macspares.co.za - TLS / STARTTLS Test

Discover if the mail servers for macspares.co.za can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Wed, 28 Aug 2024 16:44:48 +0000

Certificates

Problems found
Protocol

Secure
DANE

Missing

The mailservers of macspares.co.za can be reached through an encrypted connection.

However, we found problems that may affect the security.

Servers

Incoming Mails

These servers are responsible for incoming mails to @macspares.co.za addresses.

Hostname / IP address	Priority	STARTTLS	Certificates	Protocol
1-grid-mx04.com 41.61.249.20	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 8 s
1-grid-mx04.com 41.61.249.90	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx04.com 41.61.249.60	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx04.com 41.61.249.70	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx04.com 41.61.249.80	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx04.com 41.61.249.30	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx04.com 41.61.249.50	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 10 s
1-grid-mx04.com 41.61.249.100	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx02.com 41.185.249.80	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 8 s
1-grid-mx02.com 41.185.249.30	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx02.com 41.185.249.50	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx02.com 41.185.249.70	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx02.com 41.185.249.20	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx02.com 41.185.249.100	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx02.com 41.185.249.90	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx02.com 41.185.249.60	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx03.co.za 41.61.250.20	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx03.co.za 41.61.250.50	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx03.co.za 41.61.250.30	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx03.co.za 41.61.250.100	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx03.co.za 41.61.250.90	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx03.co.za 41.61.250.60	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx03.co.za 41.61.250.80	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx01.co.za 41.185.250.20	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 8 s
1-grid-mx01.co.za 41.185.250.30	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx01.co.za 41.185.250.90	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx01.co.za 41.185.250.80	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx01.co.za 41.185.250.70	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx01.co.za 41.185.250.60	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx01.co.za 41.185.250.100	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s
1-grid-mx01.co.za 41.185.250.50	5	supported	*.hostserv.co.za	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-08-28 7 s

Outgoing Mails

We have not received any emails from a @macspares.co.za address so far. Test mail delivery

Certificates

First seen at: 2024-01-15

CN=*.hostserv.co.za

Certificate chain

*.hostserv.co.za
- 2024-12-03 remaining
- 2048 bit
- sha256WithRSAEncryption
- Hostname Mismatch
- Unknown Authority

Subject

Common Name (CN)

*.hostserv.co.za

Alternative Names

*.hostserv.co.za
hostserv.co.za

Issuer

Country (C)

State (ST)

Greater Manchester

Locality (L)

Salford

Organization (O)

Sectigo Limited

Common Name (CN)

Sectigo RSA Domain Validation Secure Server CA

validity period

Not valid before: 2023-11-03
Not valid after: 2024-12-03

This certifcate has been verified for the following usages:

Digital Signature
Key Encipherment
TLS Web Server Authentication
TLS Web Client Authentication

Fingerprints

SHA256: F3:81:B7:8D:D5:D8:EF:8B:88:3D:60:70:09:24:55:30:D4:BA:73:E1:72:42:70:D2:08:73:9D:5E:03:23:83:A2
SHA1: 62:BE:21:7F:9B:D1:14:13:71:99:CA:39:0F:81:1A:71:05:7A:A9:AD

X509v3 extensions

authorityKeyIdentifier

keyid:8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1

subjectKeyIdentifier

82:BC:BB:18:08:1E:24:21:3B:72:96:38:97:31:A3:FE:2F:B4:7B:00

certificatePolicies

Policy: 1.3.6.1.4.1.6449.1.2.2.7
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1

authorityInfoAccess

CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
OCSP - URI:http://ocsp.sectigo.com

ct_precert_scts

Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
Timestamp : Nov 3 10:18:12.402 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:49:56:A0:66:02:2A:A5:9F:7E:B9:18:3E:
EC:BA:13:52:A8:EC:78:69:3B:C5:57:C6:64:9C:B5:E8:
19:B0:F3:74:02:21:00:8C:F1:F5:10:A6:07:07:4F:76:
F0:A3:C2:33:D4:FB:9F:29:99:AB:83:99:23:3B:93:40:
EA:15:AF:34:55:74:E4
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
Timestamp : Nov 3 10:18:12.502 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:94:D2:30:13:73:59:23:3D:BB:18:18:
8B:4D:12:0A:D1:ED:94:63:90:BF:D7:02:2F:EB:1C:1B:
B7:DB:10:EC:6C:02:20:75:5D:87:15:39:7A:3F:2C:06:
DD:48:60:DA:3E:D3:D4:F9:A3:A3:EB:A3:99:07:6A:45:
BA:BF:B0:5D:09:8B:E5
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Nov 3 10:18:12.441 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:C9:47:D4:F6:3F:2A:72:F8:F6:C2:17:
BE:8A:AF:08:13:43:7C:F1:8F:81:0F:3C:F1:AB:C6:9C:
11:87:A8:A0:8A:02:20:23:B1:D5:B5:04:66:E3:3C:FC:
8E:02:D0:D0:5F:51:B6:2E:54:A1:D0:EE:8B:07:C1:63:
A0:3A:FD:C8:47:A9:E8

SSL check results of macspares.co.za