IM Observatory server report for fsgate.de

Test started 2018-09-18 08:13:16 UTC .

Show client to server result | Permalink to this report | Retest

idefix.fsgate.de:5269
Grade T: Certificate is not trusted, but ignoring trust would score an A.
idefix.fsgate.de:5269
StartTLS
ALLOWED
Peer certificate
The server requires incoming s2s connections to present a peer certificate.

SRV records _xmpp-server._tcp.fsgate.de NO DNSSEC

Priority Weight Port Server
5 0 5269 idefix.fsgate.de

TLSA records

Certificates

Subject
commonName
idefix.fsgate.de
Details
Error: certificate has expired.
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2018-03-16 21:43:58 UTC
Valid to
2018-06-14 21:43:58 UTC
OCSP
http://ocsp.int-x3.letsencrypt.org
Valid for fsgate.de
YES
DF:E5:D6:AA:A2:69:0E:98:19:FF:D8:DD:1E:FB:EF:A7:35:5F:2A:EC
Subject Alternative Names
DNSName
fsgate.de Matches
DNSName
idefix.fsgate.de
Subject
commonName
Let's Encrypt Authority X3
countryName
US
organizationName
Let's Encrypt
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2016-03-17 16:40:46 UTC
Valid to
2021-03-17 16:40:46 UTC
CRL
http://crl.identrust.com/DSTROOTCAX3CRL.crl
OCSP
http://isrg.trustid.ocsp.identrust.com
E6:A3:B4:5B:06:2D:50:9B:33:82:28:2D:19:6E:FE:97:D5:95:6C:CB
Subject
commonName
DST Root CA X3
organizationName
Digital Signature Trust Co.
Details
Signature algorithm
sha1WithRSAEncryption
Public key
2048 bit RSA
Valid from
2000-09-30 21:12:19 UTC
Valid to
2021-09-30 14:01:15 UTC
DA:C9:02:4F:54:D8:F6:DF:94:93:5F:B1:73:26:38:CA:6A:D7:7C:13

Protocols

SSLv2 No
SSLv3 No
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA384 (0xc028) 256 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: secp384r1
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA256 (0xc027) 128 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: secp384r1
AES256-GCM-SHA384 (0x9d) 256 No -
AES256-SHA256 (0x3d) 256 No -
AES256-SHA (0x35) 256 No -
CAMELLIA256-SHA (0x84) 256 No -
AES128-GCM-SHA256 (0x9c) 128 No -
AES128-SHA256 (0x3c) 128 No -
AES128-SHA (0x2f) 128 No -
CAMELLIA128-SHA (0x41) 128 No -

Badge

xmpp.net score

Want to show this result on your webpage? Add this:

<a href='https://xmpp.net/result.php?domain=fsgate.de&amp;type=server'><img src='https://xmpp.net/badge.php?domain=fsgate.de' alt='xmpp.net score' /></a>