mail.mk-homelab.net - TLS / STARTTLS Test

Discover if the mail servers for mail.mk-homelab.net can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Wed, 30 Oct 2024 21:40:39 +0000

Certificates

Trustworthy
Protocol

Secure
DANE

Valid

The mailservers of mail.mk-homelab.net can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @mail.mk-homelab.net addresses.

Hostname / IP address	Priority	STARTTLS	Certificates	Protocol
mail.mk-homelab.net 91.107.233.128	-	supported	mail.mk-homelab.net	DANE valid PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 ~~SSLv3~~	2024-10-30 4 s
mail.mk-homelab.net 2a01:4f8:1c1b:4940::1	-	supported	mail.mk-homelab.net	DANE valid PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 ~~SSLv3~~	2024-10-30 8 s

Outgoing Mails

We have not received any emails from a @mail.mk-homelab.net address so far. Test mail delivery

Certificates

First seen at: 2024-10-30

CN=mail.mk-homelab.net

Certificate chain

mail.mk-homelab.net
- 2024-12-19 remaining
- 4096 bit
- sha256WithRSAEncryption

Subject

Common Name (CN)

mail.mk-homelab.net

Alternative Names

autoconfig.mk-homelab.net
autodiscover.mk-homelab.net
mail.mk-homelab.net
mta-sts.mk-homelab.net

Issuer

Country (C)

Organization (O)

Let's Encrypt

Common Name (CN)

validity period

Not valid before: 2024-09-20
Not valid after: 2024-12-19

This certifcate has been verified for the following usages:

Digital Signature
Key Encipherment
TLS Web Server Authentication
TLS Web Client Authentication

Fingerprints

SHA256: 27:19:3C:F6:0C:FA:34:F7:AA:79:F8:C6:DD:56:D7:23:23:8B:E8:4D:88:C2:75:FB:96:D8:BC:8C:6B:D8:E1:93
SHA1: 1A:F2:BE:F2:BF:4A:8E:83:B7:54:5D:70:4F:E2:07:15:6F:5C:45:C0

X509v3 extensions

subjectKeyIdentifier

22:EF:12:3C:0B:B9:10:A7:3E:3C:FC:EC:32:C0:82:B6:C0:93:A5:19

authorityKeyIdentifier

keyid:BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8

authorityInfoAccess

OCSP - URI:http://r10.o.lencr.org
CA Issuers - URI:http://r10.i.lencr.org/

certificatePolicies

Policy: 2.23.140.1.2.1

ct_precert_scts

Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
Timestamp : Sep 20 14:55:27.721 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:9C:69:71:B8:1B:A4:6B:26:AF:46:D8:
6D:CC:61:06:CE:BB:CD:DB:32:08:1A:FB:92:7E:56:88:
AE:DB:E3:A2:7E:02:21:00:BA:D7:4B:89:83:9C:05:E9:
1C:67:39:8D:7E:3A:B2:27:4D:3F:48:94:3B:0B:D7:AC:
00:7D:FE:59:9C:E9:9E:DF
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
Timestamp : Sep 20 14:55:27.917 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:92:8E:24:4D:70:8E:34:AC:44:11:0A:
D8:A5:D0:D2:13:D6:80:8A:23:E3:2F:18:52:03:42:9B:
F8:12:3A:BE:68:02:20:75:15:94:44:01:AF:9C:A2:23:
37:F3:3C:82:02:CC:70:8F:87:E6:A9:ED:04:72:98:5A:
D5:3F:EB:09:8E:D4:78

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name	Options	DNSSEC	Matches
_25._tcp.mail.mk-homelab.net	DANE-EE: Domain Issued Certificate Use subject public key SHA-256 Hash	valid	valid

SSL check results of mail.mk-homelab.net