SSL-Tools

SSL check results of virsacer.net

NEW You can also bulk check multiple servers.

Discover if the mail servers for virsacer.net can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Sun, 12 May 2024 14:50:52 +0000

The mailservers of virsacer.net can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @virsacer.net addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
gateway.mivaweb.de
2a01:4f8:c012:1cd1::2
 10
supported
mivaweb.de
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
gateway.mivaweb.de
49.12.190.251
 10
supported
mivaweb.de
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s

Outgoing Mails

We have not received any emails from a @virsacer.net address so far. Test mail delivery

Certificates

First seen at:

CN=mivaweb.de

Certificate chain
  • mivaweb.de
    • remaining
    • 4096 bit
    • sha256WithRSAEncryption
      • R3
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • mivaweb.de
Alternative Names
  • *.mivaweb.de
  • mivaweb.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R3
validity period
Not valid before
2024-05-05
Not valid after
2024-08-03
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
0B:C9:8B:0C:A2:B3:72:4C:F5:31:07:2F:45:F2:62:32:1D:5D:7D:4A:16:B9:54:4D:97:F1:A0:90:1C:41:DA:0D
SHA1
2D:4B:70:4C:48:D6:C2:02:1F:FA:5F:E8:B4:43:A2:C5:11:CE:7E:26
X509v3 extensions
subjectKeyIdentifier
  • 0A:FC:40:18:3A:C1:3F:F7:CC:F7:A6:D1:2A:CB:40:5A:9A:8B:0A:25
authorityKeyIdentifier
  • keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
  • OCSP - URI:http://r3.o.lencr.org
  • CA Issuers - URI:http://r3.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
  • ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
  • Timestamp : May 5 04:01:09.906 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:DA:3D:6C:4F:96:E8:08:F8:54:6D:12:
  • EE:5D:9F:BB:10:51:B5:60:FA:1F:BF:AC:1B:BC:F6:03:
  • 0F:DD:DD:0D:B1:02:20:54:3C:65:8D:E8:5E:57:C6:58:
  • CF:EA:48:D2:80:3E:4C:73:3D:34:2C:1D:80:C2:23:6A:
  • 20:6F:93:21:E1:CF:1C
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
  • B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
  • Timestamp : May 5 04:01:09.976 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:B2:2F:F7:DC:24:39:3F:80:2F:D4:7C:
  • D1:30:7E:A7:23:3A:86:11:A6:A4:A5:36:47:F9:F2:0F:
  • 48:72:9B:61:F0:02:20:0C:2A:38:AA:09:A3:50:1B:65:
  • 62:F0:B1:DF:62:4F:79:90:9E:4B:01:40:45:F3:33:2A:
  • D9:DB:E7:07:33:5E:17

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_25._tcp.gateway.mivaweb.de
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
valid
_25._tcp.gateway.mivaweb.de
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.gateway.mivaweb.de
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—
_25._tcp.gateway.mivaweb.de
  • DANE-TA: Trust Anchor Assertion
  • Use subject public key
  • SHA-256 Hash
valid
—