SSL-Tools

SSL check results of netbit.com.br

NEW You can also bulk check multiple servers.

Discover if the mail servers for netbit.com.br can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Tue, 16 Apr 2024 15:31:13 +0000

The mailservers of netbit.com.br can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @netbit.com.br addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.netbit.com.br
2604:4500:0:50d::6
 10
supported
netbit.com.br
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
5 s
mail.netbit.com.br
96.31.76.230
 10
supported
netbit.com.br
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
6 s

Outgoing Mails

We have not received any emails from a @netbit.com.br address so far. Test mail delivery

Certificates

First seen at:

CN=netbit.com.br

Certificate chain
  • netbit.com.br
    • remaining
    • 256 bit
    • sha256WithRSAEncryption
      • R3
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • netbit.com.br
Alternative Names
  • *.netbit.com.br
  • netbit.com.br
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R3
validity period
Not valid before
2024-04-16
Not valid after
2024-07-15
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
F7:F4:0B:54:8B:01:06:0C:A2:83:33:57:F6:18:F7:C3:DD:7F:34:7B:C5:48:F9:95:D6:4A:3A:D0:F1:60:3E:4D
SHA1
14:67:9D:A3:AD:A1:25:F4:87:1B:53:D1:79:CD:9A:D5:93:97:12:75
X509v3 extensions
subjectKeyIdentifier
  • 27:42:5D:BA:20:B5:DB:3B:BE:80:8B:33:0C:7B:5C:6F:BA:52:AB:1F
authorityKeyIdentifier
  • keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
  • OCSP - URI:http://r3.o.lencr.org
  • CA Issuers - URI:http://r3.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
  • ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
  • Timestamp : Apr 16 15:29:46.007 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:17:B6:AE:BB:46:0E:70:73:D2:04:19:8A:
  • 26:38:71:3C:78:AD:FE:FA:28:CF:67:50:5D:16:C3:F1:
  • 19:51:C2:12:02:20:20:A2:EC:C2:35:9F:BE:E4:36:0A:
  • 07:57:A4:01:59:BF:72:66:CE:0B:A9:F1:B0:E8:48:F1:
  • EB:8C:A2:50:12:6B
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
  • 1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
  • Timestamp : Apr 16 15:29:46.009 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:D2:A9:33:3D:8D:E6:CF:41:97:62:38:
  • EA:4C:A6:2C:3B:89:B6:C2:DC:59:6A:08:6E:93:5D:FF:
  • 9B:44:68:48:7C:02:20:43:80:EB:91:40:A5:C2:2E:18:
  • 3E:99:FB:17:01:22:DF:63:A8:DF:A0:85:BA:70:68:91:
  • C8:0E:56:14:28:6D:4B

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.mail.netbit.com.br
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.mail.netbit.com.br
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
valid