SSL check results of hsga.biz

NEW You can also bulk check multiple servers.

Discover if the mail servers for hsga.biz can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Tue, 09 Jun 2020 00:30:45 +0000

The mailservers of hsga.biz can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @hsga.biz addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
hsga.synology.me
90.187.55.201
20
supported
hsga.synology.me
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
19 s
relay.rzone.de
81.169.145.96
Results incomplete
100
supported
relay.rzone.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s

Outgoing Mails

We have not received any emails from a @hsga.biz address so far. Test mail delivery

Certificates

First seen at:

CN=relay.rzone.de

Certificate chain
Subject
Common Name (CN)
  • relay.rzone.de
Alternative Names
  • relay.rzone.de
Issuer
Country (C)
  • US
Organization (O)
  • DigiCert Inc
Organizational Unit (OU)
  • www.digicert.com
Common Name (CN)
  • Thawte RSA CA 2018
validity period
Not valid before
2020-03-06
Not valid after
2021-04-24
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
34:53:C7:4F:D4:E8:F1:BD:28:40:87:2A:F5:63:49:3A:FF:E9:D5:66:DB:C5:A0:7B:F3:8C:0F:91:2B:EC:6A:D3
SHA1
90:77:6D:44:1A:78:DC:4F:CF:84:72:38:86:D5:C4:58:83:6E:63:01
X509v3 extensions
authorityKeyIdentifier
  • keyid:A3:C8:5E:65:54:E5:30:78:C1:05:EA:07:0A:6A:59:CC:B9:FE:DE:5A
subjectKeyIdentifier
  • 0B:8A:47:A5:72:46:95:E7:B1:61:5C:5C:D3:0E:6E:D5:25:F9:EA:5B
crlDistributionPoints
  • Full Name:
  • URI:http://cdp.thawte.com/ThawteRSACA2018.crl
certificatePolicies
  • Policy: 2.16.840.1.114412.1.2
  • CPS: https://www.digicert.com/CPS
  • Policy: 2.23.140.1.2.1
authorityInfoAccess
  • OCSP - URI:http://status.thawte.com
  • CA Issuers - URI:http://cacerts.thawte.com/ThawteRSACA2018.crt
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 7D:3E:F2:F8:8F:FF:88:55:68:24:C2:C0:CA:9E:52:89:
  • 79:2B:C5:0E:78:09:7F:2E:6A:97:68:99:7E:22:F0:D7
  • Timestamp : Mar 6 19:04:09.482 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:1D:6C:2A:BD:82:8C:D2:74:1B:B8:6F:C4:
  • AA:B7:4B:A3:03:40:5F:C6:CD:23:2E:BE:15:57:E8:2C:
  • D8:9F:47:07:02:21:00:C1:0E:51:3F:36:07:4B:2A:66:
  • A0:1D:5C:03:F5:33:36:34:75:EB:5E:77:8C:15:B2:81:
  • AA:84:2D:00:6A:52:8D
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 5C:DC:43:92:FE:E6:AB:45:44:B1:5E:9A:D4:56:E6:10:
  • 37:FB:D5:FA:47:DC:A1:73:94:B2:5E:E6:F6:C7:0E:CA
  • Timestamp : Mar 6 19:04:09.482 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:F8:8B:92:66:69:A4:49:43:03:DE:0D:
  • FC:BA:1A:76:94:44:C6:DA:D0:A1:A9:37:31:F3:88:AB:
  • D5:F8:0F:7E:16:02:20:61:A6:84:99:F7:CF:B9:1E:02:
  • 54:69:7A:3C:3D:EE:23:E3:B9:CE:F8:49:54:4D:9F:D9:
  • 76:A8:24:28:8A:04:A5
First seen at:

CN=hsga.synology.me

Certificate chain
Subject
Common Name (CN)
  • hsga.synology.me
Alternative Names
  • hsga.synology.me
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • Let's Encrypt Authority X3
validity period
Not valid before
2020-06-08
Not valid after
2020-09-06
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
4E:48:94:9B:E3:90:F9:56:37:FF:D3:4A:11:5F:BD:DF:2D:BA:16:B3:03:3E:81:8F:20:4D:CE:C2:77:A9:4F:B5
SHA1
A9:B7:75:DD:DC:7B:F0:24:EC:5E:20:B6:59:15:F5:35:1A:92:8D:03
X509v3 extensions
subjectKeyIdentifier
  • C6:11:F8:7E:E3:F9:F5:CB:65:E5:8F:08:D8:BA:60:2A:F9:A6:F6:56
authorityKeyIdentifier
  • keyid:A8:4A:6A:63:04:7D:DD:BA:E6:D1:39:B7:A6:45:65:EF:F3:A8:EC:A1
authorityInfoAccess
  • OCSP - URI:http://ocsp.int-x3.letsencrypt.org
  • CA Issuers - URI:http://cert.int-x3.letsencrypt.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
  • Policy: 1.3.6.1.4.1.44947.1.1.1
  • CPS: http://cps.letsencrypt.org
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : E7:12:F2:B0:37:7E:1A:62:FB:8E:C9:0C:61:84:F1:EA:
  • 7B:37:CB:56:1D:11:26:5B:F3:E0:F3:4B:F2:41:54:6E
  • Timestamp : Jun 8 15:12:23.019 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:43:DC:68:ED:22:65:08:10:DA:30:97:47:
  • F9:D3:36:3D:F9:9F:C2:7C:3E:DA:09:23:6E:60:5F:28:
  • C2:2B:33:14:02:21:00:AE:C6:EC:5C:68:4B:A7:7D:FD:
  • 93:01:6C:81:C5:41:5E:82:7C:82:38:7D:64:21:4E:F5:
  • 0D:5F:68:8F:4D:8C:D8
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : B2:1E:05:CC:8B:A2:CD:8A:20:4E:87:66:F9:2B:B9:8A:
  • 25:20:67:6B:DA:FA:70:E7:B2:49:53:2D:EF:8B:90:5E
  • Timestamp : Jun 8 15:12:23.005 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:F8:1A:9B:01:7E:FD:C8:C6:80:BA:03:
  • CA:20:BD:66:0D:D9:7D:A1:24:9A:3B:42:C6:F2:9A:9C:
  • B3:96:1F:9B:13:02:21:00:B4:95:A2:F0:0A:53:7D:7C:
  • C5:D1:4F:CE:7B:5F:2C:86:0D:93:21:E5:70:17:0F:65:
  • 8C:10:9F:1D:52:64:2B:0C