IM Observatory client report for kawai.spb.ru

Test started 2018-04-16 04:59:36 UTC .

Show server to server result | Permalink to this report | Retest

jab.kawai.spb.ru:5222
Certificate is not trusted, grade capped to F. Ignoring trust: F.
Server allows SSLv2, which is obsolete and insecure. Grade capped to F.
Server does not support TLS 1.2. Grade capped to C.
Warning: Server offers no forward-secret ciphers. Grade capped to A-.
Server supports SSL 3. Grade capped to B.
jab.kawai.spb.ru:5222
StartTLS
ALLOWED

SASL

Pre-TLS
DIGEST-MD5
PLAIN
Post-TLS
DIGEST-MD5
PLAIN

SRV records _xmpp-client._tcp.kawai.spb.ru NO DNSSEC

Priority Weight Port Server
5 0 5222 jab.kawai.spb.ru

TLSA records

Certificates

Subject
commonName
kawai.spb.ru
Details
Error: unable to get local issuer certificate.
Error: unable to verify the first certificate.
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2016-06-03 17:28:30 UTC
Valid to
2017-06-03 17:28:30 UTC
CRL
http://crl.startssl.com/sca-server1.crl
OCSP
http://ocsp.startssl.com
Valid for kawai.spb.ru
YES
EC:A1:21:95:5B:DD:6A:F2:60:BF:17:72:96:23:DB:E2:DD:6C:14:B4
Subject Alternative Names
DNSName
kawai.spb.ru Matches
DNSName
jab.kawai.spb.ru
DNSName
imap.kawai.spb.ru
DNSName
pop.kawai.spb.ru
DNSName
relay.kawai.spb.ru
Subject
commonName
StartCom Class 1 DV Server CA
countryName
IL
organizationalUnitName
StartCom Certification Authority
organizationName
StartCom Ltd.
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2015-12-16 01:00:05 UTC
Valid to
2030-12-16 01:00:05 UTC
CRL
http://crl.startssl.com/sfsca.crl
OCSP
http://ocsp.startssl.com
39:8E:19:36:63:9B:A5:20:6D:F5:17:9B:FB:B7:01:09:33:96:94:00
Subject
commonName
StartCom Certification Authority
countryName
IL
organizationalUnitName
Secure Digital Certificate Signing
organizationName
StartCom Ltd.
Details
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2006-09-17 19:46:37 UTC
Valid to
2036-09-17 19:46:37 UTC
CRL
http://crl.startssl.com/ca-g2.crl
OCSP
http://ocsp.startssl.com/ca-g2
14:E8:0D:AF:47:BB:F6:44:5D:21:F2:2F:C1:8C:B4:56:93:3F:56:8D
Subject
commonName
StartCom Certification Authority G2
countryName
IL
organizationName
StartCom Ltd.
Details
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2010-01-01 01:00:00 UTC
Valid to
2039-12-31 23:59:00 UTC
BB:25:A3:D8:49:30:0F:2E:87:9F:74:36:43:6D:12:94:4A:F5:5A:DA

Protocols

SSLv2 Yes
SSLv3 Yes
TLSv1 Yes
TLSv1.1 No
TLSv1.2 No

Ciphers

Server does respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
CAMELLIA256-SHA (0x84) 256 No -
AES256-SHA (0x35) 256 No -
IDEA-CBC-MD5 (0x50080) 128 No -
RC2-CBC-MD5 (0x30080) 128 No -
RC4-MD5 (0x10080) 128 No -
CAMELLIA128-SHA (0x41) 128 No -
AES128-SHA (0x2f) 128 No -
IDEA-CBC-SHA (0x7) 128 No -
RC4-SHA (0x5) 128 No -
DES-CBC3-MD5 (0x700c0) WEAK 112 No -
DES-CBC3-SHA (0xa) WEAK 112 No -
DES-CBC-MD5 (0x60040) VERY WEAK 56 No -
DES-CBC-SHA (0x9) VERY WEAK 56 No -
EXP-RC4-MD5 (0x20080) VERY WEAK 40 No -
EXP-RC2-CBC-MD5 (0x6) VERY WEAK 40 No -

Badge

xmpp.net score

Want to show this result on your webpage? Add this:

<a href='https://xmpp.net/result.php?domain=kawai.spb.ru&amp;type=client'><img src='https://xmpp.net/badge.php?domain=kawai.spb.ru' alt='xmpp.net score' /></a>