Version: 2.1.5 OpenSSL 3.5.5 27 Jan 2026 Connected to 167.179.167.166 Testing SSL server passbolt.lan.ddnsgeek.com on port 443 using SNI name passbolt.lan.ddnsgeek.com SSL/TLS Protocols: SSLv2 disabled SSLv3 disabled TLSv1.0 disabled TLSv1.1 disabled TLSv1.2 enabled TLSv1.3 enabled TLS Fallback SCSV: Server supports TLS Fallback SCSV TLS renegotiation: Session renegotiation not supported TLS Compression: Compression disabled Heartbleed: TLSv1.3 not vulnerable to heartbleed TLSv1.2 not vulnerable to heartbleed Supported Server Cipher(s): Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256 Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384 Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256 Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253 Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253 Server Key Exchange Group(s): TLSv1.3 128 bits secp256r1 (NIST P-256) TLSv1.3 192 bits secp384r1 (NIST P-384) TLSv1.3 260 bits secp521r1 (NIST P-521) TLSv1.3 128 bits x25519 TLSv1.2 128 bits secp256r1 (NIST P-256) TLSv1.2 192 bits secp384r1 (NIST P-384) TLSv1.2 260 bits secp521r1 (NIST P-521) TLSv1.2 128 bits x25519 SSL Certificate: Certificate blob: -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3 WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ +nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a 9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9 AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v +3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw YrarkoA+irmSeogYZBI+qKg= -----END CERTIFICATE----- Version: 2 Serial Number: 06:8c:58:25:86:ad:cb:b5:14:71:53:b8:79:36:ec:23:91:96 Signature Algorithm: sha256WithRSAEncryption Issuer: /C=US/O=Let's Encrypt/CN=R12 Not valid before: Apr 7 00:44:25 2026 GMT Not valid after: Jul 6 00:44:24 2026 GMT Subject: /CN=passbolt.lan.ddnsgeek.com Public Key Algorithm: NULL RSA Public Key: (4096 bit) RSA Public-Key: (4096 bit) Modulus: 00:ee:cc:fc:1d:df:68:45:fe:8c:13:03:3c:88:96: 4d:8c:4b:df:0b:5f:61:4b:d0:e3:b3:88:81:78:b5: bc:8a:3c:af:e1:4b:f7:58:2d:b1:4a:b9:e0:94:01: 43:53:81:07:3c:3f:c0:87:3c:f4:c6:09:12:9f:42: ec:4a:f5:e7:ec:1c:e0:6b:a3:0f:13:24:f0:8b:79: b9:e4:e5:00:63:bc:40:bc:20:49:fa:70:f3:57:48: 17:c0:f6:7f:8e:d4:05:9c:eb:08:e4:3d:3a:04:c3: c1:d9:bb:93:a4:0f:8c:04:55:f1:47:66:da:da:0d: 64:4a:47:75:fa:50:b8:96:f3:7e:57:b5:6c:06:27: 94:60:93:b8:2b:e6:0b:6b:d1:7c:b9:d1:d4:59:65: c3:f5:21:e8:50:09:36:04:cb:95:38:dd:5b:1f:aa: c2:64:5f:38:b9:fb:ee:6e:10:4d:2c:8a:7c:22:9f: 8f:61:41:dc:b4:4d:96:12:c7:ca:32:5a:d0:59:eb: bc:c2:ff:e1:76:f6:33:99:60:9a:55:fc:d2:17:fb: 7d:2f:cc:16:e6:51:84:63:ff:8d:22:f3:93:c5:b6: 48:29:0a:04:78:b9:ce:64:cb:53:32:b9:eb:1e:7d: 0a:5f:0d:fe:17:3b:72:97:f0:0d:c2:01:bd:3a:c3: 98:22:b6:c7:bf:39:09:c4:80:cb:2a:bd:41:c5:8b: 32:d8:5f:8f:c1:b5:04:77:52:6b:8d:0f:bb:38:cb: cf:f0:9f:a1:ac:c6:0f:3b:7b:01:ab:7d:6f:c8:c3: a3:08:7a:da:e4:68:68:83:74:57:a6:61:f3:0b:27: 50:c1:4e:c1:17:f4:4f:c0:5d:51:64:02:61:f2:dd: da:8e:27:15:a2:af:96:95:65:b4:d3:ae:23:6c:f3: 63:14:73:ae:8c:91:a9:89:5d:7c:33:4c:67:9e:6d: bd:8d:14:84:a9:d5:7e:91:ff:f8:9d:79:92:eb:3a: 8b:2e:0e:2a:e5:08:14:d2:1a:62:f4:64:29:46:1b: 01:9e:e9:63:94:91:fe:02:0b:8f:39:71:dc:f4:a1: 97:94:f1:74:d2:38:8d:58:90:94:06:8c:8a:35:33: 70:4d:1f:4b:1f:a8:c3:2a:40:1f:53:33:eb:6d:d6: a6:ab:d8:08:ba:64:e3:da:83:3d:9a:c1:e7:14:2f: a7:e2:ff:db:e0:fa:01:f7:e1:6f:b5:a9:0b:28:17: 8c:8c:25:fa:e8:51:e8:5f:cb:fc:c0:94:be:f1:ab: 37:45:e8:e9:ad:d5:70:e0:24:21:78:9f:f2:d1:3e: c6:e7:92:b4:0e:42:c9:b3:0d:c7:11:54:e2:d7:e4: 19:c3:39 Exponent: 65537 (0x10001) X509v3 Extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 9B:4B:96:AB:A2:A1:CD:3E:D1:8D:85:EF:C9:E6:F2:04:B4:6A:63:2C X509v3 Authority Key Identifier: 00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2 Authority Information Access: CA Issuers - URI:http://r12.i.lencr.org/ X509v3 Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://r12.c.lencr.org/23.crl CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9: 1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A Timestamp : Apr 7 01:42:56.151 2026 GMT Extensions: 00:00:05:00:06:1E:AA:29 Signature : ecdsa-with-SHA256 30:46:02:21:00:A3:FA:62:22:80:72:B4:59:3F:0E:FD: 72:3A:C4:4D:BD:75:5E:88:B2:9F:4F:A5:5D:4D:65:72: C4:36:EF:BF:7A:02:21:00:AF:F6:6A:B2:B4:F6:32:17: B2:9D:79:C3:81:8C:EC:F3:CC:3D:19:02:26:6E:D0:24: D5:DF:5A:F4:2E:62:45:E7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Apr 7 01:42:56.125 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:89:0A:F2:8D:79:32:DF:9D:99:69:5B: 62:C9:1F:D8:E8:57:FF:F7:65:59:A1:DB:4E:2A:F3:7D: C1:4F:A8:77:04:02:20:15:13:23:21:54:DC:8B:31:27: 9D:E2:42:B9:5D:76:0F:A9:4C:57:2B:68:CC:6D:F4:32: AF:67:40:BF:8B:68:99 Verify m: unable to get local issuer certificate SSL Certificate: Signature Algorithm: sha256WithRSAEncryption RSA Key Strength: 4096 Subject: passbolt.lan.ddnsgeek.com Altnames: DNS:passbolt.lan.ddnsgeek.com Issuer: R12 Not valid before: Apr 7 00:44:25 2026 GMT Not valid after: Jul 6 00:44:24 2026 GMT