SSL-Tools

SSL check results of scruffy.nl

NEW You can also bulk check multiple servers.

Discover if the mail servers for scruffy.nl can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Sat, 06 Jun 2026 07:27:51 +0000

The mailservers of scruffy.nl can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @scruffy.nl addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mail.scruffy.nl
2a02:a444:9d96:40:9241:c013:a1f:f82c
 10
supported
mail.scruffy.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mail.scruffy.nl
77.166.9.57
 10
supported
mail.scruffy.nl
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mx.bhosted.nl
2a02:9e0:8000::32
Results incomplete
20
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mx.bhosted.nl
2a02:9e0:8000::12
Results incomplete
20
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mx.bhosted.nl
2a02:9e0:8000::10
Results incomplete
20
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mx.bhosted.nl
94.124.121.12
Results incomplete
20
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mx.bhosted.nl
94.124.121.10
Results incomplete
20
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
mx.bhosted.nl
94.124.121.32
Results incomplete
20
supported
not checked
DANE
errors
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s

Outgoing Mails

We have not received any emails from a @scruffy.nl address so far. Test mail delivery

Certificates

First seen at:

CN=mail.scruffy.nl

Certificate chain
  • mail.scruffy.nl
    • remaining
    • 256 bit
    • ecdsa-with-SHA384
      • E7
        • remaining
        • 384 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • mail.scruffy.nl
Alternative Names
  • mail.scruffy.nl
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • E7
validity period
Not valid before
2026-05-14
Not valid after
2026-08-12
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
Fingerprints
SHA256
2B:74:C7:8F:B3:A1:52:2C:91:2A:19:08:0A:94:DD:6A:73:B5:D8:B4:FA:46:9E:5E:6D:79:22:02:FC:75:31:62
SHA1
9C:EA:D1:88:2B:24:70:35:17:E8:E8:0D:D5:2D:4F:62:FA:09:3F:E8
X509v3 extensions
subjectKeyIdentifier
  • E0:19:6B:39:25:A3:48:55:FC:17:72:27:54:82:0C:FE:DD:31:FF:6E
authorityKeyIdentifier
  • keyid:AE:48:9E:DC:87:1D:44:A0:6F:DA:A2:E5:60:74:04:78:C2:9C:00:80
authorityInfoAccess
  • CA Issuers - URI:http://e7.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://e7.c.lencr.org/72.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65:
  • 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8
  • Timestamp : May 14 19:29:47.144 2026 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:0B:80:65:32:67:42:39:7F:45:15:22:48:
  • 50:A8:29:55:6A:7C:EE:45:44:86:5D:82:C3:D7:85:EB:
  • E5:E9:52:C7:02:21:00:D8:9A:3A:18:5B:44:3D:D8:00:
  • C2:64:B2:84:B9:02:1E:A8:D8:77:4B:AE:EA:C2:B0:5E:
  • C0:00:27:D6:0B:25:8E
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 46:AF:86:3D:3B:3E:E5:9F:A5:77:DE:A8:24:5D:36:B0:
  • D9:ED:22:A2:23:F4:61:77:41:22:94:52:EE:95:50:5F
  • Timestamp : May 14 19:29:47.330 2026 GMT
  • Extensions: 00:00:05:00:06:9C:33:A9
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:FB:1D:C0:D8:FC:D3:EA:75:66:C7:1C:
  • 70:18:E6:26:95:64:5A:AB:51:7B:BB:84:3E:AC:9A:AD:
  • D0:5B:AD:51:0F:02:21:00:81:FF:D7:34:E0:F0:0C:7B:
  • F4:E7:C5:CD:49:F1:DF:E4:2C:8B:A3:AE:BD:31:EC:00:
  • 67:23:5E:E7:C8:B2:2E:54

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.mail.scruffy.nl
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
valid
_25._tcp.mx.bhosted.nl
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.mx.bhosted.nl
  • DANE-EE: Domain Issued Certificate
  • Use subject public key
  • SHA-256 Hash
valid
—