IM Observatory client report for bafh.org

Test started 2018-07-17 12:41:30 UTC .

Show server to server result | Permalink to this report | Retest

xmpp.zerofill.de:5222
Error: This server refused (some of) our tests due to policy reasons.
xmpp.zerofill.de:80
Error: This server refused (some of) our tests due to policy reasons.
v4.xmpp.zerofill.de:5222
Error: This server refused (some of) our tests due to policy reasons.
v6.xmpp.zerofill.de:5222
Error: Connection failed.

Show all 4 SRV targets

xmpp.zerofill.de:5222
Version
Prosody hg:c58be87e62d0
StartTLS
REQUIRED

SASL

Pre-TLS

None

Post-TLS
PLAIN
SCRAM-SHA-1
SCRAM-SHA-1-PLUS

xmpp.zerofill.de:80
Version
Prosody hg:c58be87e62d0
StartTLS
REQUIRED

SASL

Pre-TLS

None

Post-TLS
PLAIN
SCRAM-SHA-1
SCRAM-SHA-1-PLUS

v4.xmpp.zerofill.de:5222
Version
Prosody hg:c58be87e62d0
StartTLS
REQUIRED

SASL

Pre-TLS

None

Post-TLS
PLAIN
SCRAM-SHA-1
SCRAM-SHA-1-PLUS

v6.xmpp.zerofill.de:5222
Version
Prosody hg:c58be87e62d0

SASL

Pre-TLS

None

Post-TLS

None


Show all 4 SRV targets

SRV records _xmpp-client._tcp.bafh.org NO DNSSEC

Priority Weight Port Server
10 1 5222 xmpp.zerofill.de
20 1 80 xmpp.zerofill.de
31 1 5222 v4.xmpp.zerofill.de
30 1 5222 v6.xmpp.zerofill.de

TLSA records

Show all 4 SRV targets

Certificates

Subject
commonName
bafh.org
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2018-05-13 01:23:05 UTC
Valid to
2018-08-11 01:23:05 UTC
OCSP
http://ocsp.int-x3.letsencrypt.org
Valid for bafh.org
YES
08:91:21:38:85:AB:AE:72:7C:19:E3:EB:9B:6F:2E:8F:FF:6C:C1:43
Subject Alternative Names
DNSName
*.bafh.org
DNSName
bafh.org Matches
Subject
commonName
Let's Encrypt Authority X3
countryName
US
organizationName
Let's Encrypt
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2016-03-17 16:40:46 UTC
Valid to
2021-03-17 16:40:46 UTC
CRL
http://crl.identrust.com/DSTROOTCAX3CRL.crl
OCSP
http://isrg.trustid.ocsp.identrust.com
E6:A3:B4:5B:06:2D:50:9B:33:82:28:2D:19:6E:FE:97:D5:95:6C:CB
Subject
commonName
DST Root CA X3
organizationName
Digital Signature Trust Co.
Details
Signature algorithm
sha1WithRSAEncryption
Public key
2048 bit RSA
Valid from
2000-09-30 21:12:19 UTC
Valid to
2021-09-30 14:01:15 UTC
DA:C9:02:4F:54:D8:F6:DF:94:93:5F:B1:73:26:38:CA:6A:D7:7C:13

Protocols

SSLv2 No
SSLv3 No
TLSv1 No
TLSv1.1 No
TLSv1.2 Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: secp384r1
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA384 (0xc028) 256 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA256 (0xc027) 128 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: secp384r1
AES256-GCM-SHA384 (0x9d) 256 No -
AES128-GCM-SHA256 (0x9c) 128 No -
AES256-SHA256 (0x3d) 256 No -
AES128-SHA256 (0x3c) 128 No -
AES256-SHA (0x35) 256 No -
CAMELLIA256-SHA (0x84) 256 No -
AES128-SHA (0x2f) 128 No -
CAMELLIA128-SHA (0x41) 128 No -

Certificates

Subject
commonName
bafh.org
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2018-05-13 01:23:05 UTC
Valid to
2018-08-11 01:23:05 UTC
OCSP
http://ocsp.int-x3.letsencrypt.org
08:91:21:38:85:AB:AE:72:7C:19:E3:EB:9B:6F:2E:8F:FF:6C:C1:43
Subject Alternative Names
DNSName
*.bafh.org
DNSName
bafh.org
Subject
commonName
Let's Encrypt Authority X3
countryName
US
organizationName
Let's Encrypt
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2016-03-17 16:40:46 UTC
Valid to
2021-03-17 16:40:46 UTC
CRL
http://crl.identrust.com/DSTROOTCAX3CRL.crl
OCSP
http://isrg.trustid.ocsp.identrust.com
E6:A3:B4:5B:06:2D:50:9B:33:82:28:2D:19:6E:FE:97:D5:95:6C:CB
Subject
commonName
DST Root CA X3
organizationName
Digital Signature Trust Co.
Details
Signature algorithm
sha1WithRSAEncryption
Public key
2048 bit RSA
Valid from
2000-09-30 21:12:19 UTC
Valid to
2021-09-30 14:01:15 UTC
DA:C9:02:4F:54:D8:F6:DF:94:93:5F:B1:73:26:38:CA:6A:D7:7C:13

Protocols

SSLv2 No
SSLv3 No
TLSv1 No
TLSv1.1 No
TLSv1.2 Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: secp384r1
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA384 (0xc028) 256 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA256 (0xc027) 128 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: secp384r1
AES256-GCM-SHA384 (0x9d) 256 No -
AES128-GCM-SHA256 (0x9c) 128 No -
AES256-SHA256 (0x3d) 256 No -
AES128-SHA256 (0x3c) 128 No -
AES256-SHA (0x35) 256 No -
CAMELLIA256-SHA (0x84) 256 No -
AES128-SHA (0x2f) 128 No -
CAMELLIA128-SHA (0x41) 128 No -

Certificates

Subject
commonName
bafh.org
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2018-05-13 01:23:05 UTC
Valid to
2018-08-11 01:23:05 UTC
OCSP
http://ocsp.int-x3.letsencrypt.org
08:91:21:38:85:AB:AE:72:7C:19:E3:EB:9B:6F:2E:8F:FF:6C:C1:43
Subject Alternative Names
DNSName
*.bafh.org
DNSName
bafh.org
Subject
commonName
Let's Encrypt Authority X3
countryName
US
organizationName
Let's Encrypt
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2016-03-17 16:40:46 UTC
Valid to
2021-03-17 16:40:46 UTC
CRL
http://crl.identrust.com/DSTROOTCAX3CRL.crl
OCSP
http://isrg.trustid.ocsp.identrust.com
E6:A3:B4:5B:06:2D:50:9B:33:82:28:2D:19:6E:FE:97:D5:95:6C:CB
Subject
commonName
DST Root CA X3
organizationName
Digital Signature Trust Co.
Details
Signature algorithm
sha1WithRSAEncryption
Public key
2048 bit RSA
Valid from
2000-09-30 21:12:19 UTC
Valid to
2021-09-30 14:01:15 UTC
DA:C9:02:4F:54:D8:F6:DF:94:93:5F:B1:73:26:38:CA:6A:D7:7C:13

Protocols

SSLv2 No
SSLv3 No
TLSv1 No
TLSv1.1 No
TLSv1.2 Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: secp384r1
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA384 (0xc028) 256 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA256 (0xc027) 128 Yes Curve: secp384r1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: secp384r1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: secp384r1
AES256-GCM-SHA384 (0x9d) 256 No -
AES128-GCM-SHA256 (0x9c) 128 No -
AES256-SHA256 (0x3d) 256 No -
AES128-SHA256 (0x3c) 128 No -
AES256-SHA (0x35) 256 No -
CAMELLIA256-SHA (0x84) 256 No -
AES128-SHA (0x2f) 128 No -
CAMELLIA128-SHA (0x41) 128 No -
Error: Connection failed.

Show all 4 SRV targets

Badge

IM observatory score

Want to show this result on your webpage? Add this:

<a href='https://check.messaging.one/result.php?domain=bafh.org&amp;type=client'>
  <img src='https://check.messaging.one/badge.php?domain=bafh.org' alt='IM observatory score' />
</a>