IM Observatory client report for jive.cfs.its.nyu.edu
Test started 2019-03-06 18:46:12 UTC .
Show server to server result | Permalink to this report |
Score
jive.cfs.its.nyu.edu:5222
Grade:
B
Server uses Diffie-Hellman parameters of < 2048 bits. Grade capped to B.
General
jive.cfs.its.nyu.edu:5222
- StartTLS
- REQUIRED
SASL
Pre-TLS
| PLAIN |
Post-TLS
| PLAIN |
DNS
SRV records _xmpp-client._tcp.jive.cfs.its.nyu.edu NO DNSSEC
| Priority | Weight | Port | Server |
|---|
TLSA records
_5222._tcp.jive.cfs.its.nyu.edu NO DNSSEC
TLS
jive.cfs.its.nyu.edu:5222
Certificates
#0 jive.cfs.its.nyu.edu
Subject
- commonName
- jive.cfs.its.nyu.edu
- countryName
- US
- localityName
- New York
- organizationalUnitName
- ITS eServices
- organizationName
- New York University
- postalCode
- 10012
- stateOrProvinceName
- NY
- streetAddress
- 70 Washington Square South
Details
- Signature algorithm
- sha256WithRSAEncryption
- Public key
- 2048 bit RSA
- Valid from
- 2019-01-02 00:00:00 UTC
- Valid to
- 2021-01-01 23:59:59 UTC
- CRL
- http://crl.incommon-rsa.org/InCommonRSAServerCA.crl
- OCSP
- http://ocsp.usertrust.com
- Valid for jive.cfs.its.nyu.edu
- YES
29:0A:AB:42:4E:07:57:86:13:14:CC:16:9F:54:ED:F8:F4:16:A6:6C
Subject Alternative Names
- DNSName
- jive.cfs.its.nyu.edu Matches
- DNSName
- jive.home.nyu.edu
- DNSName
- nyu.edu
#1 InCommon RSA Server CA
Subject
- commonName
- InCommon RSA Server CA
- countryName
- US
- localityName
- Ann Arbor
- organizationalUnitName
- InCommon
- organizationName
- Internet2
- stateOrProvinceName
- MI
Details
- Signature algorithm
- sha384WithRSAEncryption
- Public key
- 2048 bit RSA
- Valid from
- 2014-10-06 00:00:00 UTC
- Valid to
- 2024-10-05 23:59:59 UTC
- CRL
- http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
- OCSP
- http://ocsp.usertrust.com
F5:FB:01:DE:A6:E5:9C:A6:DD:05:70:54:F4:A3:FF:72:DD:E1:D5:C6
#2 USERTrust RSA Certification Authority
Subject
- commonName
- USERTrust RSA Certification Authority
- countryName
- US
- localityName
- Jersey City
- organizationName
- The USERTRUST Network
- stateOrProvinceName
- New Jersey
Details
- Signature algorithm
- sha384WithRSAEncryption
- Public key
- 4096 bit RSA
- Valid from
- 2000-05-30 10:48:38 UTC
- Valid to
- 2020-05-30 10:48:38 UTC
- CRL
- http://crl.usertrust.com/AddTrustExternalCARoot.crl
- OCSP
- http://ocsp.usertrust.com
EA:B0:40:68:9A:0D:80:5B:5D:6F:D6:54:FC:16:8C:FF:00:B7:8B:E3
#3 AddTrust External CA Root
Subject
- commonName
- AddTrust External CA Root
- countryName
- SE
- organizationalUnitName
- AddTrust External TTP Network
- organizationName
- AddTrust AB
Details
- Signature algorithm
- sha1WithRSAEncryption
- Public key
- 2048 bit RSA
- Valid from
- 2000-05-30 10:48:38 UTC
- Valid to
- 2020-05-30 10:48:38 UTC
02:FA:F3:E2:91:43:54:68:60:78:57:69:4D:F5:E4:5B:68:85:18:68
Protocols
| SSLv2 | No |
| SSLv3 | No |
| TLSv1 | No |
| TLSv1.1 | No |
| TLSv1.2 | Yes |
Ciphers
Server does respect the client's cipher ordering.
| Cipher suite | Bitsize | Forward secrecy | Info |
|---|---|---|---|
| ECDHE-RSA-AES256-GCM-SHA384 (0xc030) | 256 | Yes | Curve: sect571r1 |
| ECDHE-RSA-AES256-SHA384 (0xc028) | 256 | Yes | Curve: sect571r1 |
| ECDHE-RSA-AES256-SHA (0xc014) | 256 | Yes | Curve: sect571r1 |
| DHE-DSS-AES256-GCM-SHA384 (0xa3) | 256 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DHE-RSA-AES256-GCM-SHA384 (0x9f) | 256 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DHE-RSA-AES256-SHA256 (0x6b) | 256 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DHE-DSS-AES256-SHA256 (0x6a) | 256 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DHE-RSA-AES256-SHA (0x39) | 256 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DHE-DSS-AES256-SHA (0x38) | 256 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| AES256-GCM-SHA384 (0x9d) | 256 | No | - |
| AES256-SHA256 (0x3d) | 256 | No | - |
| AES256-SHA (0x35) | 256 | No | - |
| ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) | 128 | Yes | Curve: sect571r1 |
| ECDHE-RSA-AES128-SHA256 (0xc027) | 128 | Yes | Curve: sect571r1 |
| ECDHE-RSA-AES128-SHA (0xc013) | 128 | Yes | Curve: sect571r1 |
| DHE-DSS-AES128-GCM-SHA256 (0xa2) | 128 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DHE-RSA-AES128-GCM-SHA256 (0x9e) | 128 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DHE-RSA-AES128-SHA256 (0x67) | 128 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DHE-DSS-AES128-SHA256 (0x40) | 128 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DHE-RSA-AES128-SHA (0x33) | 128 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DHE-DSS-AES128-SHA (0x32) | 128 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| AES128-GCM-SHA256 (0x9c) | 128 | No | - |
| AES128-SHA256 (0x3c) | 128 | No | - |
| AES128-SHA (0x2f) | 128 | No | - |
Badge
Want to show this result on your webpage? Add this:
<a href='https://xmpp.net/result.php?domain=jive.cfs.its.nyu.edu&type=client'><img src='https://xmpp.net/badge.php?domain=jive.cfs.its.nyu.edu' alt='xmpp.net score' /></a>