SSL-Tools

SSL check results of mail.twnk.diy

NEW You can also bulk check multiple servers.

Discover if the mail servers for mail.twnk.diy can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Sat, 27 Jul 2024 00:30:56 +0000

The mailservers of mail.twnk.diy can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @mail.twnk.diy addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.twnk.diy
137.66.5.253
 -
supported
twnkmail.fly.dev
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mail.twnk.diy
2a09:8280:1::3c:88c8:0
 -
supported
twnkmail.fly.dev
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s

Outgoing Mails

We have not received any emails from a @mail.twnk.diy address so far. Test mail delivery

Certificates

First seen at:

CN=twnkmail.fly.dev

Certificate chain
  • twnkmail.fly.dev
    • remaining
    • 256 bit
    • ecdsa-with-SHA384
      • E6
        • remaining
        • 384 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • twnkmail.fly.dev
Alternative Names
  • mail.twnk.dev
  • mail.twnk.diy
  • twnkmail.fly.dev
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • E6
validity period
Not valid before
2024-07-23
Not valid after
2024-10-21
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
86:83:B5:82:44:E6:6F:86:E1:75:FA:E8:A8:15:85:F1:9B:AF:1E:D2:8E:B7:AB:48:38:4C:97:15:61:F8:93:27
SHA1
28:70:DA:EE:FD:4E:3D:8E:21:A5:CF:4B:6E:4D:A0:82:67:4D:76:40
X509v3 extensions
subjectKeyIdentifier
  • 26:0E:F2:01:81:C6:44:86:83:65:84:F5:60:69:F0:9B:4A:E0:AD:D0
authorityKeyIdentifier
  • keyid:93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
authorityInfoAccess
  • OCSP - URI:http://e6.o.lencr.org
  • CA Issuers - URI:http://e6.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
  • 1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
  • Timestamp : Jul 23 11:21:25.874 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:B3:F2:31:5D:F4:B3:F2:A0:75:9C:9B:
  • D2:68:3C:6F:13:F3:3D:32:C2:B2:99:3A:F1:9D:B0:7C:
  • 6A:04:16:0B:8F:02:21:00:B8:01:F2:F0:33:74:F2:16:
  • 68:00:5B:CD:97:99:12:F0:1C:83:5B:F1:22:EA:3D:50:
  • 6C:56:51:FB:FF:4D:7C:00
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
  • B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
  • Timestamp : Jul 23 11:21:25.922 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:6B:E4:A1:F8:22:E9:85:59:B1:22:52:73:
  • FF:C9:39:00:5E:61:7C:78:01:C1:D8:D1:2E:2F:9A:C8:
  • E9:63:AA:23:02:21:00:C8:69:85:3F:6E:AD:54:FF:E2:
  • BE:74:17:05:4D:1C:FD:16:93:A6:4A:9C:E9:8C:67:94:
  • 72:EE:72:F0:41:E7:F5