IM Observatory server report for spodhuis.org

Test started 2022-02-01 21:24:38 UTC .

Show client to server result | Permalink to this report |

xmpp-s2s.spodhuis.org:5269
Grade T: Certificate is not trusted, but ignoring trust would score an A.
xmpp-s2s.spodhuis.org:5269
StartTLS
REQUIRED

SRV records _xmpp-server._tcp.spodhuis.org DNSSEC

Priority Weight Port Server
10 2 5269 xmpp-s2s.spodhuis.org

TLSA records

Verified Usage Selector Match Data
NO trust anchor assertion full SHA-256
11:F0:58:F6:1F:97:B8:AD:C6:6E:F4:80:1F:91:8C:71:B1:0E:5C:1E:3D:39:AF:DE:10:40:8B:30:26:64:7E:F1
NO trust anchor assertion full SHA-256
EA:99:06:3A:0A:3B:DA:97:27:03:2C:F8:2D:A2:38:69:8B:90:BA:72:93:00:70:3D:39:56:94:36:35:F9:64:88
NO trust anchor assertion SPKI SHA-256
27:6F:E8:A8:C4:EC:76:11:56:5B:F9:FC:E6:DC:AC:E9:BE:32:0C:1B:5B:EA:27:59:6B:22:04:07:1E:D0:4F:10
YES trust anchor assertion SPKI SHA-256
8D:02:53:6C:88:74:82:BC:34:FF:54:E4:1D:2B:A6:59:BF:85:B3:41:A0:A2:0A:FA:DB:58:13:DC:FB:CF:28:6D
NO trust anchor assertion SPKI SHA-256
BD:93:6E:72:B2:12:EF:6F:77:31:02:C6:B7:7D:38:F9:42:97:32:2E:FC:25:39:6B:C3:27:94:22:E0:C8:92:70
NO trust anchor assertion SPKI SHA-256
E5:54:5E:21:13:47:24:18:91:C5:54:A0:39:34:CD:E9:B7:49:66:4A:59:D2:6D:61:5F:E5:8F:77:99:0F:2D:03

Certificates

Subject
commonName
spodhuis.org
Details
Signature algorithm
sha256WithRSAEncryption
Public key
256 bit EC
Valid from
2022-01-04 13:42:20 UTC
Valid to
2022-04-04 13:42:19 UTC
OCSP
http://r3.o.lencr.org
Valid for spodhuis.org
YES
81:76:73:7D:39:C1:4E:C3:DF:96:81:FA:C8:17:4D:6C:2E:72:6D:98
Subject Alternative Names
DNSName
chat.spodhuis.org
DNSName
conference.spodhuis.org
DNSName
proxy-chatfiles.spodhuis.org
DNSName
pubsub.xmpp.spodhuis.org
DNSName
spodhuis.org Matches
DNSName
xmpp-s2s.spodhuis.org
DNSName
xmpp.spodhuis.org
Subject
commonName
R3
countryName
US
organizationName
Let's Encrypt
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2020-09-04 00:00:00 UTC
Valid to
2025-09-15 16:00:00 UTC
CRL
http://x1.c.lencr.org/
A0:53:37:5B:FE:84:E8:B7:48:78:2C:7C:EE:15:82:7A:6A:F5:A4:05
Subject
commonName
ISRG Root X1
countryName
US
organizationName
Internet Security Research Group
Details
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2021-01-20 19:14:03 UTC
Valid to
2024-09-30 18:14:03 UTC
CRL
http://crl.identrust.com/DSTROOTCAX3CRL.crl
93:3C:6D:DE:E9:5C:9C:41:A4:0F:9F:50:49:3D:82:BE:03:AD:87:BF
Subject
commonName
DST Root CA X3
organizationName
Digital Signature Trust Co.
Details
Signature algorithm
sha1WithRSAEncryption
Public key
2048 bit RSA
Valid from
2000-09-30 21:12:19 UTC
Valid to
2021-09-30 14:01:15 UTC
DA:C9:02:4F:54:D8:F6:DF:94:93:5F:B1:73:26:38:CA:6A:D7:7C:13

Protocols

SSLv2 No
SSLv3 No
TLSv1 No
TLSv1.1 No
TLSv1.2 Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-ECDSA-AES256-GCM-SHA384 (0xc02c) 256 Yes Curve: secp384r1
ECDHE-ECDSA-AES128-GCM-SHA256 (0xc02b) 128 Yes Curve: secp384r1
ECDHE-ECDSA-AES256-SHA384 (0xc024) 256 Yes Curve: secp384r1
ECDHE-ECDSA-AES128-SHA256 (0xc023) 128 Yes Curve: secp384r1
ECDHE-ECDSA-AES256-SHA (0xc00a) 256 Yes Curve: secp384r1
ECDHE-ECDSA-AES128-SHA (0xc009) 128 Yes Curve: secp384r1

Badge

xmpp.net score

Want to show this result on your webpage? Add this:

<a href='https://xmpp.net/result.php?domain=spodhuis.org&amp;type=server'><img src='https://xmpp.net/badge.php?domain=spodhuis.org' alt='xmpp.net score' /></a>