SSL-Tools

SSL check results of qua.nz

NEW You can also bulk check multiple servers.

Discover if the mail servers for qua.nz can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Sat, 22 Aug 2026 20:34:45 +0000

The mailservers of qua.nz can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @qua.nz addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mx01.mail.icloud.com
17.57.156.30
 10
supported
mx01.mail.icloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
5 s
mx01.mail.icloud.com
17.42.251.62
 10
supported
mx01.mail.icloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
5 s
mx01.mail.icloud.com
17.57.154.33
 10
supported
mx01.mail.icloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
6 s
mx01.mail.icloud.com
17.57.155.25
 10
supported
mx01.mail.icloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
4 s
mx01.mail.icloud.com
17.56.9.31
 10
supported
mx01.mail.icloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
6 s
mx01.mail.icloud.com
17.57.152.5
 10
supported
mx01.mail.icloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
6 s
mx02.mail.icloud.com
17.57.154.33
 10
supported
mx01.mail.icloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
6 s
mx02.mail.icloud.com
17.42.251.62
 10
supported
mx01.mail.icloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
5 s
mx02.mail.icloud.com
17.57.155.25
 10
supported
mx01.mail.icloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
4 s
mx02.mail.icloud.com
17.57.152.5
 10
supported
mx01.mail.icloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
6 s
mx02.mail.icloud.com
17.57.156.30
 10
supported
mx01.mail.icloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
4 s
mx02.mail.icloud.com
17.56.9.31
 10
supported
mx01.mail.icloud.com
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
6 s

Outgoing Mails

We have not received any emails from a @qua.nz address so far. Test mail delivery

Certificates

First seen at:

CN=mx01.mail.icloud.com,O=Apple Inc.,ST=California,C=US

Certificate chain
Subject
Country (C)
  • US
State (ST)
  • California
Organization (O)
  • Apple Inc.
Common Name (CN)
  • mx01.mail.icloud.com
Alternative Names
  • mx02.mail.icloud.com
  • mx01.mail.icloud.com
  • mx3.mail.icloud.com
Issuer
Common Name (CN)
  • Apple Public Server RSA CA 11 - G1
Organization (O)
  • Apple Inc.
State (ST)
  • California
Country (C)
  • US
validity period
Not valid before
2026-06-25
Not valid after
2026-09-17
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
Fingerprints
SHA256
70:51:D4:FC:40:1B:B9:28:AE:41:EF:66:CE:DE:6C:50:DB:5C:EF:D7:90:6B:B1:57:12:DF:D8:BD:0B:E8:3D:AF
SHA1
18:F2:CB:3F:7D:37:05:EC:86:ED:A8:90:01:37:D0:A5:DA:91:1B:85
X509v3 extensions
authorityKeyIdentifier
  • keyid:50:02:B8:13:2C:15:83:D1:41:C3:11:8A:8B:42:3B:01:23:43:A9:56
authorityInfoAccess
  • CA Issuers - URI:http://certs.apple.com/apsrsaca11g1.der
  • OCSP - URI:http://ocsp.apple.com/ocsp03-apsrsaca11g1
certificatePolicies
  • Policy: 2.23.140.1.2.2
  • CPS: https://www.apple.com/certificateauthority/public
  • Policy: 1.2.840.113635.100.5.11.4
crlDistributionPoints
  • Full Name:
  • URI:http://crl.apple.com/apsrsaca11g1.crl
subjectKeyIdentifier
  • 85:01:49:05:19:87:0B:5C:3B:19:D2:BD:F3:57:8F:EC:9C:E4:C5:FB
1_2_840_113635_100_6_86
  • ..
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65:
  • 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8
  • Timestamp : Jun 25 00:29:45.755 2026 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:56:BF:A7:4C:64:47:31:B2:48:B9:0E:80:
  • 36:5E:DF:F7:D4:36:85:31:5C:FC:F6:71:0E:44:50:3F:
  • 7F:6A:D0:0F:02:20:60:AE:D0:D9:91:63:91:44:B8:D1:
  • 7D:8A:92:38:E9:63:6A:26:DE:C3:49:F1:FC:8B:25:43:
  • BC:57:E7:A9:FE:80
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:
  • E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A
  • Timestamp : Jun 25 00:29:45.783 2026 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:9E:48:61:1E:4B:EE:87:32:D1:54:01:
  • EA:31:89:FE:8C:60:CB:95:73:7F:95:41:48:2E:B0:30:
  • E5:01:FD:B4:1D:02:21:00:BC:16:F8:6E:9D:4B:A7:77:
  • E1:50:5F:4C:41:B1:92:95:55:FD:D6:C2:9F:54:92:65:
  • 7E:28:E0:84:CE:70:18:27
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:
  • 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77
  • Timestamp : Jun 25 00:29:45.736 2026 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:0F:AA:8D:B0:57:95:09:2A:06:E5:EB:A9:
  • 05:37:08:B5:7F:ED:3E:C8:01:E3:26:D9:F8:19:B2:A2:
  • 55:EE:2F:5F:02:21:00:DE:30:BA:90:DD:1E:C1:FA:4F:
  • F8:97:67:0E:64:55:35:E8:9E:CE:E5:0F:3B:01:09:18:
  • 33:D4:E6:E7:45:86:73
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:
  • F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7
  • Timestamp : Jun 25 00:29:45.746 2026 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:8D:EB:F3:DC:CA:8A:99:83:92:D3:26:
  • 7E:8A:20:3B:D2:E8:69:12:9F:A4:E5:34:64:FB:08:34:
  • F8:4E:96:F2:0F:02:21:00:B1:78:75:17:59:A8:4C:4E:
  • 75:EB:6B:E7:43:87:1E:37:DC:8E:51:BF:26:55:8B:A9:
  • 01:D7:23:97:5B:EE:9C:43