SSL-Tools

SSL check results of saar-pfalz-garage.de

NEW You can also bulk check multiple servers.

Discover if the mail servers for saar-pfalz-garage.de can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Mon, 01 Jun 2026 07:39:20 +0000

We can not guarantee a secure connection to the mailservers of saar-pfalz-garage.de!

Please contact the operator of saar-pfalz-garage.de and ask him or her to solve this problem. This result stays accessible under the following address:

/mailservers/saar-pfalz-garage.de

Servers

Incoming Mails

These servers are responsible for incoming mails to @saar-pfalz-garage.de addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mx.saar-pfalz-garage.de
2a02:420::15:185:146:236:75
 5
supported
mx.saar-pfalz-garage.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
8 s
mx.saar-pfalz-garage.de
185.146.236.75
 5
supported
mx.saar-pfalz-garage.de
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
8 s
relay1.inexio.net
2a01:5c0:0:4::204
Results incomplete
10
unsupported
not checked
DANE
errors
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
1 s
relay1.inexio.net
131.117.148.204
Results incomplete
10
supported
relay1.inexio.net
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
relay2.inexio.net
2a01:5c0:0:5::140
Results incomplete
10
unsupported
not checked
DANE
errors
PFS
not checked
Heartbleed
not checked
Weak ciphers
not checked
1 s
relay2.inexio.net
131.117.148.140
Results incomplete
10
supported
relay2.inexio.net
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s

Outgoing Mails

We have not received any emails from a @saar-pfalz-garage.de address so far. Test mail delivery

Certificates

First seen at:

CN=relay1.inexio.net

Certificate chain
Subject
Common Name (CN)
  • relay1.inexio.net
Alternative Names
  • relay1.inexio.net
  • www.relay1.inexio.net
Issuer
Country (C)
  • US
Organization (O)
  • DigiCert Inc
Organizational Unit (OU)
  • www.digicert.com
Common Name (CN)
  • RapidSSL TLS RSA CA G1
validity period
Not valid before
2025-11-25
Not valid after
2026-11-24
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
Fingerprints
SHA256
2C:4B:2C:02:AE:DD:54:95:EE:63:AE:4B:FA:9A:9D:41:8D:E4:09:7A:8F:7E:62:86:DD:F4:86:C8:44:3A:C4:5D
SHA1
FC:C8:6D:93:71:04:63:F7:67:36:F8:18:CA:70:8B:4E:FF:DE:1F:C0
X509v3 extensions
authorityKeyIdentifier
  • keyid:0C:DB:6C:82:49:0F:4A:67:0A:B8:14:EE:7A:C4:48:52:88:EB:56:38
subjectKeyIdentifier
  • D9:A9:FA:CA:89:53:9A:A8:D8:4F:61:66:18:5F:78:BE:CB:6D:07:5E
certificatePolicies
  • Policy: 2.23.140.1.2.1
  • CPS: http://www.digicert.com/CPS
crlDistributionPoints
  • Full Name:
  • URI:http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl
authorityInfoAccess
  • OCSP - URI:http://status.rapidssl.com
  • CA Issuers - URI:http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:
  • C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD
  • Timestamp : Nov 25 15:22:09.659 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:95:D8:44:91:9B:C2:51:DE:8A:46:55:
  • A1:77:BA:F5:EF:F9:26:24:7A:72:47:AD:34:7F:CE:FF:
  • FF:D5:3D:50:8C:02:21:00:F6:3E:25:1D:95:1F:41:6E:
  • D9:3D:66:27:03:8C:CD:38:86:DD:17:FD:49:80:4D:55:
  • 00:7E:5E:B6:E4:37:74:B3
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:
  • E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A
  • Timestamp : Nov 25 15:22:09.654 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:FD:25:A3:F5:65:A0:81:53:1C:F9:0F:
  • F0:A6:31:9A:F7:99:AA:05:8A:B5:CE:10:95:08:17:F8:
  • 5A:78:16:20:96:02:20:4E:3D:F3:EC:82:BC:A9:DF:33:
  • 4A:E1:25:54:B2:05:AC:41:0C:22:73:B1:EC:98:BB:34:
  • C5:8F:5A:9A:84:EC:59
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65:
  • 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8
  • Timestamp : Nov 25 15:22:09.807 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:1C:DC:CD:C2:2B:0D:57:9A:B7:4C:BA:34:
  • 30:A7:65:B2:3D:0D:B2:4C:1D:22:23:2E:D5:CA:E0:61:
  • F3:5D:29:0E:02:20:1F:40:28:18:EB:20:FD:3D:35:53:
  • D2:F6:41:12:9B:D7:00:0D:AA:7E:27:19:B0:FE:DC:3C:
  • D2:71:64:3D:94:6D
First seen at:

CN=mx.saar-pfalz-garage.de

Certificate chain
  • mx.saar-pfalz-garage.de
    • remaining
    • 256 bit
    • ecdsa-with-SHA384
      • E8
        • remaining
        • 384 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • mx.saar-pfalz-garage.de
Alternative Names
  • mx.saar-pfalz-garage.de
  • webmail.saar-pfalz-garage.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • E8
validity period
Not valid before
2026-05-23
Not valid after
2026-08-21
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
Fingerprints
SHA256
F0:6C:4B:74:83:67:2B:67:D0:D9:86:44:6E:4D:5A:00:7A:62:48:B1:ED:FE:7C:79:7D:3C:E1:43:90:60:3D:B4
SHA1
78:AD:12:F2:CE:DE:20:AF:6A:3E:9F:A7:8F:72:71:2D:7F:24:5F:8E
X509v3 extensions
subjectKeyIdentifier
  • 94:A4:1A:6B:A4:1A:EA:C7:CF:3D:72:0B:F6:D5:B0:A5:6F:79:3D:FD
authorityKeyIdentifier
  • keyid:8F:0D:13:A2:F6:2E:7E:D1:50:6C:33:18:38:5D:59:8E:23:72:91:CA
authorityInfoAccess
  • CA Issuers - URI:http://e8.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://e8.c.lencr.org/119.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB:
  • B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14
  • Timestamp : May 23 10:30:07.034 2026 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:2C:38:A8:8B:8B:57:45:CF:EE:4F:7E:BE:
  • 3C:2C:88:E6:F7:2E:D4:C7:BD:ED:12:AC:1B:8F:18:B4:
  • 6F:08:AB:CA:02:21:00:99:2F:53:5A:2F:17:BD:C1:1D:
  • 22:6E:18:28:A2:BA:DC:DC:E3:B0:3C:13:04:C2:88:22:
  • 3B:DA:ED:AB:6A:6D:5F
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 26:E3:64:6E:58:69:21:23:BC:34:3F:47:24:35:9B:37:
  • 92:CD:24:5A:88:D8:15:D3:93:33:FD:99:18:AB:47:23
  • Timestamp : May 23 10:30:06.912 2026 GMT
  • Extensions: 00:00:05:00:14:66:27:56
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:92:1A:23:7E:08:71:1E:96:CF:58:07:
  • 3E:E3:03:25:63:7F:25:6A:ED:76:68:E5:86:29:AF:D2:
  • FC:29:37:78:16:02:21:00:B5:2C:7E:DD:D2:80:88:F0:
  • 4B:49:F0:DE:03:F5:32:FC:67:B5:F6:FE:FB:68:68:72:
  • F5:FD:28:F3:76:F5:1C:77
First seen at:

CN=relay2.inexio.net

Certificate chain
Subject
Common Name (CN)
  • relay2.inexio.net
Alternative Names
  • relay2.inexio.net
  • www.relay2.inexio.net
Issuer
Country (C)
  • US
Organization (O)
  • DigiCert Inc
Organizational Unit (OU)
  • www.digicert.com
Common Name (CN)
  • RapidSSL TLS RSA CA G1
validity period
Not valid before
2025-11-25
Not valid after
2026-11-24
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
Fingerprints
SHA256
FE:F5:76:35:31:36:38:5C:C8:92:F0:0D:69:C8:D5:74:2A:F7:58:48:41:D3:FE:C1:9A:6A:C8:DC:B4:AD:8B:21
SHA1
EB:93:31:67:E0:43:66:E2:2F:20:72:49:60:7C:C2:3C:D7:61:2A:C6
X509v3 extensions
authorityKeyIdentifier
  • keyid:0C:DB:6C:82:49:0F:4A:67:0A:B8:14:EE:7A:C4:48:52:88:EB:56:38
subjectKeyIdentifier
  • 9A:8D:27:63:34:84:E7:81:C4:78:5A:18:B3:00:A1:E3:9F:20:54:2D
certificatePolicies
  • Policy: 2.23.140.1.2.1
  • CPS: http://www.digicert.com/CPS
crlDistributionPoints
  • Full Name:
  • URI:http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl
authorityInfoAccess
  • OCSP - URI:http://status.rapidssl.com
  • CA Issuers - URI:http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:
  • 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77
  • Timestamp : Nov 25 15:22:02.348 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:4C:79:33:83:93:61:C1:19:36:FE:B4:A5:
  • 39:01:5F:E3:62:60:B2:6A:20:AD:4A:0E:CB:89:36:F6:
  • 6F:42:3B:48:02:21:00:8F:BE:AD:F2:5B:E4:E9:AC:D2:
  • 90:A0:59:B2:EF:B9:99:FD:26:0C:24:E5:EA:C9:AF:B1:
  • A5:EE:F6:BC:37:13:1F
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:
  • E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A
  • Timestamp : Nov 25 15:22:02.367 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:37:B3:75:8A:5B:CB:51:F3:9A:6D:75:5F:
  • 43:82:A6:65:D9:3A:0C:97:27:8D:2B:6E:4B:C4:9B:6B:
  • 2C:2B:9A:2E:02:21:00:FE:59:6E:E3:2A:3C:5F:C5:DD:
  • EC:B7:64:D8:A3:4D:E4:06:1A:F5:F8:FE:88:0E:AA:AB:
  • 8D:07:E1:47:EA:97:1D
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:
  • C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD
  • Timestamp : Nov 25 15:22:02.379 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:4B:D2:01:66:80:E0:9B:FE:2F:A4:AD:D1:
  • 4E:DC:B8:5D:AF:65:1E:3A:65:30:F0:7C:89:E7:8C:3B:
  • FA:E6:5F:D0:02:20:52:C3:48:41:41:DA:38:3A:12:7A:
  • 2A:48:C6:94:E4:A5:1C:D8:E1:EE:BC:87:4B:82:5E:C3:
  • 96:C2:03:8A:B2:BC

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.relay1.inexio.net
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
valid
_25._tcp.relay2.inexio.net
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
valid