SSL-Tools

SSL check results of pfs-gd.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for pfs-gd.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Mon, 23 Sep 2024 00:30:38 +0000

The mailservers of pfs-gd.de can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @pfs-gd.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mx4.belwue.de
2001:7c0:0:76::4
 10
supported
mx1.belwue.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
1 s
mx4.belwue.de
2001:7c0:0:76::3
 10
supported
mx1.belwue.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
1 s
mx4.belwue.de
129.143.76.3
 10
supported
mx1.belwue.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
2 s
mx4.belwue.de
129.143.76.4
 10
supported
mx1.belwue.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
1 s

Outgoing Mails

We have not received any emails from a @pfs-gd.de address so far. Test mail delivery

Certificates

First seen at:

CN=mx1.belwue.de

Certificate chain
  • mx1.belwue.de
    • remaining
    • 2048 bit
    • sha256WithRSAEncryption
      • R10
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • mx1.belwue.de
Alternative Names
  • mail-in04.belwue.de
  • mx1.belwue.de
  • mx2.belwue.de
  • mx3.belwue.de
  • mx4.belwue.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R10
validity period
Not valid before
2024-07-31
Not valid after
2024-10-29
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
C4:5C:07:F9:70:0A:01:7A:8B:A7:45:6B:9D:56:2D:02:E5:71:57:EE:D5:52:36:CE:D9:FA:91:73:EA:AE:20:DA
SHA1
64:EC:19:F8:95:21:C2:6F:58:F4:3E:83:15:F6:82:4D:2D:44:56:4F
X509v3 extensions
subjectKeyIdentifier
  • 3C:44:1B:EA:A0:35:31:99:F1:85:CD:B7:D7:33:53:7B:E4:03:9C:E6
authorityKeyIdentifier
  • keyid:BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
authorityInfoAccess
  • OCSP - URI:http://r10.o.lencr.org
  • CA Issuers - URI:http://r10.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
  • ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
  • Timestamp : Jul 31 03:39:32.428 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:11:8F:9B:33:07:F5:9B:69:86:10:16:C1:
  • 98:C9:3B:8D:20:B7:80:97:D9:0B:F8:E7:C4:07:84:79:
  • 66:DE:21:40:02:20:1C:24:72:21:21:BB:F1:27:59:94:
  • 5A:27:72:D2:8E:D4:A7:C3:08:A9:59:86:BB:B4:CA:51:
  • CF:4A:7E:C4:B3:73
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
  • 4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
  • Timestamp : Jul 31 03:39:32.599 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:39:E9:77:80:86:23:53:6B:E3:DB:9E:62:
  • 8B:D0:3F:D1:93:E9:D9:C3:97:BF:13:81:8D:F0:9C:F8:
  • 42:4D:69:E1:02:20:78:E9:78:13:D3:2B:2B:04:44:D1:
  • 0A:E9:45:C1:B5:FD:70:B9:CB:F4:D4:3A:99:C5:25:4B:
  • E3:C6:47:6A:AB:E2
First seen at:

CN=mx1.belwue.de

Certificate chain
  • mx1.belwue.de
    • remaining
    • 2048 bit
    • sha256WithRSAEncryption
      • R11
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • mx1.belwue.de
Alternative Names
  • mail-in03.belwue.de
  • mx1.belwue.de
  • mx2.belwue.de
  • mx3.belwue.de
  • mx4.belwue.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R11
validity period
Not valid before
2024-08-30
Not valid after
2024-11-28
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
B5:C6:1C:AB:78:99:20:41:B7:59:09:5B:81:57:88:D6:93:D5:F8:9C:CB:56:16:FC:3E:EF:E8:D2:52:FB:E5:97
SHA1
AC:26:C6:49:A5:D1:42:8B:3D:6D:BB:EB:62:5D:68:CB:F8:B6:22:77
X509v3 extensions
subjectKeyIdentifier
  • 23:E8:00:F2:B6:75:BE:EF:2D:1A:91:3A:4F:DD:6C:34:B9:2C:3C:E5
authorityKeyIdentifier
  • keyid:C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
authorityInfoAccess
  • OCSP - URI:http://r11.o.lencr.org
  • CA Issuers - URI:http://r11.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
  • ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
  • Timestamp : Aug 30 03:21:40.693 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:64:54:80:52:66:FF:05:33:3F:F4:2D:AA:
  • 71:EA:7D:94:8F:A5:7C:68:B7:87:F3:85:17:B8:38:C5:
  • 3D:85:4E:88:02:21:00:DC:41:AD:01:79:4A:ED:DA:DD:
  • EA:17:4E:0B:BF:9A:BE:B3:4E:E3:74:8F:EB:27:EA:00:
  • C3:38:85:B8:E7:24:08
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 19:98:10:71:09:F0:D6:52:2E:30:80:D2:9E:3F:64:BB:
  • 83:6E:28:CC:F9:0F:52:8E:EE:DF:CE:4A:3F:16:B4:CA
  • Timestamp : Aug 30 03:21:40.662 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:FA:84:C3:F8:26:5E:AA:BB:C8:4E:81:
  • 95:DA:CF:98:0D:70:0B:AA:EB:7D:E5:D6:87:55:30:EC:
  • C8:F8:57:1B:8C:02:20:17:25:F6:82:68:0C:39:96:07:
  • 3D:8C:0B:D2:20:C5:84:1E:12:00:94:2A:27:E7:32:26:
  • E6:BA:B4:56:9C:26:63