mailcow.de - TLS / STARTTLS Test

Discover if the mail servers for mailcow.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Mon, 01 Apr 2024 00:03:05 +0000

Certificates

Trustworthy
Protocol

Secure
DANE

Valid

The mailservers of mailcow.de can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @mailcow.de addresses.

Hostname / IP address	Priority	STARTTLS	Certificates	Protocol
hosted.mailcow.de 2a00:f820:417::202	0	supported	archiv.mailcow.de	DANE valid PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-04-01 2 s
hosted.mailcow.de 5.1.76.202	0	supported	archiv.mailcow.de	DANE valid PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2024-04-01 2 s

Outgoing Mails

We have not received any emails from a @mailcow.de address so far. Test mail delivery

Certificates

First seen at: 2024-04-01

CN=archiv.mailcow.de

Certificate chain

archiv.mailcow.de
- 2024-06-07 remaining
- 4096 bit
- sha256WithRSAEncryption

Subject

Common Name (CN)

archiv.mailcow.de

Alternative Names

archiv.mailcow.de
archive.mailcow.de
autoconfig.mailcow.de
autodiscover.mailcow.de
hosted.mailcow.de
mailcow.de
sogo.mailcow.de
webmail.mailcow.de
www.mailcow.de

Issuer

Country (C)

Organization (O)

Let's Encrypt

Common Name (CN)

validity period

Not valid before: 2024-03-09
Not valid after: 2024-06-07

This certifcate has been verified for the following usages:

Digital Signature
Key Encipherment
TLS Web Server Authentication
TLS Web Client Authentication

Fingerprints

SHA256: 5A:27:2A:62:55:E2:EE:AC:ED:5B:91:31:4C:B5:8F:5E:B8:06:0C:05:7F:55:4F:5B:56:07:21:9D:8E:41:40:CC
SHA1: 5E:D8:6E:CB:56:25:A4:D5:38:DC:A0:22:26:4E:E1:F7:74:36:E1:FF

X509v3 extensions

subjectKeyIdentifier

FE:76:1C:C4:76:B1:CF:12:7E:CC:4E:36:CB:0F:AA:63:B2:CE:A0:E0

authorityKeyIdentifier

keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6

authorityInfoAccess

OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/

certificatePolicies

Policy: 2.23.140.1.2.1

ct_precert_scts

Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : Mar 9 23:00:50.763 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:40:1E:8E:69:02:9F:12:09:47:8F:C2:43:
07:B2:AE:09:90:E9:8A:9F:4C:8F:A4:BC:39:62:A2:68:
D2:56:D0:A2:02:21:00:B5:55:81:8E:51:11:A5:4F:9E:
89:AB:34:4E:42:D4:29:03:5D:38:92:FB:FB:8B:27:CC:
6E:69:AF:AA:DD:C4:D7
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
Timestamp : Mar 9 23:00:51.345 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:C5:FB:71:69:09:5D:35:69:A1:89:70:
E0:18:B3:2D:DC:6C:FA:50:03:9D:61:7E:43:B9:9B:E9:
15:F0:C6:4A:44:02:20:1D:C4:64:2D:38:D5:0A:03:38:
ED:E8:19:96:CA:25:98:24:9F:58:3D:E9:A3:73:FF:45:
31:9D:BF:57:40:73:4E

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name	Options	DNSSEC	Matches
_25._tcp.hosted.mailcow.de	DANE-EE: Domain Issued Certificate Use subject public key SHA-256 Hash	valid	—
_25._tcp.hosted.mailcow.de	DANE-EE: Domain Issued Certificate Use subject public key SHA-256 Hash	valid	valid

SSL check results of mailcow.de