IM Observatory client report for dfn.de

Test started 2020-01-14 14:47:33 UTC .

Show server to server result | Permalink to this report |

mail.dfn.de:5222
mail.dfn.de:5222
StartTLS
REQUIRED

SASL

Pre-TLS

None

Post-TLS
GSSAPI
LOGIN
PLAIN

SRV records _xmpp-client._tcp.dfn.de NO DNSSEC

Priority Weight Port Server
5 0 5222 mail.dfn.de

TLSA records

Certificates

Subject
commonName
dfn.de
countryName
DE
localityName
Berlin
organizationalUnitName
Geschaeftsstelle
organizationName
Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
stateOrProvinceName
Berlin
Details
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2018-11-29 15:05:21 UTC
Valid to
2021-03-02 15:05:21 UTC
CRL
http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
OCSP
http://ocsp.pca.dfn.de/OCSP-Server/OCSP
Valid for dfn.de
YES
C8:50:15:75:4A:3B:F2:42:4A:82:10:7A:7D:63:85:57:A4:97:08:3B
Subject Alternative Names
DNSName
dfn.de Matches
DNSName
www.dfn.de
Subject
commonName
DFN-Verein Global Issuing CA
countryName
DE
organizationalUnitName
DFN-PKI
organizationName
Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2016-05-24 11:38:40 UTC
Valid to
2031-02-22 23:59:59 UTC
CRL
http://cdp2.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl
OCSP
http://ocsp.pca.dfn.de/OCSP-Server/OCSP
C9:DC:B0:47:AC:8C:5F:09:05:ED:77:52:8C:BD:4B:84:D9:46:3C:45
Subject
commonName
DFN-Verein Certification Authority 2
countryName
DE
organizationalUnitName
DFN-PKI
organizationName
Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2016-02-22 13:38:22 UTC
Valid to
2031-02-22 23:59:59 UTC
CRL
http://pki0336.telesec.de/rl/TeleSec_GlobalRoot_Class_2.crl
OCSP
http://ocsp0336.telesec.de/ocspr
E2:24:BE:F6:D7:86:22:0D:26:2B:B8:07:AB:6D:AC:F9:D3:A8:9A:93
Subject
commonName
T-TeleSec GlobalRoot Class 2
countryName
DE
organizationalUnitName
T-Systems Trust Center
organizationName
T-Systems Enterprise Services GmbH
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2008-10-01 10:40:14 UTC
Valid to
2033-10-01 23:59:59 UTC
59:0D:2D:7D:88:4F:40:2E:61:7E:A5:62:32:17:65:CF:17:D8:94:E9

Protocols

SSLv2 No
SSLv3 No
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA384 (0xc028) 256 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: secp384r1
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA256 (0xc027) 128 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: secp384r1
AES256-GCM-SHA384 (0x9d) 256 No -
AES256-SHA256 (0x3d) 256 No -
AES256-SHA (0x35) 256 No -
CAMELLIA256-SHA (0x84) 256 No -
AES128-GCM-SHA256 (0x9c) 128 No -
AES128-SHA256 (0x3c) 128 No -
AES128-SHA (0x2f) 128 No -
CAMELLIA128-SHA (0x41) 128 No -

Badge

xmpp.net score

Want to show this result on your webpage? Add this:

<a href='https://xmpp.net/result.php?domain=dfn.de&amp;type=client'><img src='https://xmpp.net/badge.php?domain=dfn.de' alt='xmpp.net score' /></a>