8.6 KiB
8.6 KiB
sslscan --show-certificate --no-colour nextcloud.lan.ddnsgeek.com:443 2>&1
/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html:
Version: 2.1.5
OpenSSL 3.5.5 27 Jan 2026
Connected to 167.179.167.166
Testing SSL server nextcloud.lan.ddnsgeek.com on port 443 using SNI name nextcloud.lan.ddnsgeek.com
SSL/TLS Protocols:
SSLv2 disabled
SSLv3 disabled
TLSv1.0 disabled
TLSv1.1 disabled
TLSv1.2 enabled
TLSv1.3 enabled
TLS Fallback SCSV:
Server supports TLS Fallback SCSV
TLS renegotiation:
Session renegotiation not supported
TLS Compression:
Compression disabled
Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed
Supported Server Cipher(s):
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
Server Key Exchange Group(s):
TLSv1.3 128 bits secp256r1 (NIST P-256)
TLSv1.3 192 bits secp384r1 (NIST P-384)
TLSv1.3 260 bits secp521r1 (NIST P-521)
TLSv1.3 128 bits x25519
TLSv1.2 128 bits secp256r1 (NIST P-256)
TLSv1.2 192 bits secp384r1 (NIST P-384)
TLSv1.2 260 bits secp521r1 (NIST P-521)
TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Version: 2
Serial Number: 06:b9:a6:d8:c9:aa:30:d2:ff:6e:a8:2e:c2:46:b9:bf:b6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R13
Not valid before: Apr 10 22:57:14 2026 GMT
Not valid after: Jul 9 22:57:13 2026 GMT
Subject: /CN=nextcloud.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
RSA Public-Key: (4096 bit)
Modulus:
00:c7:d9:3d:cb:23:50:44:40:c9:10:77:9a:f0:b1:
fa:45:09:13:fe:60:29:e9:6f:ba:53:0c:57:7b:82:
76:29:7c:ca:2a:29:dc:28:17:1c:d3:75:13:ff:61:
b0:af:3f:82:e7:97:53:50:1b:72:93:54:ac:73:f5:
72:53:65:ac:c9:2e:f8:6b:b0:01:01:78:f9:eb:a5:
25:dc:9c:5c:cf:14:04:e0:78:1e:45:8e:fc:29:63:
4a:76:b5:11:94:25:3f:1e:05:84:32:cc:4a:48:b6:
b8:b3:fd:9a:03:4e:33:5f:e5:05:0d:6a:3c:6d:c1:
dc:45:cb:28:ea:86:94:44:3f:cc:e8:e0:fe:0c:8f:
10:1c:63:58:0d:db:61:96:4d:e2:88:9a:14:79:c0:
df:6a:27:b4:53:7b:09:0e:c2:39:e0:89:0a:74:69:
af:6c:c0:52:fa:51:3b:95:39:b8:7d:9c:7c:0a:6d:
e2:08:5a:f4:54:12:80:08:fa:94:0a:85:18:3a:d1:
0c:ba:94:97:5a:06:63:81:cc:e4:35:83:85:88:98:
9c:9f:e7:df:88:43:46:85:8e:b7:50:f4:d8:fa:42:
8c:d4:1f:3b:80:83:b3:ee:ae:75:03:7b:cc:13:50:
05:98:92:04:4b:69:1a:74:27:ef:71:05:78:49:51:
be:81:aa:64:ca:d0:14:96:ba:fd:51:25:7b:ea:09:
c5:d4:0b:e4:92:2f:c9:ea:88:2e:57:c9:aa:53:20:
02:23:38:ac:8b:54:2a:5f:61:4e:d5:8e:7d:3b:8f:
08:66:ed:3f:1e:ea:0c:6e:a0:74:3d:82:0f:17:60:
3d:f3:c1:b1:e8:8a:53:a0:d5:b1:b1:c0:b3:a6:80:
bf:5e:fd:f3:63:b4:14:87:f8:2c:4e:ef:4a:69:15:
4a:9c:da:7d:84:57:77:1f:c5:e4:8e:99:8b:eb:7b:
4a:5b:02:fa:5e:dc:66:26:0c:03:27:d4:0c:fe:a4:
98:ee:e6:08:64:51:42:6c:6e:d5:48:ba:85:98:c8:
58:46:b6:54:9e:9e:a6:e7:98:ec:6b:6b:12:6b:15:
ba:59:da:fa:ea:be:8f:3d:af:23:fb:a4:f7:d1:05:
1f:63:59:b9:cf:fa:e6:2e:bb:50:08:d4:96:56:00:
ff:9f:1d:4d:c0:ba:91:7e:bf:58:ee:42:4d:1b:02:
ce:48:58:d1:c0:98:db:11:ab:b3:68:ba:6e:89:39:
d1:3c:d0:f7:42:25:22:96:b8:20:ad:7d:b8:3b:a7:
c5:be:a2:ec:11:58:fe:6e:7a:96:6a:4a:91:87:32:
35:f9:41:08:ea:cf:b4:14:a4:56:95:1e:e3:9b:24:
55:57:51
Exponent: 65537 (0x10001)
X509v3 Extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
2F:A7:49:E0:BE:37:58:D6:3C:25:3E:3C:7E:92:B6:37:6E:0C:8A:6C
X509v3 Authority Key Identifier:
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
Authority Information Access:
CA Issuers - URI:http://r13.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:nextcloud.lan.ddnsgeek.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r13.c.lencr.org/34.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:
C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD
Timestamp : Apr 10 23:55:44.811 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:16:34:57:D7:CC:A6:20:8F:8B:52:3D:FF:
9A:7E:34:85:36:5C:E7:8F:B0:B8:EE:BA:55:CB:03:D4:
05:B3:D3:11:02:21:00:B5:5D:89:CD:F2:22:07:7F:E8:
0C:93:3A:D9:4A:5E:7B:A9:93:31:0E:FC:40:8F:42:88:
10:BF:A4:70:8B:83:AB
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19:
D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27
Timestamp : Apr 10 23:55:45.497 2026 GMT
Extensions: 00:00:05:00:06:66:A7:55
Signature : ecdsa-with-SHA256
30:44:02:20:73:40:8F:60:7D:7C:0B:79:D5:88:0B:7B:
31:F3:18:23:A3:20:F7:A7:44:5F:D3:AB:88:56:FE:D4:
13:F2:1F:B2:02:20:39:34:EE:18:67:79:80:7E:0C:5B:
0E:C0:99:70:7B:A0:15:A2:65:67:27:26:F4:7E:83:3A:
B5:46:11:C5:B6:EC
Verify m:
unable to get local issuer certificate
SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength: 4096
Subject: nextcloud.lan.ddnsgeek.com
Altnames: DNS:nextcloud.lan.ddnsgeek.com
Issuer: R13
Not valid before: Apr 10 22:57:14 2026 GMT
Not valid after: Jul 9 22:57:13 2026 GMT