SSL check results of mg-production.de

NEW You can also bulk check multiple servers.

Discover if the webservers of mg-production.de can be reached through a secure connection.

Summary

Report created Sat, 08 May 2021 20:15:44 +0000

The webservers of mg-production.de can be reached through a secure connection.

Servers

Hostname / IP address Certificates Protocol
mg-production.de
45.136.31.106
mg-production.de
HSTS
unexpected EOF
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s
mg-production.de
2a03:4000:49:163:8e1:98ff:fe40:13bb
mg-production.de
HSTS
unexpected EOF
DANE
valid
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
2 s

Certificates

First seen at:

CN=mg-production.de

Certificate chain
  • mg-production.de
    • remaining
    • 256 bit
    • sha256WithRSAEncryption

      • R3
        • remaining
        • 2048 bit
        • sha256WithRSAEncryption

          • DST Root CA X3 (Certificate is self-signed.)
            • remaining
            • 2048 bit
            • sha1WithRSAEncryption

Subject
Common Name (CN)
  • mg-production.de
Alternative Names
  • *.mg-production.de
  • mg-production.de
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • R3
validity period
Not valid before
2021-04-22
Not valid after
2021-07-21
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
E7:7E:87:F0:75:9A:ED:0F:0D:A2:BB:EE:81:6B:EB:79:E4:73:A4:B0:44:9A:20:BF:6F:0C:6D:AF:09:F9:81:2F
SHA1
D5:94:20:50:60:62:5F:50:7A:75:BD:DD:20:CA:48:A3:FC:CA:23:C6
X509v3 extensions
subjectKeyIdentifier
  • 90:81:6C:6E:31:95:0D:57:02:76:B5:20:BA:08:57:DA:C9:8F:24:EF
authorityKeyIdentifier
  • keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
authorityInfoAccess
  • OCSP - URI:http://r3.o.lencr.org
  • CA Issuers - URI:http://r3.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
  • Policy: 1.3.6.1.4.1.44947.1.1.1
  • CPS: http://cps.letsencrypt.org
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 5C:DC:43:92:FE:E6:AB:45:44:B1:5E:9A:D4:56:E6:10:
  • 37:FB:D5:FA:47:DC:A1:73:94:B2:5E:E6:F6:C7:0E:CA
  • Timestamp : Apr 22 09:54:51.588 2021 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:42:E1:ED:EA:09:F5:66:E2:F7:62:DF:9A:
  • 61:24:B1:31:5D:89:63:A2:8F:FC:68:DA:F8:D8:A9:B3:
  • 0C:78:CF:7A:02:21:00:EF:42:00:C8:21:68:13:23:89:
  • E0:F9:64:FA:5A:D1:89:D6:0A:14:00:B6:92:22:E5:35:
  • EB:06:BC:60:9D:6C:9B
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : F6:5C:94:2F:D1:77:30:22:14:54:18:08:30:94:56:8E:
  • E3:4D:13:19:33:BF:DF:0C:2F:20:0B:CC:4E:F1:64:E3
  • Timestamp : Apr 22 09:54:51.720 2021 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:88:1D:98:5B:DC:87:58:70:7B:A2:64:
  • C9:AF:E7:CB:34:81:63:D7:13:39:0E:9C:7A:1D:C2:5C:
  • CB:AF:86:3F:62:02:20:69:BE:F1:3C:4D:1F:F1:57:26:
  • F4:69:39:22:06:90:36:AE:D6:B7:E9:E3:00:FC:C3:9F:
  • 18:39:39:25:24:20:FC

DANE

DNS-based Authentication of Named Entities (DANE) is a protocol to allow X.509 certificates to be bound to DNS using TLSA records and DNSSEC.

Name Options DNSSEC Matches
_443._tcp.mg-production.de
  • PKIX-TA: CA Constraint
  • Use subject public key
  • SHA-256 Hash
valid
valid