mx20.servizisicuri.it - TLS / STARTTLS Test

Discover if the mail servers for mx20.servizisicuri.it can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Sat, 05 Sep 2026 00:30:47 +0000

Certificates

Trustworthy
Protocol

Secure
DANE

Valid

The mailservers of mx20.servizisicuri.it can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @mx20.servizisicuri.it addresses.

Hostname / IP address	Priority	STARTTLS	Certificates	Protocol
mx20.servizisicuri.it 94.33.2.64	-	supported	*.servizisicuri.it	DANE valid PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 ~~SSLv3~~	2026-09-05 2 s

Outgoing Mails

We have not received any emails from a @mx20.servizisicuri.it address so far. Test mail delivery

Certificates

First seen at: 2026-08-17

CN=*.servizisicuri.it

Certificate chain

*.servizisicuri.it
- 2027-02-02 remaining
- 2048 bit
- sha256WithRSAEncryption

Subject

Common Name (CN)

*.servizisicuri.it

Alternative Names

*.servizisicuri.it
servizisicuri.it

Issuer

Country (C)

Organization (O)

CentralNic Luxembourg Sàrl

Common Name (CN)

GlobeSSL DV CA

validity period

Not valid before: 2026-02-01
Not valid after: 2027-02-02

This certifcate has been verified for the following usages:

Digital Signature
Key Encipherment
TLS Web Server Authentication

Fingerprints

SHA256: AF:E4:03:8F:FE:CC:C5:01:76:F0:93:66:7A:CE:D9:A6:30:C4:FA:5E:7F:02:3F:70:73:5F:44:41:86:14:A2:EF
SHA1: 71:7D:21:28:CE:22:B5:3E:39:89:38:8C:38:89:1C:45:28:88:33:B6

X509v3 extensions

authorityKeyIdentifier

keyid:FD:9E:22:F8:7A:C8:E8:79:7E:53:7D:43:9A:61:DE:BF:DB:0F:1D:09

subjectKeyIdentifier

5A:AF:F5:85:B2:32:FB:C6:B9:1E:AD:F4:11:75:B9:56:8A:0B:68:6E

certificatePolicies

Policy: 1.3.6.1.4.1.6449.1.2.2.27
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1

authorityInfoAccess

CA Issuers - URI:http://globessl.crt.sectigo.com/GlobeSSLDVCA.crt
OCSP - URI:http://globessl.ocsp.sectigo.com

ct_precert_scts

Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD:
DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F
Timestamp : Feb 1 09:25:48.352 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:D9:77:99:FC:B0:58:CB:B5:2E:FF:F9:
76:D5:BF:93:95:14:E4:01:D2:F1:D5:8B:0C:18:2F:69:
0E:FA:84:1A:D6:02:20:7A:A4:CC:17:A1:A3:0B:E2:2B:
4D:53:3B:24:85:13:13:8A:6F:32:EA:CB:7C:33:27:87:
73:AB:0C:C2:03:E3:26
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46:
FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8
Timestamp : Feb 1 09:25:49.185 2026 GMT
Extensions: 00:00:05:00:02:2B:40:A0
Signature : ecdsa-with-SHA256
30:45:02:21:00:89:C1:58:A9:38:16:9A:8D:4B:72:2D:
C9:AF:13:26:75:1A:BE:DD:EF:92:96:F6:76:AB:EF:66:
33:E3:F1:DA:71:02:20:7A:9D:1A:76:F3:F1:2C:77:E6:
14:AC:85:FC:98:DA:A0:71:54:52:6D:AF:E6:95:57:5F:
2C:88:A3:EB:54:BC:D4
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90:
4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59
Timestamp : Feb 1 09:25:48.834 2026 GMT
Extensions: 00:00:05:00:00:1F:5B:67
Signature : ecdsa-with-SHA256
30:45:02:21:00:EB:06:F0:7B:F9:4C:F5:7C:02:FC:B4:
B5:83:7A:F5:60:A8:73:E9:BC:CC:1F:AF:53:3A:AE:10:
F5:B0:6D:34:3E:02:20:5F:DC:8B:6F:40:41:9D:86:A2:
94:75:5A:76:BF:35:0F:67:CC:13:C9:69:96:7C:E3:DA:
03:A5:90:3A:A1:C0:CF

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name	Options	DNSSEC	Matches
_25._tcp.mx20.servizisicuri.it	DANE-EE: Domain Issued Certificate Use subject public key SHA-256 Hash	valid	valid

SSL check results of mx20.servizisicuri.it