8.6 KiB
8.6 KiB
sslscan --show-certificate --no-colour gitea.lan.ddnsgeek.com:443 2>&1
/root/results/gitea.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html:
Version: 2.1.5
OpenSSL 3.5.5 27 Jan 2026
Connected to 167.179.167.166
Testing SSL server gitea.lan.ddnsgeek.com on port 443 using SNI name gitea.lan.ddnsgeek.com
SSL/TLS Protocols:
SSLv2 disabled
SSLv3 disabled
TLSv1.0 disabled
TLSv1.1 disabled
TLSv1.2 enabled
TLSv1.3 enabled
TLS Fallback SCSV:
Server supports TLS Fallback SCSV
TLS renegotiation:
Session renegotiation not supported
TLS Compression:
Compression disabled
Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed
Supported Server Cipher(s):
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
Server Key Exchange Group(s):
TLSv1.3 128 bits secp256r1 (NIST P-256)
TLSv1.3 192 bits secp384r1 (NIST P-384)
TLSv1.3 260 bits secp521r1 (NIST P-521)
TLSv1.3 128 bits x25519
TLSv1.2 128 bits secp256r1 (NIST P-256)
TLSv1.2 192 bits secp384r1 (NIST P-384)
TLSv1.2 260 bits secp521r1 (NIST P-521)
TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Version: 2
Serial Number: 05:73:07:cd:cc:c9:a6:86:70:c9:10:56:05:af:b2:9f:a9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R13
Not valid before: Mar 14 17:22:58 2026 GMT
Not valid after: Jun 12 17:22:57 2026 GMT
Subject: /CN=gitea.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
RSA Public-Key: (4096 bit)
Modulus:
00:bd:63:98:e7:7a:69:27:a5:8b:59:81:18:bd:5c:
6c:b6:d6:d4:b1:76:f7:c2:27:34:10:99:af:d4:5a:
1a:81:42:6a:fe:82:60:42:a7:1c:10:84:2c:18:22:
06:cb:82:77:71:10:21:3a:f2:66:ae:40:16:61:df:
3d:9b:72:44:a2:d3:ab:73:ad:e3:28:d6:3e:11:7c:
b1:5e:46:5c:a1:82:a0:c8:25:46:0f:68:e3:02:a7:
7c:e0:80:9b:d7:b4:70:a1:4f:a5:af:85:32:e9:60:
eb:6c:5f:f5:b6:69:74:d0:30:0e:cb:d3:34:04:37:
1d:35:9b:bd:75:54:71:46:27:8a:5b:74:c0:c2:06:
76:51:b7:96:96:ac:2c:d5:08:34:29:0f:0a:98:2c:
76:c5:4f:c4:6f:5b:4d:42:2e:fe:0f:31:0a:55:61:
e3:c2:f0:6f:01:3a:d3:30:59:78:38:57:7d:71:29:
7b:80:7f:3a:07:e8:06:14:01:d3:8f:9f:ff:11:32:
c8:37:aa:3a:37:d2:95:1b:7f:4d:42:6a:25:e0:4f:
c9:6f:13:ae:4f:a0:16:97:14:95:b7:83:f2:74:4e:
7b:ce:2c:53:d6:fd:d0:6a:a5:20:ba:96:3e:f8:ce:
c8:dd:2c:e5:ae:4d:b4:22:b8:6e:9b:c6:34:c4:3f:
23:bc:de:5d:5f:76:24:fc:a6:35:38:02:f2:b1:0d:
11:5c:2b:e2:f2:e6:fc:f2:2c:f3:be:da:95:88:5d:
21:29:79:1e:c7:14:02:5a:f5:65:e6:99:d9:32:5b:
f4:e8:04:1a:4f:5d:d6:81:be:b8:e6:2b:9b:cb:7e:
04:ed:fb:da:c4:fc:db:cf:7a:6a:cb:d1:42:3e:38:
99:22:5d:36:44:7b:ed:35:ca:05:3a:5b:25:b2:fb:
aa:a2:46:bc:7f:cc:7c:53:fa:54:22:20:ca:f9:e5:
66:60:be:e8:44:24:b9:b8:de:5a:ef:dd:ce:a4:83:
97:46:eb:67:b2:a6:ab:69:c1:18:8c:78:a9:f4:52:
8a:4e:84:15:70:3c:c8:7e:b6:06:ff:87:bb:c8:a9:
5e:2a:5f:4a:9f:f4:2f:d0:33:56:c9:1a:d4:42:1e:
66:96:27:39:82:c7:c3:41:d4:3a:d5:6c:13:40:3a:
99:da:f0:b6:6f:eb:e0:9e:7f:ea:f3:df:d8:c2:b3:
e7:e9:85:11:66:60:73:74:77:56:2d:2b:4f:76:ab:
b5:09:c1:b0:ed:da:32:51:0e:df:a8:f3:e7:d7:74:
9a:50:e9:a7:f3:5f:da:2d:3c:22:53:66:44:ba:ac:
8b:b4:63:93:77:94:96:f2:5c:13:93:fb:28:00:ae:
3b:a0:97
Exponent: 65537 (0x10001)
X509v3 Extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
4E:B5:62:A4:CA:8B:99:C5:2F:B0:5B:9A:5E:49:B4:9F:D8:7A:92:C6
X509v3 Authority Key Identifier:
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
Authority Information Access:
CA Issuers - URI:http://r13.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:gitea.lan.ddnsgeek.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r13.c.lencr.org/23.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
Timestamp : Mar 14 18:21:28.445 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:91:61:A0:B7:9E:91:D0:EE:49:5B:FB:
DF:F7:F7:F2:E0:48:B7:21:C3:EF:6D:CA:40:F6:FD:62:
0D:EF:04:3B:48:02:20:33:E9:FD:73:1C:D7:15:23:0B:
BA:36:70:34:57:20:03:74:22:48:35:A3:E0:2F:55:FF:
4E:40:70:0D:F2:4B:27
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 71:7E:95:F3:C2:38:8A:6D:B1:E3:84:49:3D:31:E1:5A:
A9:62:08:76:2D:42:00:E0:05:0C:D0:67:B5:A6:61:E2
Timestamp : Mar 14 18:21:28.608 2026 GMT
Extensions: 00:00:05:00:0B:A8:91:C9
Signature : ecdsa-with-SHA256
30:44:02:20:08:55:2D:55:7D:86:F2:75:BC:14:78:FC:
E9:13:FA:99:C4:0F:9E:EC:1A:EB:5D:26:9E:D9:81:C7:
C3:5F:EB:74:02:20:1A:E2:46:B6:08:86:81:AD:AD:6E:
1B:88:6C:A8:E1:F4:54:83:29:A3:31:33:4A:4C:EA:57:
2A:5E:65:E1:11:0A
Verify m:
unable to get local issuer certificate
SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength: 4096
Subject: gitea.lan.ddnsgeek.com
Altnames: DNS:gitea.lan.ddnsgeek.com
Issuer: R13
Not valid before: Mar 14 17:22:58 2026 GMT
Not valid after: Jun 12 17:22:57 2026 GMT