IM Observatory server report for lan-advice.com

Test started 2019-01-28 22:53:07 UTC .

Show client to server result | Permalink to this report |

cup1.lan-advice.com:5269
Grade T: Certificate is not trusted, but ignoring trust would score an A.
cup2.lan-advice.com:5269
Grade T: Certificate is not trusted, but ignoring trust would score an A.

Show all 2 SRV targets

cup1.lan-advice.com:5269
StartTLS
ALLOWED

cup2.lan-advice.com:5269
StartTLS
ALLOWED

Show all 2 SRV targets

SRV records _xmpp-server._tcp.lan-advice.com NO DNSSEC

Priority Weight Port Server
10 10 5269 cup1.lan-advice.com
20 20 5269 cup2.lan-advice.com

TLSA records

Show all 2 SRV targets

Certificates

Subject
commonName
cup1.lan-advice.com
countryName
FR
localityName
LAN
organizationalUnitName
LAN
organizationName
LAN
stateOrProvinceName
LAN
Details
Signature algorithm
sha512WithRSAEncryption
Public key
2048 bit RSA
Valid from
2018-07-10 15:04:31 UTC
Valid to
2020-07-09 15:04:31 UTC
CRL
http://cert.lan-advice.com/CertEnroll/lan-advice-CERT-CA.crl
OCSP
http://cert.lan-advice.com/ocsp
Valid for lan-advice.com
NO
E2:A5:91:D5:38:FB:FB:A3:56:67:6E:96:D9:F6:93:52:BE:C4:F9:77
Subject Alternative Names
DNSName
cup1.lan-advice.com
Subject
commonName
lan-advice-CERT-CA
domainComponent
com
domainComponent
lan-advice
Details
Error: self signed certificate in certificate chain.
Signature algorithm
sha512WithRSAEncryption
Public key
2048 bit RSA
Valid from
2018-05-17 12:32:46 UTC
Valid to
2023-05-17 12:42:44 UTC
1E:46:A4:71:F7:D5:53:AB:ED:9A:78:11:85:50:45:4F:0D:8E:E6:72

Protocols

SSLv2 No
SSLv3 No
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: prime256v1
ECDHE-ECDSA-AES256-GCM-SHA384 (0xc02c) 256 Yes Curve: prime256v1
ECDHE-RSA-AES256-SHA384 (0xc028) 256 Yes Curve: prime256v1
ECDHE-ECDSA-AES256-SHA384 (0xc024) 256 Yes Curve: prime256v1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: prime256v1
ECDHE-ECDSA-AES256-SHA (0xc00a) 256 Yes Curve: prime256v1
AES256-GCM-SHA384 (0x9d) 256 No -
CAMELLIA256-SHA (0x84) 256 No -
AES256-SHA256 (0x3d) 256 No -
AES256-SHA (0x35) 256 No -
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: prime256v1
ECDHE-ECDSA-AES128-GCM-SHA256 (0xc02b) 128 Yes Curve: prime256v1
ECDHE-RSA-AES128-SHA256 (0xc027) 128 Yes Curve: prime256v1
ECDHE-ECDSA-AES128-SHA256 (0xc023) 128 Yes Curve: prime256v1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: prime256v1
ECDHE-ECDSA-AES128-SHA (0xc009) 128 Yes Curve: prime256v1
AES128-GCM-SHA256 (0x9c) 128 No -
CAMELLIA128-SHA (0x41) 128 No -
AES128-SHA256 (0x3c) 128 No -
AES128-SHA (0x2f) 128 No -

Certificates

Subject
commonName
cup2.lan-advice.com
countryName
FR
localityName
LAN
organizationalUnitName
LAN
organizationName
LAN
stateOrProvinceName
LAN
Details
Signature algorithm
sha512WithRSAEncryption
Public key
2048 bit RSA
Valid from
2018-07-10 15:16:40 UTC
Valid to
2020-07-09 15:16:40 UTC
CRL
http://cert.lan-advice.com/CertEnroll/lan-advice-CERT-CA.crl
OCSP
http://cert.lan-advice.com/ocsp
42:30:E7:82:86:92:7F:A9:45:C1:24:54:EE:D4:16:C4:A3:C4:A5:15
Subject Alternative Names
DNSName
cup2.lan-advice.com
Subject
commonName
lan-advice-CERT-CA
domainComponent
com
domainComponent
lan-advice
Details
Error: self signed certificate in certificate chain.
Signature algorithm
sha512WithRSAEncryption
Public key
2048 bit RSA
Valid from
2018-05-17 12:32:46 UTC
Valid to
2023-05-17 12:42:44 UTC
1E:46:A4:71:F7:D5:53:AB:ED:9A:78:11:85:50:45:4F:0D:8E:E6:72

Protocols

SSLv2 No
SSLv3 No
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: prime256v1
ECDHE-ECDSA-AES256-GCM-SHA384 (0xc02c) 256 Yes Curve: prime256v1
ECDHE-RSA-AES256-SHA384 (0xc028) 256 Yes Curve: prime256v1
ECDHE-ECDSA-AES256-SHA384 (0xc024) 256 Yes Curve: prime256v1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: prime256v1
ECDHE-ECDSA-AES256-SHA (0xc00a) 256 Yes Curve: prime256v1
AES256-GCM-SHA384 (0x9d) 256 No -
CAMELLIA256-SHA (0x84) 256 No -
AES256-SHA256 (0x3d) 256 No -
AES256-SHA (0x35) 256 No -
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: prime256v1
ECDHE-ECDSA-AES128-GCM-SHA256 (0xc02b) 128 Yes Curve: prime256v1
ECDHE-RSA-AES128-SHA256 (0xc027) 128 Yes Curve: prime256v1
ECDHE-ECDSA-AES128-SHA256 (0xc023) 128 Yes Curve: prime256v1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: prime256v1
ECDHE-ECDSA-AES128-SHA (0xc009) 128 Yes Curve: prime256v1
AES128-GCM-SHA256 (0x9c) 128 No -
CAMELLIA128-SHA (0x41) 128 No -
AES128-SHA256 (0x3c) 128 No -
AES128-SHA (0x2f) 128 No -

Show all 2 SRV targets

Badge

xmpp.net score

Want to show this result on your webpage? Add this:

<a href='https://xmpp.net/result.php?domain=lan-advice.com&amp;type=server'><img src='https://xmpp.net/badge.php?domain=lan-advice.com' alt='xmpp.net score' /></a>