SSL-Tools

SSL check results of yahoo.com

NEW You can also bulk check multiple servers.

Discover if the mail servers for yahoo.com can be reached through a secure connection.

To establish a secure connection a mail server has to offer STARTTLS (SSL), a trustworthy SSL certificate, support for the Diffie-Hellman-Algorithm to guarantee Perfect Forward Secrecy and must not be vulnerable against the Heartbleed attack. Futhermore we recommend using end-to-end encryption with GnuPG.

Summary

JSON Refresh

Report created Thu, 11 Apr 2024 08:59:02 +0000

The mailservers of yahoo.com can be reached through a secure connection.

Servers

Incoming Mails

These servers are responsible for incoming mails to @yahoo.com addresses.

Hostname / IP address Priority STARTTLS Certificates Protocol
mta7.am0.yahoodns.net
67.195.204.77
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
7 s
mta7.am0.yahoodns.net
67.195.204.79
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
7 s
mta7.am0.yahoodns.net
98.136.96.91
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
8 s
mta7.am0.yahoodns.net
67.195.228.110
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
10 s
mta7.am0.yahoodns.net
67.195.204.74
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
7 s
mta7.am0.yahoodns.net
67.195.204.72
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
7 s
mta7.am0.yahoodns.net
98.136.96.74
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
8 s
mta7.am0.yahoodns.net
98.136.96.77
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
7 s
mta6.am0.yahoodns.net
67.195.228.106
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
10 s
mta6.am0.yahoodns.net
98.136.96.91
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
6 s
mta6.am0.yahoodns.net
67.195.204.72
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
6 s
mta6.am0.yahoodns.net
67.195.204.77
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
6 s
mta6.am0.yahoodns.net
98.136.96.75
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
7 s
mta6.am0.yahoodns.net
67.195.228.111
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
8 s
mta6.am0.yahoodns.net
67.195.204.79
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
6 s
mta6.am0.yahoodns.net
67.195.204.73
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
6 s
mta5.am0.yahoodns.net
98.136.96.77
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
7 s
mta5.am0.yahoodns.net
67.195.228.106
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
8 s
mta5.am0.yahoodns.net
67.195.228.94
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
9 s
mta5.am0.yahoodns.net
98.136.96.75
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
6 s
mta5.am0.yahoodns.net
67.195.228.109
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
9 s
mta5.am0.yahoodns.net
67.195.204.79
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
6 s
mta5.am0.yahoodns.net
67.195.204.72
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
6 s
mta5.am0.yahoodns.net
67.195.228.111
 1
supported
*.mail.am0.yahoodns.net
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • TLSv1.1
  • TLSv1.0
  • SSLv3
9 s

Outgoing Mails

We have received emails from these servers with @yahoo.com sender addresses. Test mail delivery

Host TLS Version & Cipher
sonic303-20.consmr.mail.ir2.yahoo.com (77.238.178.201)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic315-14.consmr.mail.bf2.yahoo.com (74.6.134.124)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic315-15.consmr.mail.bf2.yahoo.com (74.6.134.125)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic301-21.consmr.mail.ir2.yahoo.com (77.238.176.98)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic301-20.consmr.mail.ir2.yahoo.com (77.238.176.97)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic314-20.consmr.mail.ir2.yahoo.com (77.238.177.146)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic307-7.consmr.mail.ir2.yahoo.com (87.248.110.32)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic306-20.consmr.mail.ir2.yahoo.com (77.238.176.206)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic309-48.consmr.mail.sg3.yahoo.com (106.10.244.111)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic310-13.consmr.mail.bf2.yahoo.com (74.6.135.123)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic314-22.consmr.mail.ne1.yahoo.com (66.163.189.148)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic312-23.consmr.mail.ne1.yahoo.com (66.163.191.204)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic305-21.consmr.mail.ir2.yahoo.com (77.238.177.83)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic311-32.consmr.mail.ir2.yahoo.com (77.238.176.164)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic308-19.consmr.mail.ir2.yahoo.com (77.238.178.147)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic313-14.consmr.mail.bf2.yahoo.com (74.6.133.124)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
unknown (162.144.62.107)
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
sonic313-9.consmr.mail.ne1.yahoo.com (66.163.185.32)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic315-8.consmr.mail.gq1.yahoo.com (98.137.65.32)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
unknown (192.3.136.7)
TLSv1.3 TLS_AES_256_GCM_SHA384
sonic306-3.consmr.mail.bf2.yahoo.com (74.6.132.42)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
unknown (66.163.185.33)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
unknown (66.163.185.148)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic308-56.consmr.mail.ne1.yahoo.com (66.163.187.31)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic315-22.consmr.mail.ne1.yahoo.com (66.163.190.148)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
unknown (37.49.230.116)
Insecure - not encrypted!
unknown (194.183.80.98)
TLSv1 ECDHE-RSA-AES256-SHA
sonic302-2.consmr.mail.bf2.yahoo.com (74.6.135.41)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
sonic305-1.consmr.mail.bf2.yahoo.com (74.6.133.40)
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256

Certificates

First seen at:

CN=*.mail.am0.yahoodns.net,O=Oath Holdings Inc.,L=Sunnyvale,ST=California,C=US

Certificate chain
Subject
Country (C)
  • US
State (ST)
  • California
Locality (L)
  • Sunnyvale
Organization (O)
  • Oath Holdings Inc.
Common Name (CN)
  • *.mail.am0.yahoodns.net
Alternative Names
  • *.mail.am0.yahoodns.net
  • *.am0.yahoodns.net
  • *.sbcglobal.am0.yahoodns.net
  • *.mail.gm0.yahoodns.net
  • *.gm0.yahoodns.net
  • *.biz.mail.yahoo.com
  • *.bullet.am0.yahoodns.net
Issuer
Country (C)
  • US
Organization (O)
  • DigiCert Inc
Organizational Unit (OU)
  • www.digicert.com
Common Name (CN)
  • DigiCert SHA2 High Assurance Server CA
validity period
Not valid before
2024-01-02
Not valid after
2024-06-26
This certifcate has been verified for the following usages:
  • Digital Signature
  • Key Encipherment
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
73:A6:68:D9:7B:D1:7B:1E:6A:94:D9:7A:60:0F:20:F5:F0:11:9B:87:EF:C9:1E:84:83:B4:60:BB:72:60:B5:B5
SHA1
45:87:9F:B2:33:8B:8D:CC:1F:A8:5D:60:24:EB:83:5C:C6:BA:52:46
X509v3 extensions
authorityKeyIdentifier
  • keyid:51:68:FF:90:AF:02:07:75:3C:CC:D9:65:64:62:A2:12:B8:59:72:3B
subjectKeyIdentifier
  • 0C:3E:D1:56:1C:E3:E7:01:69:AC:48:B6:BF:5B:2C:8C:40:37:4B:B7
certificatePolicies
  • Policy: 2.23.140.1.2.2
  • CPS: http://www.digicert.com/CPS
crlDistributionPoints
  • Full Name:
  • URI:http://crl3.digicert.com/sha2-ha-server-g6.crl
  • Full Name:
  • URI:http://crl4.digicert.com/sha2-ha-server-g6.crl
authorityInfoAccess
  • OCSP - URI:http://ocsp.digicert.com
  • CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
  • 32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
  • Timestamp : Jan 2 00:08:42.518 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:C1:D9:12:FE:21:FC:7B:51:EA:9B:12:
  • 78:35:E8:F1:E1:46:EB:28:4B:EA:20:0E:20:D6:84:39:
  • 50:EE:2D:4F:89:02:21:00:99:C5:1E:EF:3B:21:95:CE:
  • 96:9A:40:1D:C5:F5:D1:8B:2F:64:BD:58:78:CA:27:D3:
  • E8:0D:1D:B2:30:CA:1A:9B
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
  • 1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
  • Timestamp : Jan 2 00:08:42.485 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:C0:74:6D:C6:55:E7:97:33:86:23:0D:
  • 97:85:60:42:47:3A:76:D1:2E:E4:93:D9:A6:10:62:F4:
  • 89:90:C3:14:09:02:20:32:8A:35:45:76:F4:F6:71:84:
  • 95:74:DE:A4:D4:0E:6A:84:CB:3F:BC:40:59:79:D3:EF:
  • 3D:42:48:A8:CD:19:8F
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
  • 91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
  • Timestamp : Jan 2 00:08:42.453 2024 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:46:02:21:00:B1:A3:62:79:34:22:3C:A1:66:70:62:
  • 26:0C:8E:32:C0:C2:DA:B7:66:1D:04:8B:44:A3:F7:67:
  • D9:09:2D:95:C6:02:21:00:CF:1B:29:0E:FB:78:7B:77:
  • 68:44:52:1D:98:35:C3:51:A6:F1:21:CD:B3:FD:D3:EF:
  • F3:34:B6:62:5D:C6:54:7D