SSL check results of rema-tec.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for rema-tec.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

Report created Mon, 25 May 2020 15:23:59 +0000

The mailservers of rema-tec.de can be reached through an encrypted connection.

However, we found problems that may affect the security.

Servers

Incoming Mails

These servers are responsible for incoming mails to @rema-tec.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
rdx.cnd-online.de
5.45.7.156
10
supported
rdx.cnd-online.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
13 s
rdx2.cnd-online.de
5.45.7.156
20
supported
rdx.cnd-online.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
13 s

Outgoing Mails

We have not received any emails from a @rema-tec.de address so far. Test mail delivery

Certificates

First seen at:

CN=rdx.cnd-online.de,OU=PositiveSSL,OU=Domain Control Validated

Certificate chain
Subject
Organizational Unit (OU)
  • Domain Control Validated
  • PositiveSSL
Common Name (CN)
  • rdx.cnd-online.de
Alternative Names
  • rdx.cnd-online.de
  • www.rdx.cnd-online.de
Issuer
Country (C)
  • GB
State (ST)
  • Greater Manchester
Locality (L)
  • Salford
Organization (O)
  • Sectigo Limited
Common Name (CN)
  • Sectigo RSA Domain Validation Secure Server CA
validity period
Not valid before
2019-01-16
Not valid after
2021-01-15
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
DF:27:BE:09:C2:1D:87:52:FE:35:4A:07:AE:A0:FD:80:AE:4D:E4:48:E9:F6:57:E0:D1:E0:0F:0A:A7:F2:81:B4
SHA1
13:98:45:33:18:AB:F4:25:2D:6B:A2:FB:95:C3:F4:20:45:D6:21:C6
X509v3 extensions
authorityKeyIdentifier
  • keyid:8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
subjectKeyIdentifier
  • B9:1C:B1:0F:64:8D:EF:F4:6E:7F:47:DD:6B:64:CD:17:EC:54:64:34
certificatePolicies
  • Policy: 1.3.6.1.4.1.6449.1.2.2.7
  • CPS: https://sectigo.com/CPS
  • Policy: 2.23.140.1.2.1
authorityInfoAccess
  • CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
  • OCSP - URI:http://ocsp.sectigo.com
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : BB:D9:DF:BC:1F:8A:71:B5:93:94:23:97:AA:92:7B:47:
  • 38:57:95:0A:AB:52:E8:1A:90:96:64:36:8E:1E:D1:85
  • Timestamp : Jan 16 00:04:34.396 2019 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:7F:94:D6:30:40:32:39:63:DC:70:66:FB:
  • BF:82:B3:0E:25:9A:B0:5B:41:7E:70:D5:92:47:8C:C8:
  • 7A:2F:93:67:02:21:00:AA:58:FD:F1:BE:F7:7C:E8:4E:
  • 0D:1D:CF:6C:24:81:E0:78:EF:C6:24:BD:5B:0C:96:EB:
  • CB:32:3C:0A:92:CF:48
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 44:94:65:2E:B0:EE:CE:AF:C4:40:07:D8:A8:FE:28:C0:
  • DA:E6:82:BE:D8:CB:31:B5:3F:D3:33:96:B5:B6:81:A8
  • Timestamp : Jan 16 00:04:34.462 2019 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:4A:FC:F1:F4:54:74:2B:88:8A:95:BF:53:
  • 45:FC:A2:A2:66:8D:96:B1:01:F7:B0:55:9F:A3:BD:E6:
  • 95:44:10:91:02:20:45:3C:C4:65:CA:03:64:DE:31:AA:
  • C0:55:9E:2C:4D:7F:DF:62:33:A4:C3:13:F2:3B:6E:01:
  • 28:14:22:0F:C3:C5
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 5C:DC:43:92:FE:E6:AB:45:44:B1:5E:9A:D4:56:E6:10:
  • 37:FB:D5:FA:47:DC:A1:73:94:B2:5E:E6:F6:C7:0E:CA
  • Timestamp : Jan 16 00:04:34.469 2019 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:3E:60:14:45:31:8F:01:57:4E:CF:13:F0:
  • 84:FD:5D:DC:AC:12:9A:17:0F:F2:57:94:7C:C2:07:23:
  • 71:D1:F1:67:02:21:00:B9:CE:D4:A6:C0:BD:5F:0C:0D:
  • C1:E7:45:E5:F9:7C:26:AA:A9:0C:1D:BB:29:E3:92:9F:
  • B2:B7:6E:70:02:C5:95