IM Observatory client report for voip.dioceseofcleveland.org
Test started 2019-01-06 14:19:37 UTC .
Show server to server result | Permalink to this report |
Score
voip.dioceseofcleveland.org:5222
Grade:
B
Server uses Diffie-Hellman parameters of < 2048 bits. Grade capped to B.
General
voip.dioceseofcleveland.org:5222
- StartTLS
- REQUIRED
SASL
Pre-TLS
| PLAIN |
Post-TLS
| PLAIN |
DNS
SRV records _xmpp-client._tcp.voip.dioceseofcleveland.org BOGUS DNSSEC
| Priority | Weight | Port | Server |
|---|
TLSA records
_5222._tcp.voip.dioceseofcleveland.org BOGUS DNSSEC
TLS
voip.dioceseofcleveland.org:5222
Certificates
#0 *.dioceseofcleveland.org
Subject
- commonName
- *.dioceseofcleveland.org
- organizationalUnitName
- Domain Control Validated
Details
- Signature algorithm
- sha256WithRSAEncryption
- Public key
- 2048 bit RSA
- Valid from
- 2018-07-11 15:22:11 UTC
- Valid to
- 2020-07-11 15:22:11 UTC
- CRL
- http://crl.starfieldtech.com/sfig2s1-113.crl
- OCSP
- http://ocsp.starfieldtech.com/
- Valid for voip.dioceseofcleveland.org
- YES
C3:BE:8B:51:31:CC:58:8B:58:30:D5:98:74:AF:A7:F5:2D:97:09:8C
Subject Alternative Names
- DNSName
- *.dioceseofcleveland.org
- DNSName
- dioceseofcleveland.org
#1 Starfield Secure Certificate Authority - G2
Subject
- commonName
- Starfield Secure Certificate Authority - G2
- countryName
- US
- localityName
- Scottsdale
- organizationalUnitName
- http://certs.starfieldtech.com/repository/
- organizationName
- Starfield Technologies, Inc.
- stateOrProvinceName
- Arizona
Details
- Signature algorithm
- sha256WithRSAEncryption
- Public key
- 2048 bit RSA
- Valid from
- 2011-05-03 07:00:00 UTC
- Valid to
- 2031-05-03 07:00:00 UTC
- CRL
- http://crl.starfieldtech.com/sfroot-g2.crl
- OCSP
- http://ocsp.starfieldtech.com/
7E:DC:37:6D:CF:D4:5E:6D:DF:08:2C:16:0D:F6:AC:21:83:5B:95:D4
#2 Starfield Root Certificate Authority - G2
Subject
- commonName
- Starfield Root Certificate Authority - G2
- countryName
- US
- localityName
- Scottsdale
- organizationName
- Starfield Technologies, Inc.
- stateOrProvinceName
- Arizona
Details
- Signature algorithm
- sha256WithRSAEncryption
- Public key
- 2048 bit RSA
- Valid from
- 2014-01-01 07:00:00 UTC
- Valid to
- 2031-05-30 07:00:00 UTC
- CRL
- http://crl.starfieldtech.com/sfroot.crl
- OCSP
- http://ocsp.starfieldtech.com/
95:65:B7:78:C8:A5:0E:B4:FE:FD:45:C8:A6:58:DD:E2:41:1E:AD:0A
#3 Starfield Technologies, Inc.
Subject
- countryName
- US
- organizationalUnitName
- Starfield Class 2 Certification Authority
- organizationName
- Starfield Technologies, Inc.
Details
- Signature algorithm
- sha1WithRSAEncryption
- Public key
- 2048 bit RSA
- Valid from
- 2004-06-29 17:39:16 UTC
- Valid to
- 2034-06-29 17:39:16 UTC
AD:7E:1C:28:B0:64:EF:8F:60:03:40:20:14:C3:D0:E3:37:0E:B5:8A
Protocols
| SSLv2 | No |
| SSLv3 | No |
| TLSv1 | Yes |
| TLSv1.1 | Yes |
| TLSv1.2 | Yes |
Ciphers
Server does respect the client's cipher ordering.
| Cipher suite | Bitsize | Forward secrecy | Info |
|---|---|---|---|
| ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) | 128 | Yes | Curve: sect571r1 |
| ECDHE-RSA-AES128-SHA256 (0xc027) | 128 | Yes | Curve: sect571r1 |
| ECDHE-RSA-AES128-SHA (0xc013) | 128 | Yes | Curve: sect571r1 |
| DHE-RSA-AES128-GCM-SHA256 (0x9e) | 128 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DHE-RSA-AES128-SHA256 (0x67) | 128 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DHE-RSA-AES128-SHA (0x33) | 128 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| AES128-GCM-SHA256 (0x9c) | 128 | No | - |
| AES128-SHA256 (0x3c) | 128 | No | - |
| AES128-SHA (0x2f) | 128 | No | - |
| ECDHE-RSA-DES-CBC3-SHA (0xc012) WEAK | 112 | Yes | Curve: sect571r1 |
| EDH-RSA-DES-CBC3-SHA (0x16) WEAK | 112 | Yes |
Diffie-Hellman: Group: RFC 2409 First Oakley Default Group Bitsize: 1024 |
| DES-CBC3-SHA (0xa) WEAK | 112 | No | - |
Badge
Want to show this result on your webpage? Add this:
<a href='https://xmpp.net/result.php?domain=voip.dioceseofcleveland.org&type=client'><img src='https://xmpp.net/badge.php?domain=voip.dioceseofcleveland.org' alt='xmpp.net score' /></a>