SSL-Tools

SSL check results of fwtest.org

NEW You can also bulk check multiple servers.

Discover if the mail servers for fwtest.org can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Mon, 13 Mar 2023 09:04:46 +0000

We can not guarantee a secure connection to the mailservers of fwtest.org!

Please contact the operator of fwtest.org and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/fwtest.org

Servers

Incoming Mails

These servers are responsible for incoming mails to @fwtest.org addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mxl2.fastweb.it
85.18.95.28
 10
supported
fastmail.fastwebnet.it
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mxl2.fastweb.it
85.18.95.30
 10
supported
fastmail.fastwebnet.it
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mxl2.fastweb.it
85.18.95.26
 10
supported
fastmail.fastwebnet.it
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mxl2.fastweb.it
85.18.95.27
 10
supported
fastmail.fastwebnet.it
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mxk2.fastweb.it
62.101.93.152
 50
supported
fastmail.fastwebnet.it
DANE
missing
PFS
unsupported
Heartbleed
not vulnerable
Weak ciphers
supported
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • SSLv3
12 s
mxk2.fastweb.it
62.101.93.153
 50
supported
fastmail.fastwebnet.it
DANE
missing
PFS
unsupported
Heartbleed
not vulnerable
Weak ciphers
supported
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • SSLv3
12 s
mxk1.fastweb.it
62.101.93.152
 50
supported
fastmail.fastwebnet.it
DANE
missing
PFS
unsupported
Heartbleed
not vulnerable
Weak ciphers
supported
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • SSLv3
12 s
mxk1.fastweb.it
62.101.93.153
 50
supported
fastmail.fastwebnet.it
DANE
missing
PFS
unsupported
Heartbleed
not vulnerable
Weak ciphers
supported
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • SSLv3
12 s
mxl1.fastweb.it
85.18.95.28
 100
supported
fastmail.fastwebnet.it
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mxl1.fastweb.it
85.18.95.27
 100
supported
fastmail.fastwebnet.it
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mxl1.fastweb.it
85.18.95.26
 100
supported
fastmail.fastwebnet.it
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mxl1.fastweb.it
85.18.95.30
 100
supported
fastmail.fastwebnet.it
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
pluto.fwtest.org
7.7.7.8
Results incomplete
150 not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
11 s

Outgoing Mails

We have not received any emails from a @fwtest.org address so far. Test mail delivery

Certificates

First seen at:

CN=fastmail.fastwebnet.it,O=FastWeb SpA,L=Milano,C=IT

Certificate chain
Subject
Country (C)
  • IT
Locality (L)
  • Milano
Organization (O)
  • FastWeb SpA
Common Name (CN)
  • fastmail.fastwebnet.it
Alternative Names
  • fastmail.fastwebnet.it
  • mx2.fastwebnet.it
  • mx3.fastwebnet.it
  • mx4.fastwebnet.it
  • mxr.fastwebnet.it
  • smtp.fastwebnet.it
  • pop.fastwebnet.it
  • imap.fastwebnet.it
  • mxb1.fastweb.it
  • mxb2.fastweb.it
  • mxb.fastweb.it
  • out.fastweb.it
  • smtp.fastweb.it
  • mailbus.fastweb.it
  • pop.fastweb.it
  • busmail.fastweb.it
  • mxl1.fastweb.it
  • mxl2.fastweb.it
  • mxl.fastweb.it
  • smtp.la.fastweb.it
  • pop.la.fastweb.it
  • imap.la.fastweb.it
  • fastmail.la.fastweb.it
  • mxk1.fastweb.it
  • mxk2.fastweb.it
  • mx1.fastwebnet.it
Issuer
Country (C)
  • US
Organization (O)
  • DigiCert Inc
Organizational Unit (OU)
  • www.digicert.com
Common Name (CN)
  • GeoTrust RSA CA 2018
validity period
Not valid before
2022-02-11
Not valid after
2023-03-14
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
23:1E:0D:31:C7:8E:50:F0:25:C9:4E:AC:72:DA:3E:88:FC:57:2C:17:93:E6:FB:47:58:F7:8E:3E:47:65:5A:15
SHA1
8C:D0:09:05:51:01:2E:07:AE:D7:8B:58:A8:3A:AE:B5:7D:A1:4C:8C
X509v3 extensions
authorityKeyIdentifier
  • keyid:90:58:FF:B0:9C:75:A8:51:54:77:B1:ED:F2:A3:43:16:38:9E:6C:C5
subjectKeyIdentifier
  • CF:08:35:63:38:F0:D4:C8:9B:5D:5C:8B:2B:1C:AE:71:C3:DC:66:29
crlDistributionPoints
  • Full Name:
  • URI:http://cdp.geotrust.com/GeoTrustRSACA2018.crl
certificatePolicies
  • Policy: 2.23.140.1.2.2
  • CPS: http://www.digicert.com/CPS
authorityInfoAccess
  • OCSP - URI:http://status.geotrust.com
  • CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:
  • 03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E
  • Timestamp : Feb 11 16:56:08.983 2022 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:FE:D4:C4:E8:39:66:6D:48:16:A7:BB:
  • C2:B0:8A:87:F8:AB:2D:71:BA:62:C9:9D:97:B2:98:0D:
  • C9:B3:E9:92:9B:02:20:74:FD:82:02:0E:62:0A:DC:9D:
  • 4B:9F:F1:8E:0D:11:39:3C:AC:3E:0A:97:88:6D:DE:8D:
  • EC:32:4E:AD:A8:54:7D
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 35:CF:19:1B:BF:B1:6C:57:BF:0F:AD:4C:6D:42:CB:BB:
  • B6:27:20:26:51:EA:3F:E1:2A:EF:A8:03:C3:3B:D6:4C
  • Timestamp : Feb 11 16:56:09.026 2022 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:FA:7C:D3:3C:8D:EE:C1:D1:4B:74:C9:
  • 77:87:3D:CC:18:A8:DD:EC:65:50:08:0B:90:5C:94:16:
  • 7F:DA:7A:93:53:02:20:14:37:EC:EF:31:6E:45:9C:F3:
  • B5:6B:56:DF:0D:DE:14:1B:AA:31:6A:F3:65:3F:5A:2B:
  • CB:FE:92:D9:2E:7A:A7
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : B3:73:77:07:E1:84:50:F8:63:86:D6:05:A9:DC:11:09:
  • 4A:79:2D:B1:67:0C:0B:87:DC:F0:03:0E:79:36:A5:9A
  • Timestamp : Feb 11 16:56:09.056 2022 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:04:3D:82:AA:2A:62:6F:81:EC:03:8D:E3:
  • 95:14:81:05:69:50:E2:BD:32:EC:A4:3E:3E:1B:4D:46:
  • A3:0C:4E:76:02:21:00:D8:1B:B4:B9:62:B5:7B:94:4C:
  • 7E:47:88:06:57:E7:71:C2:79:BF:F2:E2:0F:5D:5F:07:
  • 91:86:3B:28:C7:61:9D
First seen at:

CN=fastmail.fastwebnet.it,O=FastWeb SpA,L=Milano,C=IT

Certificate chain
Subject
Country (C)
  • IT
Locality (L)
  • Milano
Organization (O)
  • FastWeb SpA
Common Name (CN)
  • fastmail.fastwebnet.it
Alternative Names
  • fastmail.fastwebnet.it
  • mx2.fastwebnet.it
  • mx3.fastwebnet.it
  • mx4.fastwebnet.it
  • mxr.fastwebnet.it
  • smtp.fastwebnet.it
  • pop.fastwebnet.it
  • imap.fastwebnet.it
  • mxb1.fastweb.it
  • mxb2.fastweb.it
  • mxb.fastweb.it
  • out.fastweb.it
  • smtp.fastweb.it
  • mailbus.fastweb.it
  • pop.fastweb.it
  • busmail.fastweb.it
  • mxl1.fastweb.it
  • mxl2.fastweb.it
  • mxl.fastweb.it
  • smtp.la.fastweb.it
  • pop.la.fastweb.it
  • imap.la.fastweb.it
  • fastmail.la.fastweb.it
  • mxk1.fastweb.it
  • mxk2.fastweb.it
  • mx1.fastwebnet.it
Issuer
Country (C)
  • US
Organization (O)
  • DigiCert Inc
Organizational Unit (OU)
  • www.digicert.com
Common Name (CN)
  • GeoTrust RSA CA 2018
validity period
Not valid before
2023-02-27
Not valid after
2024-03-29
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
73:A0:B8:2E:54:08:BC:7F:78:AD:0D:B8:D2:B0:DF:10:1B:EE:0C:91:69:35:E5:23:28:A4:9E:67:35:B0:52:54
SHA1
B5:BB:77:C9:3B:7C:AA:CC:6C:C9:0E:FA:11:58:BE:4C:D5:E9:7E:23
X509v3 extensions
authorityKeyIdentifier
  • keyid:90:58:FF:B0:9C:75:A8:51:54:77:B1:ED:F2:A3:43:16:38:9E:6C:C5
subjectKeyIdentifier
  • F6:36:35:21:6C:76:60:60:C4:21:34:F2:43:C0:D5:F1:B3:85:3D:13
crlDistributionPoints
  • Full Name:
  • URI:http://cdp.geotrust.com/GeoTrustRSACA2018.crl
certificatePolicies
  • Policy: 2.23.140.1.2.2
  • CPS: http://www.digicert.com/CPS
authorityInfoAccess
  • OCSP - URI:http://status.geotrust.com
  • CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
  • 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
  • Timestamp : Feb 27 15:52:19.882 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:2D:B3:81:B6:20:C4:CC:B4:41:36:0E:CC:
  • 13:8F:B4:A5:5F:2A:04:93:FD:64:3E:57:70:77:18:8B:
  • D4:A2:8E:25:02:20:2A:5E:4E:41:9B:7E:CA:A2:97:6A:
  • D3:CE:83:71:40:D6:AA:30:0A:AF:55:AB:C1:FA:CB:4F:
  • D6:62:2A:20:2A:0B
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 73:D9:9E:89:1B:4C:96:78:A0:20:7D:47:9D:E6:B2:C6:
  • 1C:D0:51:5E:71:19:2A:8C:6B:80:10:7A:C1:77:72:B5
  • Timestamp : Feb 27 15:52:19.965 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:3A:5C:88:33:FC:0A:B9:A2:C8:1D:27:19:
  • 36:A6:BF:01:1A:26:1F:69:F4:DC:2C:39:D3:42:1A:4E:
  • 3D:2E:1E:5E:02:21:00:CE:BA:78:26:1C:9A:F0:DD:E2:
  • 71:B4:88:6E:00:50:14:0A:E0:80:2C:4B:A6:07:8B:55:
  • 80:5D:12:8D:1C:68:7B
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
  • 1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
  • Timestamp : Feb 27 15:52:19.905 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:AA:F2:83:63:84:F2:9B:CD:0F:69:45:
  • 1E:76:A3:B7:67:E0:BF:2C:C2:30:AC:E7:F0:A8:59:13:
  • 7C:9F:BD:6F:49:02:21:00:DD:5A:74:A0:2D:FB:63:17:
  • EB:D8:88:91:48:80:37:34:EA:6C:39:6A:10:53:7E:BE:
  • 50:65:BA:A4:1C:8C:92:71