taptrade.lol - TLS / STARTTLS Test

Discover if the mail servers for taptrade.lol can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Sat, 26 Sep 2026 00:30:24 +0000

Certificates

Trustworthy
Protocol

Secure
DANE

Valid

The mailservers of taptrade.lol can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @taptrade.lol addresses.

Hostname / IP address	Priority	STARTTLS	Certificates	Protocol
mail.lkho.me 223.19.206.103	10	supported	*.lkho.me	DANE valid PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 ~~SSLv3~~	2026-09-26 9 s

Outgoing Mails

We have not received any emails from a @taptrade.lol address so far. Test mail delivery

Certificates

First seen at: 2026-09-24

CN=*.lkho.me

Certificate chain

*.lkho.me
- 2026-12-21 remaining
- 256 bit
- ecdsa-with-SHA384

Subject

Common Name (CN)

*.lkho.me

Alternative Names

*.lkho.me
lkho.me

Issuer

Country (C)

Organization (O)

Let's Encrypt

Common Name (CN)

validity period

Not valid before: 2026-09-22
Not valid after: 2026-12-21

This certifcate has been verified for the following usages:

Digital Signature
TLS Web Server Authentication

Fingerprints

SHA256: F0:BE:0C:1F:98:9E:D0:53:3D:CE:08:96:14:4F:06:19:5A:37:B9:42:0E:11:88:81:49:CE:F1:96:DA:F6:BF:BE
SHA1: 92:06:3F:99:35:DF:4A:A4:C1:44:2D:8E:CE:B4:A0:E0:F8:4D:31:93

X509v3 extensions

subjectKeyIdentifier

22:03:72:95:E7:B5:BE:23:D4:AE:0E:E8:9A:8B:21:8D:44:1E:60:7D

authorityKeyIdentifier

keyid:BB:20:CA:47:0B:FE:D7:E5:9C:F9:8F:09:2A:A3:8C:37:45:B1:BC:D8

authorityInfoAccess

CA Issuers - URI:http://ye1.i.lencr.org/

certificatePolicies

Policy: 2.23.140.1.2.1

crlDistributionPoints

Full Name:
URI:http://ye1.c.lencr.org/35.crl

ct_precert_scts

Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46:
FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8
Timestamp : Sep 22 12:55:10.862 2026 GMT
Extensions: 00:00:05:00:12:51:D3:9B
Signature : ecdsa-with-SHA256
30:45:02:20:64:24:C2:50:80:7C:63:D2:D1:96:B6:7B:
2A:12:D2:9B:FA:31:A8:3F:F5:48:21:90:7F:C1:65:B8:
BE:7A:D8:98:02:21:00:DD:09:46:6C:C5:1B:A1:F2:95:
90:A6:CA:C0:08:AC:87:AF:AE:EF:8A:F4:B0:B1:3D:EE:
27:CC:22:78:65:07:B3
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : AF:67:88:3B:57:B0:4E:DD:8F:A6:D9:7E:F6:2E:A8:EB:
81:0A:C7:71:60:F0:24:5E:55:D6:0C:2F:E7:85:87:3A
Timestamp : Sep 22 12:55:10.970 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:28:BE:5B:09:EC:84:45:61:0D:12:88:DB:
15:80:67:D4:2D:90:42:91:98:F4:63:3D:D3:BF:9A:64:
97:B0:C9:56:02:20:44:23:21:88:78:A5:7C:DD:94:A2:
54:53:E6:1C:36:81:C7:5D:2A:17:88:F0:B2:A0:86:FC:
5F:94:CD:05:A3:B1

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name	Options	DNSSEC	Matches
_25._tcp.mail.lkho.me	DANE-TA: Trust Anchor Assertion Use subject public key SHA-256 Hash	valid	valid
_25._tcp.mail.lkho.me	DANE-TA: Trust Anchor Assertion Use subject public key SHA-256 Hash	valid	valid
_25._tcp.mail.lkho.me	DANE-TA: Trust Anchor Assertion Use subject public key SHA-256 Hash	valid	valid
_25._tcp.mail.lkho.me	DANE-EE: Domain Issued Certificate Use subject public key SHA-256 Hash	valid	valid

SSL check results of taptrade.lol