wun.io - TLS / STARTTLS Test

Discover if the mail servers for wun.io can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Fri, 07 Aug 2020 19:01:27 +0000

Certificates

Trustworthy
Protocol

Secure
DANE

Missing

The mailservers of wun.io can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @wun.io addresses.

Hostname / IP address	Priority	STARTTLS	Certificates	Protocol
us-smtp-inbound-1.mimecast.com 205.139.110.177	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-1.mimecast.com 207.211.30.221	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-1.mimecast.com 207.211.30.242	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 7 s
us-smtp-inbound-1.mimecast.com 207.211.30.141	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-1.mimecast.com 207.211.30.145	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-1.mimecast.com 207.211.30.181	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-1.mimecast.com 207.211.30.102	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-1.mimecast.com 207.211.30.107	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-1.mimecast.com 207.211.30.237	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-1.mimecast.com 205.139.110.221	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-1.mimecast.com 205.139.110.242	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 5 s
us-smtp-inbound-1.mimecast.com 205.139.110.141	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-1.mimecast.com 205.139.110.145	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 8 s
us-smtp-inbound-1.mimecast.com 205.139.110.181	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 5 s
us-smtp-inbound-1.mimecast.com 205.139.110.102	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-1.mimecast.com 205.139.110.107	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 9 s
us-smtp-inbound-2.mimecast.com 205.139.110.145	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 5 s
us-smtp-inbound-2.mimecast.com 205.139.110.181	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 8 s
us-smtp-inbound-2.mimecast.com 205.139.110.102	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-2.mimecast.com 205.139.110.107	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-2.mimecast.com 205.139.110.177	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 5 s
us-smtp-inbound-2.mimecast.com 207.211.30.221	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-2.mimecast.com 207.211.30.242	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-2.mimecast.com 207.211.30.141	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-2.mimecast.com 207.211.30.145	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-2.mimecast.com 207.211.30.181	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-2.mimecast.com 207.211.30.102	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-2.mimecast.com 207.211.30.107	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 7 s
us-smtp-inbound-2.mimecast.com 207.211.30.237	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s
us-smtp-inbound-2.mimecast.com 205.139.110.221	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 5 s
us-smtp-inbound-2.mimecast.com 205.139.110.242	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 5 s
us-smtp-inbound-2.mimecast.com 205.139.110.141	10	supported	*.mimecast.com	DANE missing PFS supported Heartbleed not vulnerable Weak ciphers not found	TLSv1.2 TLSv1.1 TLSv1.0 ~~SSLv3~~	2020-08-06 6 s

Outgoing Mails

We have not received any emails from a @wun.io address so far. Test mail delivery

Certificates

First seen at: 2020-06-26

CN=*.mimecast.com,O=Mimecast Services Limited,L=London,C=GB

Certificate chain

*.mimecast.com
- 2021-06-09 remaining
- 2048 bit
- sha256WithRSAEncryption

Subject

Country (C)

Locality (L)

London

Organization (O)

Mimecast Services Limited

Common Name (CN)

*.mimecast.com

Alternative Names

*.mimecast.com
mimecast.com

Issuer

Country (C)

Organization (O)

DigiCert Inc

Organizational Unit (OU)

www.digicert.com

Common Name (CN)

DigiCert SHA2 High Assurance Server CA

validity period

Not valid before: 2020-06-04
Not valid after: 2021-06-09

This certifcate has been verified for the following usages:

Digital Signature
Key Encipherment
TLS Web Server Authentication
TLS Web Client Authentication

Fingerprints

SHA256: 8A:46:6B:50:C1:A7:00:17:5A:5A:04:5B:52:7F:8A:EE:12:9B:DE:ED:57:40:B7:AA:DC:0E:9A:2A:33:DF:94:D5
SHA1: CF:A6:75:02:F7:A2:5E:8F:3E:A3:B8:E3:A3:3F:75:A7:CD:68:A2:9B

X509v3 extensions

authorityKeyIdentifier

keyid:51:68:FF:90:AF:02:07:75:3C:CC:D9:65:64:62:A2:12:B8:59:72:3B

subjectKeyIdentifier

7D:79:25:4E:1F:66:FE:BB:8F:9F:B0:90:FE:63:24:B6:D7:85:9D:CE

crlDistributionPoints

Full Name:
URI:http://crl3.digicert.com/sha2-ha-server-g6.crl
Full Name:
URI:http://crl4.digicert.com/sha2-ha-server-g6.crl

certificatePolicies

Policy: 2.16.840.1.114412.1.1
CPS: https://www.digicert.com/CPS
Policy: 2.23.140.1.2.2

authorityInfoAccess

OCSP - URI:http://ocsp.digicert.com
CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

ct_precert_scts

Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : F6:5C:94:2F:D1:77:30:22:14:54:18:08:30:94:56:8E:
E3:4D:13:19:33:BF:DF:0C:2F:20:0B:CC:4E:F1:64:E3
Timestamp : Jun 4 19:55:13.411 2020 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:0A:88:25:9B:66:08:AE:31:0A:29:90:0F:
51:37:F2:CF:2F:6D:03:A3:DC:FE:AC:88:07:64:33:7F:
20:EC:A8:8D:02:21:00:8B:CF:FB:B7:C8:7C:F3:05:BE:
3B:FE:97:A0:EB:40:37:99:B1:BE:18:58:05:25:06:8E:
7E:83:A2:4C:09:C3:CE
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 5C:DC:43:92:FE:E6:AB:45:44:B1:5E:9A:D4:56:E6:10:
37:FB:D5:FA:47:DC:A1:73:94:B2:5E:E6:F6:C7:0E:CA
Timestamp : Jun 4 19:55:13.437 2020 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:3A:CE:58:B9:D2:80:8E:61:18:9C:2A:1D:
5F:61:31:3A:38:2E:6E:0A:71:F7:AA:E7:27:9F:24:ED:
B4:51:A5:2C:02:20:30:6D:40:0C:21:22:A9:E4:69:AC:
E7:80:89:68:E8:97:51:31:2D:30:69:0C:17:D4:FB:BF:
06:9D:AA:4A:1A:D4

SSL check results of wun.io