IM Observatory client report for nlnet.nl

Test started 2018-03-04 13:53:05 UTC .

Show server to server result | Permalink to this report | Retest

xmpp.nlnet.nl:5222
Grade T: Certificate is not trusted, but ignoring trust would score an A.
xmpp.nlnet.nl:5222
StartTLS
REQUIRED

SASL

Pre-TLS

None

Post-TLS
DIGEST-MD5
PLAIN
SCRAM-SHA-1

SRV records _xmpp-client._tcp.nlnet.nl DNSSEC

Priority Weight Port Server
5 0 5222 xmpp.nlnet.nl

TLSA records

Certificates

Subject
commonName
*.nlnet.nl
organizationalUnitName
Domain Control Validated
Details
Error: certificate has expired.
Signature algorithm
sha256WithRSAEncryption
Public key
3072 bit RSA
Valid from
2016-04-06 14:37:01 UTC
Valid to
2017-05-08 14:28:28 UTC
CRL
http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl
OCSP
http://ocsp2.globalsign.com/gsdomainvalsha2g2
Valid for nlnet.nl
YES
3D:15:B5:A8:65:97:D5:08:28:3E:A8:F8:70:F8:BD:5D:74:EA:0C:C6
Subject Alternative Names
DNSName
*.nlnet.nl
DNSName
nlnet.nl Matches
Subject
commonName
GlobalSign Domain Validation CA - SHA256 - G2
countryName
BE
organizationName
GlobalSign nv-sa
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2011-08-02 10:00:00 UTC
Valid to
2022-08-02 10:00:00 UTC
CRL
http://crl.globalsign.net/root-r3.crl
OCSP
http://ocsp2.globalsign.com/rootr3
BA:60:74:C3:A2:5F:99:0B:9D:7A:11:A6:59:C4:F7:82:1C:92:FF:10
Subject
commonName
GlobalSign
organizationalUnitName
GlobalSign Root CA - R3
organizationName
GlobalSign
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2009-03-18 10:00:00 UTC
Valid to
2029-03-18 10:00:00 UTC
D6:9B:56:11:48:F0:1C:77:C5:45:78:C1:09:26:DF:5B:85:69:76:AD

Protocols

SSLv2 No
SSLv3 No
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA384 (0xc028) 256 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: secp384r1
DHE-RSA-AES256-GCM-SHA384 (0x9f) 256 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-CAMELLIA256-SHA (0x88) 256 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-AES256-SHA256 (0x6b) 256 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-AES256-SHA (0x39) 256 Yes Diffie-Hellman:
Bitsize: 2048
AES256-GCM-SHA384 (0x9d) 256 No -
CAMELLIA256-SHA (0x84) 256 No -
AES256-SHA256 (0x3d) 256 No -
AES256-SHA (0x35) 256 No -
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA256 (0xc027) 128 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: secp384r1
DHE-RSA-AES128-GCM-SHA256 (0x9e) 128 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-AES128-SHA256 (0x67) 128 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-CAMELLIA128-SHA (0x45) 128 Yes Diffie-Hellman:
Bitsize: 2048
DHE-RSA-AES128-SHA (0x33) 128 Yes Diffie-Hellman:
Bitsize: 2048
AES128-GCM-SHA256 (0x9c) 128 No -
CAMELLIA128-SHA (0x41) 128 No -
AES128-SHA256 (0x3c) 128 No -
AES128-SHA (0x2f) 128 No -

Badge

xmpp.net score

Want to show this result on your webpage? Add this:

<a href='https://xmpp.net/result.php?domain=nlnet.nl&amp;type=client'><img src='https://xmpp.net/badge.php?domain=nlnet.nl' alt='xmpp.net score' /></a>