IM Observatory client report for 192.171.20.179

Test started 2019-01-07 03:51:32 UTC .

Show server to server result | Permalink to this report |

192.171.20.179:5222
Certificate is not trusted, grade capped to F. Ignoring trust: B.
Server uses Diffie-Hellman parameters of < 2048 bits. Grade capped to B.
192.171.20.179:5222
StartTLS
REQUIRED

SASL

Pre-TLS
PLAIN
Post-TLS
PLAIN

SRV records _xmpp-client._tcp.192.171.20.179 BOGUS DNSSEC

Priority Weight Port Server

TLSA records

Certificates

Subject
commonName
*.dioceseofcleveland.org
organizationalUnitName
Domain Control Validated
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2018-07-11 15:22:11 UTC
Valid to
2020-07-11 15:22:11 UTC
CRL
http://crl.starfieldtech.com/sfig2s1-113.crl
OCSP
http://ocsp.starfieldtech.com/
Valid for 192.171.20.179
NO
C3:BE:8B:51:31:CC:58:8B:58:30:D5:98:74:AF:A7:F5:2D:97:09:8C
Subject Alternative Names
DNSName
*.dioceseofcleveland.org
DNSName
dioceseofcleveland.org
Subject
commonName
Starfield Secure Certificate Authority - G2
countryName
US
localityName
Scottsdale
organizationalUnitName
http://certs.starfieldtech.com/repository/
organizationName
Starfield Technologies, Inc.
stateOrProvinceName
Arizona
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2011-05-03 07:00:00 UTC
Valid to
2031-05-03 07:00:00 UTC
CRL
http://crl.starfieldtech.com/sfroot-g2.crl
OCSP
http://ocsp.starfieldtech.com/
7E:DC:37:6D:CF:D4:5E:6D:DF:08:2C:16:0D:F6:AC:21:83:5B:95:D4
Subject
commonName
Starfield Root Certificate Authority - G2
countryName
US
localityName
Scottsdale
organizationName
Starfield Technologies, Inc.
stateOrProvinceName
Arizona
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2014-01-01 07:00:00 UTC
Valid to
2031-05-30 07:00:00 UTC
CRL
http://crl.starfieldtech.com/sfroot.crl
OCSP
http://ocsp.starfieldtech.com/
95:65:B7:78:C8:A5:0E:B4:FE:FD:45:C8:A6:58:DD:E2:41:1E:AD:0A
Subject
countryName
US
organizationalUnitName
Starfield Class 2 Certification Authority
organizationName
Starfield Technologies, Inc.
Details
Signature algorithm
sha1WithRSAEncryption
Public key
2048 bit RSA
Valid from
2004-06-29 17:39:16 UTC
Valid to
2034-06-29 17:39:16 UTC
AD:7E:1C:28:B0:64:EF:8F:60:03:40:20:14:C3:D0:E3:37:0E:B5:8A

Protocols

SSLv2 No
SSLv3 No
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: sect571r1
ECDHE-RSA-AES128-SHA256 (0xc027) 128 Yes Curve: sect571r1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: sect571r1
DHE-RSA-AES128-GCM-SHA256 (0x9e) 128 Yes Diffie-Hellman:
Group: RFC 2409 First Oakley Default Group
Bitsize: 1024
DHE-RSA-AES128-SHA256 (0x67) 128 Yes Diffie-Hellman:
Group: RFC 2409 First Oakley Default Group
Bitsize: 1024
DHE-RSA-AES128-SHA (0x33) 128 Yes Diffie-Hellman:
Group: RFC 2409 First Oakley Default Group
Bitsize: 1024
AES128-GCM-SHA256 (0x9c) 128 No -
AES128-SHA256 (0x3c) 128 No -
AES128-SHA (0x2f) 128 No -
ECDHE-RSA-DES-CBC3-SHA (0xc012) WEAK 112 Yes Curve: sect571r1
EDH-RSA-DES-CBC3-SHA (0x16) WEAK 112 Yes Diffie-Hellman:
Group: RFC 2409 First Oakley Default Group
Bitsize: 1024
DES-CBC3-SHA (0xa) WEAK 112 No -

Badge

xmpp.net score

Want to show this result on your webpage? Add this:

<a href='https://xmpp.net/result.php?domain=192.171.20.179&amp;type=client'><img src='https://xmpp.net/badge.php?domain=192.171.20.179' alt='xmpp.net score' /></a>