SSL check results of mailcert.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for mailcert.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Sat, 15 Feb 2025 16:54:02 +0000

The mailservers of mailcert.de can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @mailcert.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.mailcert.de
82.165.51.116
10
supported
mail.mailcert.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
8 s

Outgoing Mails

We have not received any emails from a @mailcert.de address so far. Test mail delivery

Certificates

First seen at:

CN=mail.mailcert.de

Certificate chain
  • mail.mailcert.de
    • remaining
    • 256 bit
    • ecdsa-with-SHA384

      • E6
        • remaining
        • 384 bit
        • sha256WithRSAEncryption

          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption

Subject
Common Name (CN)
  • mail.mailcert.de
Alternative Names
  • mail.mailcert.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • E6
validity period
Not valid before
2025-02-05
Not valid after
2025-05-06
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
75:1B:E0:EA:8E:54:1D:B4:61:2C:8C:4D:CB:79:37:6D:98:FD:56:45:97:DC:E6:AC:B7:C6:C0:9E:BF:8D:4B:05
SHA1
8C:7B:33:B0:FD:5F:8E:93:4D:25:DC:04:3F:D3:B9:1A:F8:65:1E:17
X509v3 extensions
subjectKeyIdentifier
  • 02:97:5A:CB:8F:2C:CD:CA:A5:F1:E9:85:4B:5E:77:AD:0E:25:5E:28
authorityKeyIdentifier
  • keyid:93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
authorityInfoAccess
  • OCSP - URI:http://e6.o.lencr.org
  • CA Issuers - URI:http://e6.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
  • 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
  • Timestamp : Feb 5 21:47:22.510 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:C4:13:23:98:F6:D8:CA:55:91:E6:38:
  • 83:01:14:82:A9:03:48:8B:6C:41:3E:DB:D7:1D:BC:26:
  • 93:FF:D8:4C:DE:02:21:00:DC:AC:0B:F0:61:48:A8:35:
  • 2A:37:87:AC:DF:3B:78:6F:1F:A2:22:46:30:A7:67:4E:
  • 00:68:5D:8C:BD:E9:8F:FF
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
  • 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
  • Timestamp : Feb 5 21:47:22.614 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:84:D2:8E:C9:32:D1:44:9C:4A:61:45:
  • 3E:6C:80:C6:5E:A5:71:1F:36:84:1C:17:B7:87:DE:6F:
  • C8:53:7D:93:6A:02:20:36:86:77:63:A4:7D:79:37:7D:
  • D1:16:00:89:15:79:1C:5A:5A:99:32:B1:64:6A:57:19:
  • 53:3D:17:9F:4D:22:99