8.6 KiB
8.6 KiB
sslscan --show-certificate --no-colour passbolt.lan.ddnsgeek.com:443 2>&1
/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html:
Version: 2.1.5
OpenSSL 3.5.5 27 Jan 2026
Connected to 167.179.167.166
Testing SSL server passbolt.lan.ddnsgeek.com on port 443 using SNI name passbolt.lan.ddnsgeek.com
SSL/TLS Protocols:
SSLv2 disabled
SSLv3 disabled
TLSv1.0 disabled
TLSv1.1 disabled
TLSv1.2 enabled
TLSv1.3 enabled
TLS Fallback SCSV:
Server supports TLS Fallback SCSV
TLS renegotiation:
Session renegotiation not supported
TLS Compression:
Compression disabled
Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed
Supported Server Cipher(s):
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
Server Key Exchange Group(s):
TLSv1.3 128 bits secp256r1 (NIST P-256)
TLSv1.3 192 bits secp384r1 (NIST P-384)
TLSv1.3 260 bits secp521r1 (NIST P-521)
TLSv1.3 128 bits x25519
TLSv1.2 128 bits secp256r1 (NIST P-256)
TLSv1.2 192 bits secp384r1 (NIST P-384)
TLSv1.2 260 bits secp521r1 (NIST P-521)
TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Version: 2
Serial Number: 06:8c:58:25:86:ad:cb:b5:14:71:53:b8:79:36:ec:23:91:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R12
Not valid before: Apr 7 00:44:25 2026 GMT
Not valid after: Jul 6 00:44:24 2026 GMT
Subject: /CN=passbolt.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
RSA Public-Key: (4096 bit)
Modulus:
00:ee:cc:fc:1d:df:68:45:fe:8c:13:03:3c:88:96:
4d:8c:4b:df:0b:5f:61:4b:d0:e3:b3:88:81:78:b5:
bc:8a:3c:af:e1:4b:f7:58:2d:b1:4a:b9:e0:94:01:
43:53:81:07:3c:3f:c0:87:3c:f4:c6:09:12:9f:42:
ec:4a:f5:e7:ec:1c:e0:6b:a3:0f:13:24:f0:8b:79:
b9:e4:e5:00:63:bc:40:bc:20:49:fa:70:f3:57:48:
17:c0:f6:7f:8e:d4:05:9c:eb:08:e4:3d:3a:04:c3:
c1:d9:bb:93:a4:0f:8c:04:55:f1:47:66:da:da:0d:
64:4a:47:75:fa:50:b8:96:f3:7e:57:b5:6c:06:27:
94:60:93:b8:2b:e6:0b:6b:d1:7c:b9:d1:d4:59:65:
c3:f5:21:e8:50:09:36:04:cb:95:38:dd:5b:1f:aa:
c2:64:5f:38:b9:fb:ee:6e:10:4d:2c:8a:7c:22:9f:
8f:61:41:dc:b4:4d:96:12:c7:ca:32:5a:d0:59:eb:
bc:c2:ff:e1:76:f6:33:99:60:9a:55:fc:d2:17:fb:
7d:2f:cc:16:e6:51:84:63:ff:8d:22:f3:93:c5:b6:
48:29:0a:04:78:b9:ce:64:cb:53:32:b9:eb:1e:7d:
0a:5f:0d:fe:17:3b:72:97:f0:0d:c2:01:bd:3a:c3:
98:22:b6:c7:bf:39:09:c4:80:cb:2a:bd:41:c5:8b:
32:d8:5f:8f:c1:b5:04:77:52:6b:8d:0f:bb:38:cb:
cf:f0:9f:a1:ac:c6:0f:3b:7b:01:ab:7d:6f:c8:c3:
a3:08:7a:da:e4:68:68:83:74:57:a6:61:f3:0b:27:
50:c1:4e:c1:17:f4:4f:c0:5d:51:64:02:61:f2:dd:
da:8e:27:15:a2:af:96:95:65:b4:d3:ae:23:6c:f3:
63:14:73:ae:8c:91:a9:89:5d:7c:33:4c:67:9e:6d:
bd:8d:14:84:a9:d5:7e:91:ff:f8:9d:79:92:eb:3a:
8b:2e:0e:2a:e5:08:14:d2:1a:62:f4:64:29:46:1b:
01:9e:e9:63:94:91:fe:02:0b:8f:39:71:dc:f4:a1:
97:94:f1:74:d2:38:8d:58:90:94:06:8c:8a:35:33:
70:4d:1f:4b:1f:a8:c3:2a:40:1f:53:33:eb:6d:d6:
a6:ab:d8:08:ba:64:e3:da:83:3d:9a:c1:e7:14:2f:
a7:e2:ff:db:e0:fa:01:f7:e1:6f:b5:a9:0b:28:17:
8c:8c:25:fa:e8:51:e8:5f:cb:fc:c0:94:be:f1:ab:
37:45:e8:e9:ad:d5:70:e0:24:21:78:9f:f2:d1:3e:
c6:e7:92:b4:0e:42:c9:b3:0d:c7:11:54:e2:d7:e4:
19:c3:39
Exponent: 65537 (0x10001)
X509v3 Extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
9B:4B:96:AB:A2:A1:CD:3E:D1:8D:85:EF:C9:E6:F2:04:B4:6A:63:2C
X509v3 Authority Key Identifier:
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
Authority Information Access:
CA Issuers - URI:http://r12.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:passbolt.lan.ddnsgeek.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r12.c.lencr.org/23.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:
1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A
Timestamp : Apr 7 01:42:56.151 2026 GMT
Extensions: 00:00:05:00:06:1E:AA:29
Signature : ecdsa-with-SHA256
30:46:02:21:00:A3:FA:62:22:80:72:B4:59:3F:0E:FD:
72:3A:C4:4D:BD:75:5E:88:B2:9F:4F:A5:5D:4D:65:72:
C4:36:EF:BF:7A:02:21:00:AF:F6:6A:B2:B4:F6:32:17:
B2:9D:79:C3:81:8C:EC:F3:CC:3D:19:02:26:6E:D0:24:
D5:DF:5A:F4:2E:62:45:E7
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:
82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77
Timestamp : Apr 7 01:42:56.125 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:89:0A:F2:8D:79:32:DF:9D:99:69:5B:
62:C9:1F:D8:E8:57:FF:F7:65:59:A1:DB:4E:2A:F3:7D:
C1:4F:A8:77:04:02:20:15:13:23:21:54:DC:8B:31:27:
9D:E2:42:B9:5D:76:0F:A9:4C:57:2B:68:CC:6D:F4:32:
AF:67:40:BF:8B:68:99
Verify m:
unable to get local issuer certificate
SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength: 4096
Subject: passbolt.lan.ddnsgeek.com
Altnames: DNS:passbolt.lan.ddnsgeek.com
Issuer: R12
Not valid before: Apr 7 00:44:25 2026 GMT
Not valid after: Jul 6 00:44:24 2026 GMT