IM Observatory server report for s3m.it

Test started 2018-12-18 19:49:01 UTC .

Show client to server result | Permalink to this report | Retest

s3m.it:5269
Grade T: Certificate is not trusted, but ignoring trust would score an A.
s3m.it:5269
StartTLS
ALLOWED

SRV records _xmpp-server._tcp.s3m.it BOGUS DNSSEC

Priority Weight Port Server

TLSA records

Certificates

Subject
commonName
openmpt.org
Details
Error: unable to get local issuer certificate.
Error: unable to verify the first certificate.
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2018-03-01 11:42:15 UTC
Valid to
2018-05-30 11:42:15 UTC
OCSP
http://ocsp.int-x3.letsencrypt.org
Valid for s3m.it
YES
A1:2D:AB:50:94:62:7B:8A:F7:ED:2A:59:6A:D7:19:6F:1B:FE:F3:ED
Subject Alternative Names
DNSName
bugs.openmpt.org
DNSName
buildbot.openmpt.org
DNSName
compo.openmpt.org
DNSName
download.openmpt.org
DNSName
forum.openmpt.org
DNSName
lib.openmpt.org
DNSName
music.openmpt.org
DNSName
openid.openmpt.org
DNSName
openmpt.org
DNSName
resources.openmpt.org
DNSName
s3m.it Matches
DNSName
source.openmpt.org
DNSName
update.openmpt.org
DNSName
wiki.openmpt.org
DNSName
wikide.openmpt.org
DNSName
www.openmpt.org
DNSName
www.s3m.it
Subject
commonName
Let's Encrypt Authority X3
countryName
US
organizationName
Let's Encrypt
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2016-10-06 15:43:55 UTC
Valid to
2021-10-06 15:43:55 UTC
CRL
http://crl.root-x1.letsencrypt.org
OCSP
http://ocsp.root-x1.letsencrypt.org/
1B:23:67:53:54:FC:AD:90:11:9D:88:07:50:15:EA:17:AD:D5:27:D8
Subject
commonName
ISRG Root X1
countryName
US
organizationName
Internet Security Research Group
Details
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2015-06-04 11:04:38 UTC
Valid to
2035-06-04 11:04:38 UTC
CA:BD:2A:79:A1:07:6A:31:F2:1D:25:36:35:CB:03:9D:43:29:A5:E8

Protocols

SSLv2 No
SSLv3 No
TLSv1 No
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
DHE-RSA-AES256-GCM-SHA384 (0x9f) 256 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-AES256-SHA256 (0x6b) 256 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-AES256-SHA (0x39) 256 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-CAMELLIA256-SHA (0x88) 256 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-AES128-GCM-SHA256 (0x9e) 128 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-AES128-SHA256 (0x67) 128 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-AES128-SHA (0x33) 128 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-CAMELLIA128-SHA (0x45) 128 Yes Diffie-Hellman:
Bitsize: 2048
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA384 (0xc028) 256 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: secp384r1
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA256 (0xc027) 128 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: secp384r1
AES256-GCM-SHA384 (0x9d) 256 No -
AES256-SHA256 (0x3d) 256 No -
AES256-SHA (0x35) 256 No -
CAMELLIA256-SHA (0x84) 256 No -
AES128-GCM-SHA256 (0x9c) 128 No -
AES128-SHA256 (0x3c) 128 No -
AES128-SHA (0x2f) 128 No -
CAMELLIA128-SHA (0x41) 128 No -

Badge

xmpp.net score

Want to show this result on your webpage? Add this:

<a href='https://xmpp.net/result.php?domain=s3m.it&amp;type=server'><img src='https://xmpp.net/badge.php?domain=s3m.it' alt='xmpp.net score' /></a>