SSL-Tools

SSL check results of justus.com.ua

NEW You can also bulk check multiple servers.

Discover if the mail servers for justus.com.ua can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Fri, 29 Mar 2024 11:51:35 +0000

The mailservers of justus.com.ua can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @justus.com.ua addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mx.justus.com.ua
95.216.34.172
 10
supported
mx.justus.com.ua
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s

Outgoing Mails

We have not received any emails from a @justus.com.ua address so far. Test mail delivery

Certificates

First seen at:

CN=mx.justus.com.ua

Certificate chain
  • mx.justus.com.ua
    • remaining
    • 2048 bit
    • sha256WithRSAEncryption
      • R3
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • mx.justus.com.ua
Alternative Names
  • mx.justus.com.ua
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R3
validity period
Not valid before
2024-03-15
Not valid after
2024-06-13
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
0C:7B:4A:1A:D9:8D:D8:8E:4F:E9:1B:AA:E1:CB:D5:3B:AC:64:A0:1D:3A:8E:F1:0A:14:70:88:A8:FD:1F:47:41
SHA1
7C:DD:D4:97:45:20:B9:2A:76:FB:C8:A0:99:0A:B4:31:54:2C:88:8A
X509v3 extensions
subjectKeyIdentifier
  • B8:2B:F0:FA:28:60:D5:C3:B1:5E:14:69:29:C2:CB:24:D0:DF:73:16
authorityKeyIdentifier
  • keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
  • OCSP - URI:http://r3.o.lencr.org
  • CA Issuers - URI:http://r3.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
  • 1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
  • Timestamp : Mar 15 10:48:22.879 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:6B:E8:D2:07:4D:58:04:83:1D:B8:F2:8A:
  • 35:09:FF:7D:DF:32:AB:99:35:96:37:FB:AC:AB:98:F7:
  • 7B:D4:3E:55:02:20:10:C5:F7:72:92:22:27:AC:B3:8C:
  • E8:54:CE:57:C8:36:F4:F1:E3:30:72:1D:24:62:4A:5C:
  • 64:31:92:92:4E:96
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : A2:E2:BF:D6:1E:DE:2F:2F:07:A0:D6:4E:6D:37:A7:DC:
  • 65:43:B0:C6:B5:2E:A2:DA:B7:8A:F8:9A:6D:F5:17:D8
  • Timestamp : Mar 15 10:48:22.890 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:26:36:B9:9A:5E:03:41:69:33:F0:FE:FD:
  • 26:A6:DF:82:A8:00:35:43:5C:93:41:27:DE:89:32:A0:
  • 9B:27:72:B9:02:20:4B:64:DA:CD:80:10:5E:AA:50:47:
  • 75:49:77:5D:DC:53:41:26:05:40:2E:CA:4A:E2:48:7F:
  • FD:34:69:3E:67:E0

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.mx.justus.com.ua
  • DANE-EE: Domain Issued Certificate
  • Use full certificate
  • SHA-256 Hash
valid
valid