8.6 KiB
8.6 KiB
sslscan --show-certificate --no-colour stockfill.lan.ddnsgeek.com:443 2>&1
/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html:
Version: 2.1.5
OpenSSL 3.5.5 27 Jan 2026
Connected to 167.179.167.166
Testing SSL server stockfill.lan.ddnsgeek.com on port 443 using SNI name stockfill.lan.ddnsgeek.com
SSL/TLS Protocols:
SSLv2 disabled
SSLv3 disabled
TLSv1.0 disabled
TLSv1.1 disabled
TLSv1.2 enabled
TLSv1.3 enabled
TLS Fallback SCSV:
Server supports TLS Fallback SCSV
TLS renegotiation:
Session renegotiation not supported
TLS Compression:
Compression disabled
Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed
Supported Server Cipher(s):
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
Server Key Exchange Group(s):
TLSv1.3 128 bits secp256r1 (NIST P-256)
TLSv1.3 192 bits secp384r1 (NIST P-384)
TLSv1.3 260 bits secp521r1 (NIST P-521)
TLSv1.3 128 bits x25519
TLSv1.2 128 bits secp256r1 (NIST P-256)
TLSv1.2 192 bits secp384r1 (NIST P-384)
TLSv1.2 260 bits secp521r1 (NIST P-521)
TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Version: 2
Serial Number: 05:20:b2:9b:6b:82:fa:16:1b:d5:97:37:a8:28:e5:a1:79:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R13
Not valid before: Mar 22 09:47:15 2026 GMT
Not valid after: Jun 20 09:47:14 2026 GMT
Subject: /CN=stockfill.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
RSA Public-Key: (4096 bit)
Modulus:
00:c9:2e:18:77:7a:42:84:8d:1e:39:17:db:f0:f1:
09:44:4a:84:cd:83:06:80:38:a7:2b:43:ac:be:2a:
dd:4c:c0:d6:c5:61:a7:11:a5:8c:58:b9:30:d8:ea:
2d:b5:b9:3f:b6:87:0d:71:e8:d3:c1:1c:6f:c5:dc:
cc:91:5c:51:12:06:1c:e6:cd:29:83:01:a8:86:40:
57:d3:2f:30:21:19:d5:2b:d0:02:59:01:20:3b:68:
c7:08:dd:fc:19:ce:c5:fa:e4:9f:d2:4d:28:27:50:
ae:fc:ef:6c:b1:14:3f:0f:dd:1f:d9:fd:95:b5:58:
dd:a3:6d:a0:1b:3e:12:99:38:9f:0c:5c:30:ec:60:
90:0b:54:02:09:32:c2:14:83:93:81:72:37:1a:b6:
30:0e:f7:0c:0d:24:55:7c:32:75:8d:72:7e:12:3b:
63:cc:b9:fb:b1:e2:0f:16:2b:ec:9f:d3:b2:5e:c5:
41:06:b3:6b:26:24:4c:c7:9a:7b:a3:a2:01:17:3d:
5d:84:18:06:c9:f6:18:93:33:64:25:87:12:b5:d2:
20:ee:d2:11:4a:b8:8a:1d:c0:be:50:50:01:24:6a:
30:51:f9:6e:00:64:a8:a5:90:f2:29:70:50:85:d7:
63:42:bb:99:96:8b:2c:8c:7f:b3:84:9c:57:6a:b8:
00:7a:b1:be:2b:d6:9c:bb:be:16:fd:e5:71:10:d3:
5a:ae:76:4f:da:a8:64:e7:30:9c:10:40:82:3d:c0:
d6:29:ce:5f:0d:b2:19:93:7f:29:9a:f1:a0:74:2c:
82:46:3a:31:45:dc:31:51:1d:1c:ab:02:24:95:f6:
8a:a9:b8:ab:e0:45:14:78:95:7c:1a:6a:25:4a:6c:
a6:ff:06:1a:e1:47:08:38:d2:76:fb:0c:66:13:26:
ff:b8:b7:02:35:c1:65:48:9e:36:a9:c5:bc:f1:1e:
c2:7b:70:e8:da:9f:8c:01:79:2f:f5:79:5e:b2:57:
0a:13:9c:f3:44:46:10:de:ab:13:66:35:e1:8c:62:
d1:2b:70:81:14:30:54:d1:58:c3:85:c1:c2:15:09:
3e:c0:5b:b3:d4:a3:be:b8:37:f2:17:73:4d:b5:e1:
aa:f9:04:28:1e:e2:72:46:1c:6a:e1:0c:6b:88:23:
73:5c:4c:d8:b3:9b:83:cb:64:59:d3:b2:10:c4:46:
00:dc:07:30:88:08:07:d6:23:f4:7e:e1:80:75:bf:
53:6b:6c:82:7a:e3:84:d2:55:3e:55:8f:ca:5b:b2:
3a:6a:6f:b0:bf:f6:34:5d:f2:10:47:66:69:82:72:
f7:c5:84:51:af:cd:35:e1:fd:d6:d3:63:55:ce:6d:
a1:d6:31
Exponent: 65537 (0x10001)
X509v3 Extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
FB:22:12:08:AD:67:CB:0B:9D:A4:65:FA:AB:DC:F7:C5:79:1F:D8:25
X509v3 Authority Key Identifier:
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
Authority Information Access:
CA Issuers - URI:http://r13.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:stockfill.lan.ddnsgeek.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r13.c.lencr.org/128.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF:
C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA
Timestamp : Mar 22 10:45:45.863 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:8A:D0:EA:11:7F:E7:54:28:45:CA:18:
47:7E:79:6F:A6:D9:5E:35:AA:40:E0:66:36:AA:CD:98:
ED:AD:8B:CC:80:02:20:27:5A:DC:8E:B2:F1:BE:E0:25:
07:31:74:15:F1:23:55:5A:6E:74:8F:51:A1:85:C3:95:
BF:69:40:C6:9F:23:39
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:
1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A
Timestamp : Mar 22 10:45:46.151 2026 GMT
Extensions: 00:00:05:00:03:F6:C5:8D
Signature : ecdsa-with-SHA256
30:45:02:21:00:89:9E:36:07:0C:7C:BB:BD:77:1A:95:
BE:F2:A4:EC:C4:C9:FD:94:EC:C2:22:F1:31:97:A1:E4:
0F:75:F3:9B:36:02:20:43:9A:C2:D4:88:3E:EC:23:20:
AB:62:74:8A:30:65:23:41:07:DC:BD:23:9D:F5:18:E4:
76:EE:67:97:01:A5:2C
Verify m:
unable to get local issuer certificate
SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength: 4096
Subject: stockfill.lan.ddnsgeek.com
Altnames: DNS:stockfill.lan.ddnsgeek.com
Issuer: R13
Not valid before: Mar 22 09:47:15 2026 GMT
Not valid after: Jun 20 09:47:14 2026 GMT