SSL-Tools

SSL check results of kirche-oldenburg.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for kirche-oldenburg.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Wed, 23 Nov 2022 08:57:15 +0000

No connection to the mailservers of kirche-oldenburg.de could be established.

Servers

Incoming Mails

These servers are responsible for incoming mails to @kirche-oldenburg.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.kondek.de
81.14.162.60
Results incomplete
100
supported
*.kondek.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
6 s

Outgoing Mails

We have not received any emails from a @kirche-oldenburg.de address so far. Test mail delivery

Certificates

First seen at:

CN=*.kondek.de

Certificate chain
Subject
Common Name (CN)
  • *.kondek.de
Alternative Names
  • *.kondek.de
  • kondek.de
Issuer
Country (C)
  • US
Organization (O)
  • DigiCert Inc
Organizational Unit (OU)
  • www.digicert.com
Common Name (CN)
  • Thawte TLS RSA CA G1
validity period
Not valid before
2022-01-24
Not valid after
2023-01-25
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
AB:D9:6F:D1:5D:5F:B3:32:73:53:A4:78:5D:5D:E5:FC:7E:EF:5C:9C:0A:63:97:2B:A7:0E:97:3D:71:47:8A:D2
SHA1
BE:B6:55:61:D4:48:DF:B4:34:1C:C3:62:E2:B5:97:E3:7B:97:40:5E
X509v3 extensions
authorityKeyIdentifier
  • keyid:A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
subjectKeyIdentifier
  • 2E:2C:A0:4A:63:F7:20:DF:5E:C7:0F:BC:81:1E:4A:42:57:09:D6:CE
crlDistributionPoints
  • Full Name:
  • URI:http://cdp.thawte.com/ThawteTLSRSACAG1.crl
certificatePolicies
  • Policy: 2.23.140.1.2.1
  • CPS: http://www.digicert.com/CPS
authorityInfoAccess
  • OCSP - URI:http://status.thawte.com
  • CA Issuers - URI:http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:
  • 03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E
  • Timestamp : Jan 24 09:38:27.333 2022 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:14:EE:A9:A7:BE:9D:F7:58:47:7D:34:D0:
  • 13:4F:F5:CA:83:27:CD:83:43:5B:E5:C5:2F:84:9D:82:
  • 13:BB:44:2D:02:21:00:B8:9D:6B:FB:39:20:D1:F2:9C:
  • 21:96:62:EF:BD:56:E7:8B:FB:25:60:9D:57:1D:60:55:
  • 8B:2E:83:89:42:36:51
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 35:CF:19:1B:BF:B1:6C:57:BF:0F:AD:4C:6D:42:CB:BB:
  • B6:27:20:26:51:EA:3F:E1:2A:EF:A8:03:C3:3B:D6:4C
  • Timestamp : Jan 24 09:38:27.299 2022 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:06:57:15:0D:62:6A:92:15:CB:B8:E6:13:
  • C7:E6:F8:B9:BD:53:82:95:26:58:A9:45:CD:E5:F2:0D:
  • 96:F2:6E:38:02:20:6E:B5:7C:36:3A:6B:B0:E6:F6:7A:
  • B2:98:6C:D9:8D:5B:E3:4A:73:9C:58:93:6B:7B:CE:19:
  • 5D:1C:46:06:40:4A
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : B3:73:77:07:E1:84:50:F8:63:86:D6:05:A9:DC:11:09:
  • 4A:79:2D:B1:67:0C:0B:87:DC:F0:03:0E:79:36:A5:9A
  • Timestamp : Jan 24 09:38:27.327 2022 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:20:FE:26:D7:84:C0:54:97:BF:49:09:FB:
  • 5F:2C:F9:3B:1D:9F:D2:A1:1A:F9:DF:0C:7D:AA:8D:1A:
  • 22:68:17:F5:02:20:51:EC:16:51:CE:8B:AF:70:75:1E:
  • FD:A7:AD:BF:8E:18:49:57:AA:E6:CC:A6:1F:6A:4E:BF:
  • E7:4C:C2:23:85:58