SSL check results of netcup.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for netcup.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Sat, 14 May 2022 09:49:17 +0000

We can not guarantee a secure connection to the mailservers of netcup.de!

Please contact the operator of netcup.de and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/netcup.de

Servers

Incoming Mails

These servers are responsible for incoming mails to @netcup.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
smtp.netcup.net
2a03:4000:0:1::e1aa
10
supported
*.netcup.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
supported
  • ECDHE_RSA_WITH_RC4_128_SHA
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
11 s
smtp.netcup.net
46.38.225.170
10
supported
*.netcup.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
supported
  • ECDHE_RSA_WITH_RC4_128_SHA
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
11 s
backupmx-fra1.netcup.net
2a03:4001:0:104::29
Results incomplete
20 not checked
DANE
missing
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
11 s
backupmx-fra1.netcup.net
188.68.63.41
20
supported
*.netcup.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
supported
  • ECDHE_RSA_WITH_RC4_128_SHA
  • SSL_RSA_WITH_RC4_128_SHA
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
11 s

Outgoing Mails

We have not received any emails from a @netcup.de address so far. Test mail delivery

Certificates

First seen at:

CN=*.netcup.net

Certificate chain
Subject
Common Name (CN)
  • *.netcup.net
Alternative Names
  • *.netcup.net
  • netcup.net
Issuer
Country (C)
  • US
Organization (O)
  • DigiCert Inc
Common Name (CN)
  • RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1
validity period
Not valid before
2021-10-25
Not valid after
2022-10-25
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
DD:91:63:39:0D:BF:2C:7B:CD:35:88:5B:65:0E:22:DC:40:4E:17:79:93:3E:97:F5:A2:56:47:96:13:1D:C9:E1
SHA1
D7:D2:C9:DC:36:C2:6E:A9:1B:15:64:18:44:AA:2C:17:09:3E:81:93
X509v3 extensions
authorityKeyIdentifier
  • keyid:A4:8D:E5:BE:7C:79:E4:70:23:6D:2E:29:34:AD:23:58:DC:F5:31:7F
subjectKeyIdentifier
  • EA:D7:B6:20:A8:5D:53:51:0D:5B:24:EB:07:67:13:21:0A:BD:2F:E4
crlDistributionPoints
  • Full Name:
  • URI:http://crl3.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl
  • Full Name:
  • URI:http://crl4.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl
certificatePolicies
  • Policy: 2.23.140.1.2.1
  • CPS: http://www.digicert.com/CPS
authorityInfoAccess
  • OCSP - URI:http://ocsp.digicert.com
  • CA Issuers - URI:http://cacerts.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crt
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 29:79:BE:F0:9E:39:39:21:F0:56:73:9F:63:A5:77:E5:
  • BE:57:7D:9C:60:0A:F8:F9:4D:5D:26:5C:25:5D:C7:84
  • Timestamp : Oct 25 15:45:44.136 2021 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:85:A4:07:C8:25:74:7E:FD:C5:E8:0E:
  • 0E:18:01:C6:F0:BE:D4:DE:4C:AD:57:ED:DE:B8:CF:4D:
  • FD:C8:8D:A0:2C:02:21:00:B6:B2:F6:C1:B4:CC:D6:69:
  • D0:A1:17:EB:44:3D:FC:38:BC:36:BF:63:BD:B4:76:82:
  • F8:0F:B0:A5:11:42:BC:A6
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 51:A3:B0:F5:FD:01:79:9C:56:6D:B8:37:78:8F:0C:A4:
  • 7A:CC:1B:27:CB:F7:9E:88:42:9A:0D:FE:D4:8B:05:E5
  • Timestamp : Oct 25 15:45:44.189 2021 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:1C:37:E7:DA:4B:12:3F:32:DF:71:CB:F6:
  • 8B:7E:3F:9C:38:F8:36:55:AC:B5:F4:98:4A:3D:8B:B9:
  • FE:BE:DD:5E:02:21:00:EF:CF:E3:D4:21:36:3A:D0:83:
  • 04:60:25:57:40:8A:22:86:AE:00:04:DE:32:C2:51:7D:
  • 64:82:66:53:A0:A4:74
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 41:C8:CA:B1:DF:22:46:4A:10:C6:A1:3A:09:42:87:5E:
  • 4E:31:8B:1B:03:EB:EB:4B:C7:68:F0:90:62:96:06:F6
  • Timestamp : Oct 25 15:45:44.152 2021 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:60:9D:39:44:D8:1F:37:1C:28:19:EF:80:
  • 4D:4F:E5:CB:09:85:54:50:67:94:50:D2:97:46:D0:93:
  • 54:DB:11:DF:02:20:4A:AA:B3:A6:97:D4:36:EF:14:1C:
  • 44:6B:79:2C:0C:3B:5E:95:F7:9F:02:F0:91:87:0D:E3:
  • 96:55:55:52:B8:CA