SSL-Tools

SSL check results of ninakiel.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for ninakiel.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Sat, 10 Oct 2026 00:31:35 +0000

The mailservers of ninakiel.de can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @ninakiel.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.ninakiel.de
2a01:4f8:fff2:a1:1::3
 20
supported
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
7 s
mail.ninakiel.de
94.130.221.105
 20
supported
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
7 s

Outgoing Mails

We have not received any emails from a @ninakiel.de address so far. Test mail delivery

Certificates

First seen at:

Certificate chain
    • remaining
    • 256 bit
    • ecdsa-with-SHA384
      • YE1
        • remaining
        • 384 bit
        • ecdsa-with-SHA384
          • Root YE
            • remaining
            • 384 bit
            • ecdsa-with-SHA384
              • ISRG Root X2 (Certificate is self-signed.)
                • remaining
                • 384 bit
                • ecdsa-with-SHA384
Subject
Alternative Names
  • mail.danielmarohn.de
  • mail.littleroot.de
  • mail.ninakiel.de
  • IP Address:2A01:4F8:FFF2:A1:1:0:0:3
  • IP Address:94.130.221.105
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • YE1
validity period
Not valid before
2026-10-07
Not valid after
2026-10-13
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
Fingerprints
SHA256
14:9E:77:A8:20:52:63:A0:FE:D4:2C:1A:22:BB:2A:1D:36:19:68:37:0B:A9:87:8B:C0:68:E5:0D:F2:39:2E:D3
SHA1
F5:2D:77:B8:1D:8F:D1:31:37:36:A6:1A:7E:F6:09:D5:10:52:FA:AC
X509v3 extensions
authorityKeyIdentifier
  • keyid:BB:20:CA:47:0B:FE:D7:E5:9C:F9:8F:09:2A:A3:8C:37:45:B1:BC:D8
authorityInfoAccess
  • CA Issuers - URI:http://ye1.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://ye1.c.lencr.org/98.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:
  • C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD
  • Timestamp : Oct 7 01:03:20.299 2026 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:C2:72:42:EA:88:EE:77:82:AA:70:FE:
  • 62:58:ED:2B:6B:AB:75:83:BA:62:A3:B5:A9:18:B2:A9:
  • 53:53:05:0E:E9:02:20:0B:10:62:2D:CA:86:D9:F9:0D:
  • 4E:4C:87:F6:D4:58:93:8F:F8:63:82:53:D8:32:14:B9:
  • 08:B5:A9:8E:A2:E2:A7
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 46:AF:86:3D:3B:3E:E5:9F:A5:77:DE:A8:24:5D:36:B0:
  • D9:ED:22:A2:23:F4:61:77:41:22:94:52:EE:95:50:5F
  • Timestamp : Oct 7 01:03:20.535 2026 GMT
  • Extensions: 00:00:05:00:3A:87:FC:ED
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:9C:94:D4:2D:0C:F3:F0:F9:4F:80:21:
  • A9:61:5A:0A:4B:A6:3E:FC:EF:AA:D7:E4:C1:F5:98:C0:
  • 35:C5:0C:0B:A5:02:20:59:16:44:6D:43:71:17:78:5A:
  • 0B:C0:40:ED:D2:E9:26:08:2E:B9:57:33:A8:49:CC:2A:
  • B6:CF:CF:1F:EA:7E:51