7:05:89:44:2D:9F:6F:93:
  • 58:1D:87:98:F0:02:20:16:C5:81:2C:7D:E9:3F:80:32:
  • 3C:BE:A6:95:06:D7:58:75:FD:65:5E:6D:E0:EA:80:98:
  • E6:4C:38:C1:61:B2:21
First seen at:

emailAddress=postmaster@fpt.vn,CN=isp-mta1.fpt.vn,OU=NOC,O=FPT Telecom,L=Ha Noi,ST=Ha Noi,C=VN

Certificate chain
  • isp-mta1.fpt.vn (Certificate is self-signed.)
    • remaining
    • 1024 bit
    • sha1WithRSAEncryption
    • Unknown Authority

Subject
Country (C)
  • VN
State (ST)
  • Ha Noi
Locality (L)
  • Ha Noi
Organization (O)
  • FPT Telecom
Organizational Unit (OU)
  • NOC
Common Name (CN)
  • isp-mta1.fpt.vn
Email
  • postmaster@fpt.vn
Issuer

Certificate is self-signed.

validity period
Not valid before
2010-12-01
Not valid after
2020-11-28
Fingerprints
SHA256
46:EC:24:F8:F0:B8:EF:47:CE:F5:A4:58:F4:0C:08:6B:E1:12:25:28:33:96:F1:88:06:22:70:E4:EA:25:9E:76
SHA1
59:69:8F:E6:FA:C4:FB:60:4C:B8:77:CF:80:8B:E3:EA:A8:17:12:B1
X509v3 extensions
subjectKeyIdentifier
  • D4:40:B3:BD:1C:53:86:E0:C4:CB:44:71:0F:27:54:9A:47:CE:68:A2
authorityKeyIdentifier
  • keyid:D4:40:B3:BD:1C:53:86:E0:C4:CB:44:71:0F:27:54:9A:47:CE:68:A2
  • DirName:/C=VN/ST=Ha Noi/L=Ha Noi/O=FPT Telecom/OU=NOC/CN=isp-mta1.fpt.vn/emailAddress=postmaster@fpt.vn
  • serial:91:0F:B0:13:02:80:45:45