IM Observatory server report for khvmntk.ru

Test started 2018-07-12 03:00:07 UTC .

Show client to server result | Permalink to this report | Retest

jabber.khvmntk.ru:5269
Certificate is not trusted, grade capped to F. Ignoring trust: C.
Warning: Server allows RC4 when using TLS 1.1 and/or TLS 1.2. Grade capped to C.
Warning: Server offers no forward-secret ciphers. Grade capped to A-.
Server supports SSL 3. Grade capped to B.
Server supports TLS compression. Grade capped to C.
jabber.khvmntk.ru:5269
StartTLS
ALLOWED
TLS compression
zlib compression

SRV records _xmpp-server._tcp.khvmntk.ru NO DNSSEC

Priority Weight Port Server
1 0 5269 jabber.khvmntk.ru

TLSA records

Certificates

Subject
commonName
jabber.khvmntk.ru
countryName
RU
description
SoU988IiirNmNhgj
emailAddress
webmaster@khvmntk.ru
Details
Error: certificate has expired.
Signature algorithm
sha1WithRSAEncryption
Public key
2048 bit RSA
Valid from
2014-07-30 15:50:06 UTC
Valid to
2015-07-31 18:31:45 UTC
CRL
http://crl.startssl.com/crt1-crl.crl
OCSP
http://ocsp.startssl.com/sub/class1/server/ca
Valid for khvmntk.ru
YES
0E:D0:42:2A:E0:99:7C:DD:E7:1F:23:39:95:6E:E6:39:F3:FD:65:12
Subject Alternative Names
DNSName
jabber.khvmntk.ru
DNSName
khvmntk.ru Matches
SRVName
jabber.khvmntk.ru
SRVName
khvmntk.ru
XMPPAddr
jabber.khvmntk.ru
XMPPAddr
khvmntk.ru Matches
Subject
commonName
StartCom Class 1 Primary Intermediate Server CA
countryName
IL
organizationalUnitName
Secure Digital Certificate Signing
organizationName
StartCom Ltd.
Details
Error: unable to get local issuer certificate.
Signature algorithm
sha1WithRSAEncryption
Public key
2048 bit RSA
Valid from
2007-10-24 20:54:17 UTC
Valid to
2017-10-24 20:54:17 UTC
CRL
http://crl.startssl.com/sfsca.crl
OCSP
http://ocsp.startssl.com/ca
F6:91:FC:87:EF:B3:13:53:54:22:5A:10:E1:27:E9:11:D1:C7:F8:CF
Subject
commonName
StartCom Certification Authority
countryName
IL
organizationalUnitName
Secure Digital Certificate Signing
organizationName
StartCom Ltd.
Details
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2006-09-17 19:46:37 UTC
Valid to
2036-09-17 19:46:37 UTC
CRL
http://crl.startssl.com/ca-g2.crl
OCSP
http://ocsp.startssl.com/ca-g2
14:E8:0D:AF:47:BB:F6:44:5D:21:F2:2F:C1:8C:B4:56:93:3F:56:8D
Subject
commonName
StartCom Certification Authority G2
countryName
IL
organizationName
StartCom Ltd.
Details
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2010-01-01 01:00:00 UTC
Valid to
2039-12-31 23:59:00 UTC
BB:25:A3:D8:49:30:0F:2E:87:9F:74:36:43:6D:12:94:4A:F5:5A:DA

Protocols

SSLv2 No
SSLv3 Yes
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
AES256-GCM-SHA384 (0x9d) 256 No -
CAMELLIA256-SHA (0x84) 256 No -
AES256-SHA256 (0x3d) 256 No -
AES256-SHA (0x35) 256 No -
RC4-MD5 (0x10080) 128 No -
AES128-GCM-SHA256 (0x9c) 128 No -
SEED-SHA (0x96) 128 No -
CAMELLIA128-SHA (0x41) 128 No -
AES128-SHA256 (0x3c) 128 No -
AES128-SHA (0x2f) 128 No -
RC4-SHA (0x5) 128 No -
DES-CBC3-SHA (0xa) WEAK 112 No -

Badge

xmpp.net score

Want to show this result on your webpage? Add this:

<a href='https://xmpp.net/result.php?domain=khvmntk.ru&amp;type=server'><img src='https://xmpp.net/badge.php?domain=khvmntk.ru' alt='xmpp.net score' /></a>