SSL-Tools

SSL check results of mail.arne-breitsprecher.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for mail.arne-breitsprecher.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Wed, 08 Jul 2020 17:18:56 +0000

The mailservers of mail.arne-breitsprecher.de can be reached through an encrypted connection.

However, we found problems that may affect the security.

Servers

Incoming Mails

These servers are responsible for incoming mails to @mail.arne-breitsprecher.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.arne-breitsprecher.de
92.51.145.24
 -
supported
arnebr.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
3 s
mail.arne-breitsprecher.de
2a01:488:66:1000:5c33:9118::1
 -
supported
arnebr.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
3 s

Outgoing Mails

We have not received any emails from a @mail.arne-breitsprecher.de address so far. Test mail delivery

Certificates

First seen at:

CN=arnebr.de

Certificate chain
  • arnebr.de
    • remaining
    • 2048 bit
    • sha256WithRSAEncryption
    • Hostname Mismatch
    • Expired
Subject
Common Name (CN)
  • arnebr.de
Alternative Names
  • *.arnebr.de
  • arnebr.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • Let's Encrypt Authority X3
validity period
Not valid before
2020-04-01
Not valid after
2020-06-30
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
BE:5C:19:54:B9:0E:BD:A8:A2:3D:49:73:31:50:0A:05:F5:DE:48:9E:AD:B5:30:E5:94:AF:31:CD:A1:09:F2:12
SHA1
79:EE:33:D0:75:99:15:29:BB:08:5E:FE:4F:6F:89:8C:B7:9B:AC:37
X509v3 extensions
subjectKeyIdentifier
  • 71:EC:08:B2:F3:75:6B:17:E3:E6:FA:F5:79:5E:DD:91:A3:22:E5:C3
authorityKeyIdentifier
  • keyid:A8:4A:6A:63:04:7D:DD:BA:E6:D1:39:B7:A6:45:65:EF:F3:A8:EC:A1
authorityInfoAccess
  • OCSP - URI:http://ocsp.int-x3.letsencrypt.org
  • CA Issuers - URI:http://cert.int-x3.letsencrypt.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
  • Policy: 1.3.6.1.4.1.44947.1.1.1
  • CPS: http://cps.letsencrypt.org
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 07:B7:5C:1B:E5:7D:68:FF:F1:B0:C6:1D:23:15:C7:BA:
  • E6:57:7C:57:94:B7:6A:EE:BC:61:3A:1A:69:D3:A2:1C
  • Timestamp : Apr 1 08:09:50.580 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:17:C4:58:39:7A:48:1A:FF:E8:85:2D:F8:
  • 45:7B:CB:DC:EC:DE:56:8E:48:E8:A5:01:C8:E5:C5:3D:
  • 34:6C:53:00:02:21:00:97:E8:89:00:2D:1C:82:26:3C:
  • F5:5B:0F:D9:CF:D3:C0:B1:7B:D3:3E:B3:6D:5C:45:11:
  • 99:BB:C9:CB:B0:59:AE
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 6F:53:76:AC:31:F0:31:19:D8:99:00:A4:51:15:FF:77:
  • 15:1C:11:D9:02:C1:00:29:06:8D:B2:08:9A:37:D9:13
  • Timestamp : Apr 1 08:09:50.785 2020 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:5D:E1:6E:95:C4:92:D4:C0:78:8E:FB:B9:
  • F8:5E:78:2D:C1:EF:CF:63:C7:1F:AA:DB:46:66:4A:6D:
  • 2F:A3:64:34:02:20:2C:05:2A:16:25:11:55:7B:D9:12:
  • 8A:C5:4C:43:25:22:18:78:5E:BB:DD:12:CA:89:52:2D:
  • 5D:F4:E7:85:75:A0