SSL-Tools

SSL check results of grupp-web.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for grupp-web.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Sat, 06 Jun 2026 00:56:21 +0000

The mailservers of grupp-web.de can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @grupp-web.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mx01.grupp-web.de
2a03:4000:34:2a3::1
 10
supported
autoconfig.grupp-web.de
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mx01.grupp-web.de
194.59.205.84
 10
supported
autoconfig.grupp-web.de
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s

Outgoing Mails

We have not received any emails from a @grupp-web.de address so far. Test mail delivery

Certificates

First seen at:

CN=autoconfig.grupp-web.de

Certificate chain
  • autoconfig.grupp-web.de
    • remaining
    • 256 bit
    • ecdsa-with-SHA384
      • E8
        • remaining
        • 384 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • autoconfig.grupp-web.de
Alternative Names
  • autoconfig.grupp-web.de
  • autodiscover.grupp-web.de
  • mta-sts.grupp-web.de
  • mx01.grupp-web.de
  • ua-auto-config.grupp-web.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • E8
validity period
Not valid before
2026-05-24
Not valid after
2026-08-22
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
Fingerprints
SHA256
5B:AC:16:F8:C0:1F:42:BC:5B:16:73:5A:75:D3:35:26:B2:CE:61:C6:AB:85:AF:E8:63:74:62:34:78:1C:F8:F7
SHA1
00:8F:28:88:0E:DB:A4:C5:A0:29:0D:1B:11:D4:88:99:C9:37:B3:85
X509v3 extensions
subjectKeyIdentifier
  • 63:B8:67:17:B0:58:53:77:A1:F1:58:C5:56:B8:21:0C:1F:EA:CD:3E
authorityKeyIdentifier
  • keyid:8F:0D:13:A2:F6:2E:7E:D1:50:6C:33:18:38:5D:59:8E:23:72:91:CA
authorityInfoAccess
  • CA Issuers - URI:http://e8.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://e8.c.lencr.org/63.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:
  • E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A
  • Timestamp : May 24 18:29:34.371 2026 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:56:97:50:55:0F:1E:1E:32:34:86:98:A0:
  • 14:7B:BD:05:5E:12:D5:89:E8:39:58:18:28:90:C9:65:
  • 75:E1:78:00:02:21:00:E9:52:2C:B9:35:19:D6:75:15:
  • 79:D6:64:E6:2B:FB:AD:BD:3A:1A:A3:79:DD:09:51:99:
  • DF:DC:A0:F4:7F:42:5C
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 1A:8B:9D:6B:0F:FE:BF:81:B4:79:39:C6:D2:31:0A:86:
  • D6:D1:02:D4:F0:46:E2:18:2C:9D:E3:5F:5E:26:25:EF
  • Timestamp : May 24 18:29:34.701 2026 GMT
  • Extensions: 00:00:05:00:16:6F:FD:25
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:DA:7E:FD:E8:4B:3C:80:60:6D:0F:56:
  • 5A:0C:A6:0F:83:2B:7B:41:45:5C:DC:57:D4:36:79:85:
  • 96:3F:A5:FC:78:02:21:00:EC:C0:53:B0:BA:DD:4C:A0:
  • AA:1D:22:88:F8:B9:D9:23:89:0B:A7:1C:CE:0F:C3:DB:
  • E1:2F:EA:81:CD:B2:E9:13

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.mx01.grupp-web.de
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
valid
_25._tcp.mx01.grupp-web.de
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
valid