IM Observatory client report for xmpp.zone

Test started 2022-03-01 11:40:54 UTC .

Show server to server result | Permalink to this report |

xmpp.xmpp.zone:5222

Certificate score:

Key exchange score:

100

Protocol score:

100

Cipher score:

Grade:

Grade T: Certificate is not trusted, but ignoring trust would score an A.

xmpp.xmpp.zone:443

Certificate score:

Key exchange score:

100

Protocol score:

100

Cipher score:

Grade:

Grade T: Certificate is not trusted, but ignoring trust would score an A.

Show all 2 SRV targets

xmpp.xmpp.zone:5222

StartTLS: REQUIRED

SASL

Pre-TLS

None

Post-TLS

xmpp.xmpp.zone:443

StartTLS: REQUIRED

SASL

Pre-TLS

None

Post-TLS

Show all 2 SRV targets

SRV records _xmpp-client._tcp.xmpp.zone DNSSEC

Priority	Weight	Port	Server
300	0	5222	xmpp.xmpp.zone
600	0	443	xmpp.xmpp.zone

TLSA records

Verified	Usage	Selector	Match	Data
YES	domain-issued certificate	full	SHA-512	21:4A:C5:19:67:67:A5:4D:9B:D3:4F:C3:A4:DC:A3:76:95:A2:EA:C4:B2:1C:C4:E9:76:5B:63:5B:40:C5:DD:F5:C0:AF:0A:CA:87:58:15:64:4B:A4:9A:0D:38:6E:75:CF:3E:F4:F1:D1:43:FE:97:6D:16:91:0F:5D:F8:09:5F:9F

Verified	Usage	Selector	Match	Data
YES	domain-issued certificate	full	SHA-512	21:4A:C5:19:67:67:A5:4D:9B:D3:4F:C3:A4:DC:A3:76:95:A2:EA:C4:B2:1C:C4:E9:76:5B:63:5B:40:C5:DD:F5:C0:AF:0A:CA:87:58:15:64:4B:A4:9A:0D:38:6E:75:CF:3E:F4:F1:D1:43:FE:97:6D:16:91:0F:5D:F8:09:5F:9F

Show all 2 SRV targets

Certificates

Subject

commonName: xmpp.zone

Details

Signature algorithm

sha256WithRSAEncryption

Public key

4096 bit RSA

Valid from

2022-02-11 01:41:02 UTC

Valid to

2022-05-12 01:41:01 UTC

OCSP

http://r3.o.lencr.org

Valid for xmpp.zone

YES

49:FE:2C:98:B9:5F:F1:03:9E:15:72:10:A7:9B:56:9A:47:6C:1F:72

Subject Alternative Names

DNSName: conference.xmpp.zone
DNSName: echo.xmpp.zone
DNSName: http.xmpp.zone
DNSName: proxy.xmpp.zone
DNSName: pubsub.xmpp.zone
DNSName: upload.xmpp.zone
DNSName: xmpp.xmpp.zone
DNSName: xmpp.zone Matches

Subject

commonName: R3
countryName: US
organizationName: Let's Encrypt

Details

Signature algorithm

sha256WithRSAEncryption

Public key

2048 bit RSA

Valid from

2020-09-04 00:00:00 UTC

Valid to

2025-09-15 16:00:00 UTC

CRL

http://x1.c.lencr.org/

A0:53:37:5B:FE:84:E8:B7:48:78:2C:7C:EE:15:82:7A:6A:F5:A4:05

Subject

commonName: ISRG Root X1
countryName: US
organizationName: Internet Security Research Group

Details

Signature algorithm

sha256WithRSAEncryption

Public key

4096 bit RSA

Valid from

2021-01-20 19:14:03 UTC

Valid to

2024-09-30 18:14:03 UTC

CRL

http://crl.identrust.com/DSTROOTCAX3CRL.crl

93:3C:6D:DE:E9:5C:9C:41:A4:0F:9F:50:49:3D:82:BE:03:AD:87:BF

Subject

commonName: DST Root CA X3
organizationName: Digital Signature Trust Co.

Details

Signature algorithm

sha1WithRSAEncryption

Public key

2048 bit RSA

Valid from

2000-09-30 21:12:19 UTC

Valid to

2021-09-30 14:01:15 UTC

DA:C9:02:4F:54:D8:F6:DF:94:93:5F:B1:73:26:38:CA:6A:D7:7C:13

Protocols

SSLv2	No
SSLv3	No
TLSv1	No
TLSv1.1	No
TLSv1.2	Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suite	Bitsize	Forward secrecy	Info
ECDHE-RSA-AES256-GCM-SHA384 (0xc030)	256	Yes	Curve: prime256v1
DHE-RSA-AES256-GCM-SHA384 (0x9f)	256	Yes	Diffie-Hellman: Bitsize: 4096
ECDHE-RSA-AES256-SHA384 (0xc028)	256	Yes	Curve: prime256v1
DHE-RSA-AES256-SHA256 (0x6b)	256	Yes	Diffie-Hellman: Bitsize: 4096
ECDHE-RSA-AES256-SHA (0xc014)	256	Yes	Curve: prime256v1
DHE-RSA-AES256-SHA (0x39)	256	Yes	Diffie-Hellman: Bitsize: 4096
DHE-RSA-CAMELLIA256-SHA (0x88)	256	Yes	Diffie-Hellman: Bitsize: 4096
AES256-GCM-SHA384 (0x9d)	256	No	-
AES256-SHA256 (0x3d)	256	No	-
AES256-SHA (0x35)	256	No	-
CAMELLIA256-SHA (0x84)	256	No	-
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f)	128	Yes	Curve: prime256v1
DHE-RSA-AES128-GCM-SHA256 (0x9e)	128	Yes	Diffie-Hellman: Bitsize: 4096
ECDHE-RSA-AES128-SHA256 (0xc027)	128	Yes	Curve: prime256v1
DHE-RSA-AES128-SHA256 (0x67)	128	Yes	Diffie-Hellman: Bitsize: 4096
ECDHE-RSA-AES128-SHA (0xc013)	128	Yes	Curve: prime256v1
DHE-RSA-AES128-SHA (0x33)	128	Yes	Diffie-Hellman: Bitsize: 4096
DHE-RSA-CAMELLIA128-SHA (0x45)	128	Yes	Diffie-Hellman: Bitsize: 4096
AES128-GCM-SHA256 (0x9c)	128	No	-
AES128-SHA256 (0x3c)	128	No	-
AES128-SHA (0x2f)	128	No	-
CAMELLIA128-SHA (0x41)	128	No	-

Certificates

Subject

commonName: xmpp.zone

Details

Signature algorithm

sha256WithRSAEncryption

Public key

4096 bit RSA

Valid from

2022-02-11 01:41:02 UTC

Valid to

2022-05-12 01:41:01 UTC

OCSP

http://r3.o.lencr.org

49:FE:2C:98:B9:5F:F1:03:9E:15:72:10:A7:9B:56:9A:47:6C:1F:72

Subject Alternative Names

DNSName: conference.xmpp.zone
DNSName: echo.xmpp.zone
DNSName: http.xmpp.zone
DNSName: proxy.xmpp.zone
DNSName: pubsub.xmpp.zone
DNSName: upload.xmpp.zone
DNSName: xmpp.xmpp.zone
DNSName: xmpp.zone

Subject

commonName: R3
countryName: US
organizationName: Let's Encrypt

Details

Signature algorithm

sha256WithRSAEncryption

Public key

2048 bit RSA

Valid from

2020-09-04 00:00:00 UTC

Valid to

2025-09-15 16:00:00 UTC

CRL

http://x1.c.lencr.org/

A0:53:37:5B:FE:84:E8:B7:48:78:2C:7C:EE:15:82:7A:6A:F5:A4:05

Subject

commonName: ISRG Root X1
countryName: US
organizationName: Internet Security Research Group

Details

Signature algorithm

sha256WithRSAEncryption

Public key

4096 bit RSA

Valid from

2021-01-20 19:14:03 UTC

Valid to

2024-09-30 18:14:03 UTC

CRL

http://crl.identrust.com/DSTROOTCAX3CRL.crl

93:3C:6D:DE:E9:5C:9C:41:A4:0F:9F:50:49:3D:82:BE:03:AD:87:BF

Subject

commonName: DST Root CA X3
organizationName: Digital Signature Trust Co.

Details

Signature algorithm

sha1WithRSAEncryption

Public key

2048 bit RSA

Valid from

2000-09-30 21:12:19 UTC

Valid to

2021-09-30 14:01:15 UTC

DA:C9:02:4F:54:D8:F6:DF:94:93:5F:B1:73:26:38:CA:6A:D7:7C:13

Protocols

SSLv2	No
SSLv3	No
TLSv1	No
TLSv1.1	No
TLSv1.2	Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suite	Bitsize	Forward secrecy	Info
ECDHE-RSA-AES256-GCM-SHA384 (0xc030)	256	Yes	Curve: prime256v1
DHE-RSA-AES256-GCM-SHA384 (0x9f)	256	Yes	Diffie-Hellman: Bitsize: 4096
ECDHE-RSA-AES256-SHA384 (0xc028)	256	Yes	Curve: prime256v1
DHE-RSA-AES256-SHA256 (0x6b)	256	Yes	Diffie-Hellman: Bitsize: 4096
ECDHE-RSA-AES256-SHA (0xc014)	256	Yes	Curve: prime256v1
DHE-RSA-AES256-SHA (0x39)	256	Yes	Diffie-Hellman: Bitsize: 4096
DHE-RSA-CAMELLIA256-SHA (0x88)	256	Yes	Diffie-Hellman: Bitsize: 4096
AES256-GCM-SHA384 (0x9d)	256	No	-
AES256-SHA256 (0x3d)	256	No	-
AES256-SHA (0x35)	256	No	-
CAMELLIA256-SHA (0x84)	256	No	-
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f)	128	Yes	Curve: prime256v1
DHE-RSA-AES128-GCM-SHA256 (0x9e)	128	Yes	Diffie-Hellman: Bitsize: 4096
ECDHE-RSA-AES128-SHA256 (0xc027)	128	Yes	Curve: prime256v1
DHE-RSA-AES128-SHA256 (0x67)	128	Yes	Diffie-Hellman: Bitsize: 4096
ECDHE-RSA-AES128-SHA (0xc013)	128	Yes	Curve: prime256v1
DHE-RSA-AES128-SHA (0x33)	128	Yes	Diffie-Hellman: Bitsize: 4096
DHE-RSA-CAMELLIA128-SHA (0x45)	128	Yes	Diffie-Hellman: Bitsize: 4096
AES128-GCM-SHA256 (0x9c)	128	No	-
AES128-SHA256 (0x3c)	128	No	-
AES128-SHA (0x2f)	128	No	-
CAMELLIA128-SHA (0x41)	128	No	-

Show all 2 SRV targets

Badge

Want to show this result on your webpage? Add this:

<a href='https://xmpp.net/result.php?domain=xmpp.zone&amp;type=client'><img src='https://xmpp.net/badge.php?domain=xmpp.zone' alt='xmpp.net score' /></a>

IM Observatory client report for xmpp.zone

Score

xmpp.xmpp.zone:5222

xmpp.xmpp.zone:443

General

xmpp.xmpp.zone:5222

SASL

Pre-TLS

Post-TLS

xmpp.xmpp.zone:443

SASL

Pre-TLS

Post-TLS

DNS

SRV records _xmpp-client._tcp.xmpp.zone DNSSEC

TLSA records

_5222._tcp.xmpp.xmpp.zone DNSSEC

_443._tcp.xmpp.xmpp.zone DNSSEC

TLS

xmpp.xmpp.zone:5222

Certificates

#0 xmpp.zone

Subject

Details

Subject Alternative Names

#1 R3

Subject

Details

#2 ISRG Root X1

Subject

Details

DST Root CA X3

Subject

Details

Protocols

Ciphers

xmpp.xmpp.zone:443

Certificates

#0 xmpp.zone

Subject

Details

Subject Alternative Names

#1 R3

Subject

Details

#2 ISRG Root X1

Subject

Details

DST Root CA X3

Subject

Details

Protocols

Ciphers

Badge