SSL check results of kdans.net

NEW You can also bulk check multiple servers.

Discover if the mail servers for kdans.net can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Sun, 07 Sep 2025 00:30:34 +0000

We can not guarantee a secure connection to the mailservers of kdans.net!

Please contact the operator of kdans.net and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/kdans.net

Servers

Incoming Mails

These servers are responsible for incoming mails to @kdans.net addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
newbie.netspecs.nl
2a01:4f8:221:179b::2
5
supported
newbie.netspecs.nl
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
7 s
newbie.netspecs.nl
188.40.92.98
5
supported
newbie.netspecs.nl
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
relay1.netspecs.nl
188.40.92.98
10
supported
relay1.netspecs.nl
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
relay3.netspecs.nl
213.125.159.35
Results incomplete
20
unsupported
not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
11 s

Outgoing Mails

We have not received any emails from a @kdans.net address so far. Test mail delivery

Certificates

First seen at:

CN=newbie.netspecs.nl

Certificate chain
  • newbie.netspecs.nl
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption

      • R10
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption

          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption

Subject
Common Name (CN)
  • newbie.netspecs.nl
Alternative Names
  • newbie.netspecs.nl
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R10
validity period
Not valid before
2025-08-17
Not valid after
2025-11-15
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
29:4F:19:66:E4:A2:02:9B:71:36:4B:6F:6E:73:53:A3:14:CB:38:0B:69:8D:EE:C8:E0:75:D0:52:C8:79:46:0A
SHA1
C5:B4:39:2A:94:CB:1C:F8:A7:61:96:4C:51:86:A3:ED:EE:96:0E:C6
X509v3 extensions
subjectKeyIdentifier
  • D8:28:27:B8:C9:87:53:48:BF:31:A1:62:C2:45:15:C0:6E:AF:D0:9E
authorityKeyIdentifier
  • keyid:BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
authorityInfoAccess
  • CA Issuers - URI:http://r10.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://r10.c.lencr.org/73.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
  • 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
  • Timestamp : Aug 17 21:00:38.230 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:72:67:22:58:19:39:B0:86:8E:88:E2:08:
  • D4:C9:AC:0F:CA:AF:14:CB:DB:76:B5:B8:97:03:E8:00:
  • BE:CF:9A:68:02:21:00:88:08:AE:72:7F:4D:49:9F:45:
  • EE:B2:8F:D3:E4:DD:AD:63:08:83:40:B6:93:8E:61:48:
  • 3C:F0:6F:B3:08:26:7D
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 1A:04:FF:49:D0:54:1D:40:AF:F6:A0:C3:BF:F1:D8:C4:
  • 67:2F:4E:EC:EE:23:40:68:98:6B:17:40:2E:DC:89:7D
  • Timestamp : Aug 17 21:00:38.317 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:B3:E6:6F:9A:1F:4A:CC:F0:93:5B:21:
  • 06:C4:E9:16:86:20:59:EB:C4:02:B5:96:E3:BA:B8:C8:
  • 2E:25:15:48:ED:02:21:00:AF:FE:82:5F:48:99:CA:1E:
  • 59:47:41:3A:C9:82:FF:BC:0F:67:46:0A:D6:BB:9A:C4:
  • C9:5D:17:E3:38:E8:66:9D
First seen at:

CN=relay1.netspecs.nl

Certificate chain
  • relay1.netspecs.nl
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption

      • R11
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption

          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption

Subject
Common Name (CN)
  • relay1.netspecs.nl
Alternative Names
  • relay1.netspecs.nl
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R11
validity period
Not valid before
2025-06-29
Not valid after
2025-09-27
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
B7:5F:49:C7:67:B0:8F:9B:BA:7C:72:DD:F7:ED:FD:9C:55:7C:3B:F7:83:63:D9:F4:12:9A:B3:B8:3F:8C:2F:49
SHA1
F0:FE:F8:C6:99:78:90:15:0B:99:37:0F:64:12:3A:D9:6D:04:36:DB
X509v3 extensions
subjectKeyIdentifier
  • 94:3A:69:B8:CD:A1:AD:8E:07:AB:E0:29:A7:61:50:D7:B0:4B:D0:CD
authorityKeyIdentifier
  • keyid:C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
authorityInfoAccess
  • CA Issuers - URI:http://r11.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://r11.c.lencr.org/3.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : ED:3C:4B:D6:E8:06:C2:A4:A2:00:57:DB:CB:24:E2:38:
  • 01:DF:51:2F:ED:C4:86:C5:70:0F:20:DD:B7:3E:3F:E0
  • Timestamp : Jun 29 21:00:16.970 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:DF:63:E0:69:7A:5C:8A:DE:AE:A8:DD:
  • 4B:08:FC:EA:F1:04:9F:73:24:56:58:A7:C9:D6:7D:0C:
  • F9:9E:B5:AC:A8:02:21:00:E0:F0:F3:32:F1:9D:6B:4F:
  • 39:72:23:6F:33:7A:3F:2E:0F:1B:32:E1:C7:72:C7:91:
  • 08:AE:11:4B:44:3F:A4:D7
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
  • 47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
  • Timestamp : Jun 29 21:00:18.941 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:7F:D9:66:80:4C:AD:04:47:E2:BC:76:31:
  • 6B:77:2A:27:A2:E8:12:3B:A9:40:89:2A:4A:71:02:01:
  • CD:82:F8:BF:02:20:5D:41:E2:3C:58:AD:96:06:32:85:
  • 9A:0A:89:5B:73:A8:81:A1:D0:6F:98:F1:BB:B8:94:F3:
  • 4C:39:FE:2F:F1:18