SSL-Tools

SSL check results of mail.chmann.net

NEW You can also bulk check multiple servers.

Discover if the mail servers for mail.chmann.net can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Wed, 15 May 2024 20:17:47 +0000

The mailservers of mail.chmann.net can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @mail.chmann.net addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
chmann.net
38.242.219.123
 10
supported
chmann.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
2 s
relay.rzone.de
81.169.145.96
Results incomplete
200
supported
relay.rzone.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s

Outgoing Mails

We have not received any emails from a @mail.chmann.net address so far. Test mail delivery

Certificates

First seen at:

CN=chmann.net

Certificate chain
  • chmann.net
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption
      • R3
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • chmann.net
Alternative Names
  • chmann.net
  • mail.bacu.de
  • mail.chmann.net
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R3
validity period
Not valid before
2024-03-18
Not valid after
2024-06-16
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
BE:B6:B7:5B:3A:53:52:85:4E:CA:2D:BE:5B:21:86:C1:44:02:42:93:B7:BF:03:88:F0:63:82:3E:63:9F:FC:4B
SHA1
93:CA:0B:1B:41:E4:68:A4:42:67:87:99:0F:6A:D6:C8:D1:91:EE:53
X509v3 extensions
subjectKeyIdentifier
  • 4A:F8:8C:CE:C3:7C:36:FB:D8:51:CD:7C:67:D4:BE:AF:21:C7:07:0A
authorityKeyIdentifier
  • keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
  • OCSP - URI:http://r3.o.lencr.org
  • CA Issuers - URI:http://r3.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : A2:E2:BF:D6:1E:DE:2F:2F:07:A0:D6:4E:6D:37:A7:DC:
  • 65:43:B0:C6:B5:2E:A2:DA:B7:8A:F8:9A:6D:F5:17:D8
  • Timestamp : Mar 18 08:15:33.795 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:13:27:01:33:06:12:7B:44:17:3F:70:E2:
  • E8:00:9F:F3:5D:16:F2:7E:CB:27:FA:62:02:1E:CF:C0:
  • 6B:35:8A:37:02:20:19:41:38:EF:02:72:05:66:C2:6E:
  • AB:2A:B9:F7:66:33:FA:8D:E4:5E:62:EF:3A:A1:9C:E0:
  • 2E:62:6B:9B:84:01
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
  • 1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
  • Timestamp : Mar 18 08:15:34.082 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:33:E0:BC:B1:8E:94:09:1C:29:87:68:AA:
  • 02:CA:FF:91:BA:1F:55:FC:C3:66:C6:5A:9F:27:B9:44:
  • DD:6C:5E:29:02:21:00:AE:DE:21:21:FE:4E:B5:B9:7B:
  • D8:C3:3C:F5:74:D4:42:5A:93:DE:E9:20:9B:DC:AE:F1:
  • 83:B8:89:40:F8:02:DC
First seen at:

CN=relay.rzone.de,O=Strato AG,L=Berlin,ST=Berlin,C=DE

Certificate chain
Subject
Country (C)
  • DE
State (ST)
  • Berlin
Locality (L)
  • Berlin
Organization (O)
  • Strato AG
Common Name (CN)
  • relay.rzone.de
Alternative Names
  • relay.rzone.de
Issuer
Country (C)
  • US
Organization (O)
  • DigiCert Inc
Organizational Unit (OU)
  • www.digicert.com
Common Name (CN)
  • GeoTrust TLS RSA CA G1
validity period
Not valid before
2024-03-25
Not valid after
2025-03-22
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
A1:E9:C8:1D:C6:8E:EA:CB:30:C2:76:FB:BA:0E:08:2D:56:63:BC:E9:0A:0E:DB:9E:5F:0A:DF:7F:99:19:15:A4
SHA1
8F:C8:5A:6F:E2:0B:DC:EB:83:50:AB:EA:71:2E:EB:46:0E:C3:23:0C
X509v3 extensions
authorityKeyIdentifier
  • keyid:94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
subjectKeyIdentifier
  • 90:92:CD:92:E9:76:3A:A6:85:A9:A2:7F:30:03:90:E6:12:F5:A4:13
certificatePolicies
  • Policy: 2.23.140.1.2.2
  • CPS: http://www.digicert.com/CPS
crlDistributionPoints
  • Full Name:
  • URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
authorityInfoAccess
  • OCSP - URI:http://status.geotrust.com
  • CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
  • 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
  • Timestamp : Mar 25 06:32:12.823 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:E1:63:96:33:C8:9D:CB:72:04:2E:BF:
  • 78:E9:AA:EE:D8:4B:29:37:61:02:1C:1D:6E:FC:DD:78:
  • 34:00:3D:AC:82:02:20:70:5C:3E:C7:50:2B:72:38:46:
  • C2:7E:7B:F5:08:3A:C8:C9:18:DE:0B:7D:58:94:B5:42:
  • 10:34:D7:61:21:D4:1D
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
  • 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
  • Timestamp : Mar 25 06:32:12.878 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:D9:CF:D9:31:DD:0B:16:79:98:F9:8C:
  • F4:44:3F:91:4C:C5:97:C9:0C:DA:C6:86:22:5C:B1:EC:
  • AE:76:42:EA:0F:02:21:00:8D:53:81:F9:5B:8C:4D:12:
  • 1A:60:6A:EF:EC:F4:F5:66:22:A4:15:04:E9:10:39:11:
  • 1B:BD:34:37:A0:73:07:9C
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
  • D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
  • Timestamp : Mar 25 06:32:12.900 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:66:66:80:15:50:6F:57:C5:61:AC:F3:24:
  • 92:62:24:BE:16:03:BB:64:A1:15:27:45:3F:2D:70:72:
  • 8C:ED:97:9F:02:20:24:49:D8:D6:0A:13:6B:F3:F0:1F:
  • 93:FB:98:BB:09:B1:D9:F2:EC:B8:68:9E:FA:63:54:B0:
  • 18:AD:B9:34:1F:70