SSL check results of gws.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for gws.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Sun, 05 Nov 2023 22:38:15 +0000

The mailservers of gws.de can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @gws.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mailserv2.aov.de
2a0b:de00:0:18::104
100
supported
mailserv2.aov.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailserv2.aov.de
193.28.18.104
100
supported
mailserv2.aov.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mailserv1.aov.de
2a0b:de00:0:18::103
100
supported
mailserv1.aov.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailserv1.aov.de
193.28.17.103
100
supported
mailserv1.aov.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailserv3.aov.de
2a01:4f8:1c17:4345::2
200
supported
mailserv3.aov.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mailserv3.aov.de
78.47.155.223
200
supported
mailserv3.aov.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mail.gw1.gws.de
83.218.32.45
Results incomplete
200 not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
1 s

Outgoing Mails

We have not received any emails from a @gws.de address so far. Test mail delivery

Certificates

First seen at:

CN=mailserv2.aov.de

Certificate chain
  • mailserv2.aov.de
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption

      • R3
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption

          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption

Subject
Common Name (CN)
  • mailserv2.aov.de
Alternative Names
  • mailserv2.aov.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R3
validity period
Not valid before
2023-10-05
Not valid after
2024-01-03
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
B0:48:34:52:59:FC:5E:E2:D3:9B:DA:6C:04:84:74:AE:1F:56:42:AB:69:B6:2B:BD:BE:1A:F8:D8:11:8C:43:B5
SHA1
A0:EA:6A:4D:45:59:EA:81:69:B6:67:37:AE:8F:0B:F0:8E:5D:5D:C0
X509v3 extensions
subjectKeyIdentifier
  • C7:30:55:A2:39:9A:9F:35:4F:CB:E3:42:F6:7F:77:CB:CF:D5:29:25
authorityKeyIdentifier
  • keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
  • OCSP - URI:http://r3.o.lencr.org
  • CA Issuers - URI:http://r3.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
  • 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
  • Timestamp : Oct 6 00:21:01.751 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:DF:65:0E:BE:25:D4:F8:12:9D:C2:CA:
  • 13:8D:C3:D9:9D:EE:EC:7B:2F:49:3A:9B:87:B6:CB:AE:
  • B1:1B:1F:D4:5E:02:20:42:01:D5:C1:CA:0D:74:5E:93:
  • 3E:48:ED:F3:AF:F2:60:CD:3F:93:32:4F:8B:DF:E8:FC:
  • 57:CF:67:4B:9B:20:B6
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
  • 67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
  • Timestamp : Oct 6 00:21:01.741 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:5D:9F:C0:72:1E:19:99:B8:9A:1A:32:0C:
  • 5C:B3:CF:3F:E5:81:D4:2A:30:FD:AE:1B:A7:F3:F7:49:
  • 56:CF:D2:EC:02:20:10:C7:90:4A:03:CB:39:B4:E6:DE:
  • C0:3D:8E:BA:48:8E:64:87:C7:6D:59:BA:3C:EA:C4:92:
  • E6:79:40:D1:54:44
First seen at:

CN=mailserv1.aov.de

Certificate chain
  • mailserv1.aov.de
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption

      • R3
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption

          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption

Subject
Common Name (CN)
  • mailserv1.aov.de
Alternative Names
  • mailserv1.aov.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R3
validity period
Not valid before
2023-10-05
Not valid after
2024-01-03
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
C8:71:25:F2:1E:0E:8A:A1:A9:99:BC:DF:0E:67:F1:2A:BB:E6:90:15:21:2F:66:AD:90:B6:81:04:A5:3B:AF:82
SHA1
11:43:DA:68:06:A7:86:30:60:4D:5C:63:62:02:6B:1E:CF:7D:DF:2E
X509v3 extensions
subjectKeyIdentifier
  • 22:76:23:B9:4D:82:4A:4D:70:F7:6B:2D:95:D2:3D:D7:53:D5:E9:EF
authorityKeyIdentifier
  • keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
  • OCSP - URI:http://r3.o.lencr.org
  • CA Issuers - URI:http://r3.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
  • 67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
  • Timestamp : Oct 6 00:19:27.190 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:ED:1B:E5:C5:A0:42:89:03:39:2F:04:
  • E7:47:AC:AA:EB:0E:87:91:CA:6F:88:43:57:D8:4B:FE:
  • AB:B4:FE:6D:86:02:21:00:86:5B:9F:9D:0D:0D:39:18:
  • 69:32:E1:27:5C:2E:10:9E:32:B7:34:41:0C:7F:50:28:
  • FA:9B:2C:92:8E:29:81:0B
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
  • 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
  • Timestamp : Oct 6 00:19:27.198 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:D7:78:49:9B:1C:4B:60:AE:B9:DE:D0:
  • B6:9F:4F:18:CE:0F:76:BF:E6:76:C8:85:E2:40:A0:53:
  • 46:08:AF:4E:C2:02:20:7C:EA:7A:30:40:6B:BD:08:6C:
  • D7:04:A7:19:46:E0:57:F0:77:D5:55:38:6B:EC:36:23:
  • 63:6C:46:AD:86:06:4D
First seen at:

CN=mailserv3.aov.de

Certificate chain
  • mailserv3.aov.de
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption

      • R3
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption

          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption

Subject
Common Name (CN)
  • mailserv3.aov.de
Alternative Names
  • mailserv3.aov.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R3
validity period
Not valid before
2023-10-05
Not valid after
2024-01-03
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
D0:A6:EA:99:95:8B:47:C2:08:E0:24:99:8D:59:BA:13:1C:86:A4:FD:BE:15:8B:71:B4:71:C6:A6:50:EC:C6:BA
SHA1
48:0A:84:35:CE:CA:71:F4:C4:18:0B:BA:9E:88:F7:6D:9A:B0:E1:AA
X509v3 extensions
subjectKeyIdentifier
  • 6C:60:2E:B1:26:8E:72:42:42:7F:82:C1:DB:E8:73:43:4C:89:DA:52
authorityKeyIdentifier
  • keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
  • OCSP - URI:http://r3.o.lencr.org
  • CA Issuers - URI:http://r3.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
  • 67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
  • Timestamp : Oct 6 00:22:37.521 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:3B:0C:3A:D1:C7:56:5C:E9:A0:2D:3E:FD:
  • B3:71:29:33:03:C2:27:DF:81:58:65:6B:3A:29:31:CC:
  • AC:27:9A:73:02:21:00:E5:67:85:DD:AB:EA:BF:C5:F5:
  • CA:00:5B:CB:42:E3:83:11:27:60:57:55:08:2C:CB:80:
  • 5F:4D:22:5F:18:7B:12
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
  • B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
  • Timestamp : Oct 6 00:22:37.584 2023 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:9B:8C:CA:DC:6F:9F:AC:C8:14:CA:75:
  • 88:ED:E4:8D:69:D0:8F:E9:2D:F2:E4:D1:10:5C:FB:48:
  • E7:6C:D0:EA:EC:02:21:00:F8:F7:B3:3B:D1:13:74:AD:
  • 45:3E:B6:CE:97:9E:7E:05:DF:B6:1D:8E:E0:74:A4:6A:
  • CF:0F:39:B5:01:E3:59:5F