SSL check results of mail.he.vhost.aco

NEW You can also bulk check multiple servers.

Discover if the mail servers for mail.he.vhost.aco can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Fri, 05 Dec 2025 01:30:34 +0000

The mailservers of mail.he.vhost.aco can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @mail.he.vhost.aco addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.he.vhost.aco
157.90.121.53
-
supported
mail.he.vhost.aco
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
5 s
mail.he.vhost.aco
2a01:4f8:c2c:a62d::1
-
supported
mail.he.vhost.aco
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
8 s

Outgoing Mails

We have not received any emails from a @mail.he.vhost.aco address so far. Test mail delivery

Certificates

First seen at:

CN=mail.he.vhost.aco

Certificate chain
  • mail.he.vhost.aco
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption

      • R13
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption

          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption

Subject
Common Name (CN)
  • mail.he.vhost.aco
Alternative Names
  • autoconfig.cm.aco
  • autoconfig.fr.newsletter.aco
  • autodiscover.cm.aco
  • autodiscover.fr.newsletter.aco
  • mail.he.vhost.aco
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R13
validity period
Not valid before
2025-10-25
Not valid after
2026-01-23
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
BD:BF:4B:4C:BA:DD:F5:A8:4A:53:7B:AB:A2:09:1A:B6:0F:2B:6F:34:E1:43:14:94:D1:8E:03:23:BC:5E:C8:4B
SHA1
17:29:C1:A8:6F:6C:DA:B4:F8:40:00:EF:07:0E:88:28:BA:F2:07:54
X509v3 extensions
subjectKeyIdentifier
  • 35:9F:28:F9:FB:2C:7E:EA:C1:1D:29:89:32:C2:49:EC:30:B6:CC:04
authorityKeyIdentifier
  • keyid:E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
authorityInfoAccess
  • CA Issuers - URI:http://r13.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://r13.c.lencr.org/125.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:
  • F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7
  • Timestamp : Oct 25 08:38:14.712 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:A8:FE:AE:48:D9:D9:2C:88:77:76:58:
  • 89:8E:79:28:EF:82:36:0C:14:F8:BD:65:63:B3:98:29:
  • 98:B7:83:5F:01:02:21:00:E7:6F:F7:6E:74:50:EB:D1:
  • 61:D3:6B:84:37:50:BC:0D:66:D8:03:93:EA:56:3C:AD:
  • 05:97:D0:AD:00:6F:2D:2A
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
  • 5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
  • Timestamp : Oct 25 08:38:14.698 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:4B:18:10:2E:B6:80:18:5D:72:92:49:17:
  • EB:67:F0:D3:98:5E:91:EB:36:DF:C1:56:46:09:DD:D5:
  • B8:BE:7D:2E:02:20:05:3E:AE:E2:98:96:0D:47:4A:77:
  • 35:7D:27:4E:99:30:9D:9B:44:E4:68:87:EB:55:34:48:
  • A1:95:5F:2B:4E:73