IM Observatory server report for esmt.org

Test started 2018-07-13 13:32:39 UTC .

Show client to server result | Permalink to this report | Retest

esmt.org:5269
Server uses Diffie-Hellman parameters of < 2048 bits. Grade capped to B.
esmt.org:5269
StartTLS
ALLOWED

SRV records _xmpp-server._tcp.esmt.org NO DNSSEC

Priority Weight Port Server
0 5 5269 esmt.org

TLSA records

Certificates

Subject
commonName
esmt.org
countryName
DE
localityName
Berlin
organizationalUnitName
IT
organizationName
ESMT European School of Management and Technology GmbH
stateOrProvinceName
Berlin
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2017-12-19 14:55:34 UTC
Valid to
2021-03-17 14:55:34 UTC
CRL
http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
OCSP
http://ocsp.pca.dfn.de/OCSP-Server/OCSP
Valid for esmt.org
YES
48:92:75:39:13:5B:DF:13:B4:BC:C0:65:E7:42:5F:6B:9E:64:AD:37
Subject Alternative Names
DNSName
esmt.org Matches
DNSName
jabber.esmt.org
DNSName
chat.esmt.org
DNSName
xmpp.esmt.org
DNSName
b-xmpp-01.global.esmt.org
Subject
commonName
DFN-Verein Global Issuing CA
countryName
DE
organizationalUnitName
DFN-PKI
organizationName
Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2016-05-24 11:38:40 UTC
Valid to
2031-02-22 23:59:59 UTC
CRL
http://cdp2.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl
OCSP
http://ocsp.pca.dfn.de/OCSP-Server/OCSP
C9:DC:B0:47:AC:8C:5F:09:05:ED:77:52:8C:BD:4B:84:D9:46:3C:45
Subject
commonName
DFN-Verein Certification Authority 2
countryName
DE
organizationalUnitName
DFN-PKI
organizationName
Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2016-02-22 13:38:22 UTC
Valid to
2031-02-22 23:59:59 UTC
CRL
http://pki0336.telesec.de/rl/TeleSec_GlobalRoot_Class_2.crl
OCSP
http://ocsp0336.telesec.de/ocspr
E2:24:BE:F6:D7:86:22:0D:26:2B:B8:07:AB:6D:AC:F9:D3:A8:9A:93
Subject
commonName
T-TeleSec GlobalRoot Class 2
countryName
DE
organizationalUnitName
T-Systems Trust Center
organizationName
T-Systems Enterprise Services GmbH
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2008-10-01 10:40:14 UTC
Valid to
2033-10-01 23:59:59 UTC
59:0D:2D:7D:88:4F:40:2E:61:7E:A5:62:32:17:65:CF:17:D8:94:E9

Protocols

SSLv2 No
SSLv3 No
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: sect571r1
ECDHE-RSA-AES256-SHA384 (0xc028) 256 Yes Curve: sect571r1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: sect571r1
DHE-RSA-AES256-GCM-SHA384 (0x9f) 256 Yes Diffie-Hellman:
Group: RFC 2409 First Oakley Default Group
Bitsize: 1024
DHE-RSA-AES256-SHA256 (0x6b) 256 Yes Diffie-Hellman:
Group: RFC 2409 First Oakley Default Group
Bitsize: 1024
DHE-RSA-AES256-SHA (0x39) 256 Yes Diffie-Hellman:
Group: RFC 2409 First Oakley Default Group
Bitsize: 1024
AES256-GCM-SHA384 (0x9d) 256 No -
AES256-SHA256 (0x3d) 256 No -
AES256-SHA (0x35) 256 No -
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: sect571r1
ECDHE-RSA-AES128-SHA256 (0xc027) 128 Yes Curve: sect571r1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: sect571r1
DHE-RSA-AES128-GCM-SHA256 (0x9e) 128 Yes Diffie-Hellman:
Group: RFC 2409 First Oakley Default Group
Bitsize: 1024
DHE-RSA-AES128-SHA256 (0x67) 128 Yes Diffie-Hellman:
Group: RFC 2409 First Oakley Default Group
Bitsize: 1024
DHE-RSA-AES128-SHA (0x33) 128 Yes Diffie-Hellman:
Group: RFC 2409 First Oakley Default Group
Bitsize: 1024
AES128-GCM-SHA256 (0x9c) 128 No -
AES128-SHA256 (0x3c) 128 No -
AES128-SHA (0x2f) 128 No -

Badge

xmpp.net score

Want to show this result on your webpage? Add this:

<a href='https://xmpp.net/result.php?domain=esmt.org&amp;type=server'><img src='https://xmpp.net/badge.php?domain=esmt.org' alt='xmpp.net score' /></a>