Version: 2.1.5 OpenSSL 3.5.3 16 Sep 2025 Connected to 167.179.167.166 Testing SSL server nextcloud.lan.ddnsgeek.com on port 443 using SNI name nextcloud.lan.ddnsgeek.com SSL/TLS Protocols: SSLv2 disabled SSLv3 disabled TLSv1.0 disabled TLSv1.1 disabled TLSv1.2 enabled TLSv1.3 enabled TLS Fallback SCSV: Server supports TLS Fallback SCSV TLS renegotiation: Session renegotiation not supported TLS Compression: Compression disabled Heartbleed: TLSv1.3 not vulnerable to heartbleed TLSv1.2 not vulnerable to heartbleed Supported Server Cipher(s): Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256 Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384 Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256 Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253 Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253 Server Key Exchange Group(s): TLSv1.3 128 bits secp256r1 (NIST P-256) TLSv1.3 192 bits secp384r1 (NIST P-384) TLSv1.3 260 bits secp521r1 (NIST P-521) TLSv1.3 128 bits x25519 TLSv1.2 128 bits secp256r1 (NIST P-256) TLSv1.2 192 bits secp384r1 (NIST P-384) TLSv1.2 260 bits secp521r1 (NIST P-521) TLSv1.2 128 bits x25519 SSL Certificate: Certificate blob: -----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISBs84fOBMHD0zq0Oj2DfRjS1QMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTIwHhcNMjYwMjA5MTkwMjM3WhcNMjYwNTEwMTkwMjM2WjAlMSMwIQYDVQQD ExpuZXh0Y2xvdWQubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD ggIPADCCAgoCggIBAMfZPcsjUERAyRB3mvCx+kUJE/5gKelvulMMV3uCdil8yiop 3CgXHNN1E/9hsK8/gueXU1AbcpNUrHP1clNlrMku+GuwAQF4+eulJdycXM8UBOB4 HkWO/CljSna1EZQlPx4FhDLMSki2uLP9mgNOM1/lBQ1qPG3B3EXLKOqGlEQ/zOjg /gyPEBxjWA3bYZZN4oiaFHnA32ontFN7CQ7COeCJCnRpr2zAUvpRO5U5uH2cfApt 4gha9FQSgAj6lAqFGDrRDLqUl1oGY4HM5DWDhYiYnJ/n34hDRoWOt1D02PpCjNQf O4CDs+6udQN7zBNQBZiSBEtpGnQn73EFeElRvoGqZMrQFJa6/VEle+oJxdQL5JIv yeqILlfJqlMgAiM4rItUKl9hTtWOfTuPCGbtPx7qDG6gdD2CDxdgPfPBseiKU6DV sbHAs6aAv17982O0FIf4LE7vSmkVSpzafYRXdx/F5I6Zi+t7SlsC+l7cZiYMAyfU DP6kmO7mCGRRQmxu1Ui6hZjIWEa2VJ6epueY7GtrEmsVulna+uq+jz2vI/uk99EF H2NZuc/65i67UAjUllYA/58dTcC6kX6/WO5CTRsCzkhY0cCY2xGrs2i6bok50TzQ 90IlIpa4IK19uDunxb6i7BFY/m56lmpKkYcyNflBCOrPtBSkVpUe45skVVdRAgMB AAGjggIyMIICLjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC+nSeC+N1jWPCU+PH6S tjduDIpsMB8GA1UdIwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUF BwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wJQYD VR0RBB4wHIIabmV4dGNsb3VkLmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAI BgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9y Zy84MS5jcmwwggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAfgDjI43yjaKI4KrgrPD6 kMmF8La/9dKlJ7AB/BxEWMS26AAAAZxD/lXDAAgAAAUAMg4sIQQDAEcwRQIgIrCy dkG2OA3k+ot4xDhxRpcnzkBKHTNZylHElvVz0J8CIQDfJueLeCcVjYrFxFfiBC7H /0xdjUSIP0UwZKmWxao/TwB2ABaDLavwqSUPD/A6pUX/yL/II9CHS/YEKSf45x8z E/X6AAABnEP+XTYAAAQDAEcwRQIhAPkHxBF88NswLBzx2jqn1RenJotA4rFrNQM9 1Eof/yZ7AiAHL5k+cqEy/GJ/5eSrDYLr7HCgFBZBE5FHYlXfQ/l32DANBgkqhkiG 9w0BAQsFAAOCAQEAlW2wfkaVWzbyhttsFH2ZuSqGY2PMi4UzJWCkokkB2fPG16Ky +EvvTkkkj+U39fkyDqc44jCWJ1cvM5KP6YNyit2w+dhzicllKsO5OJeOQF49EZuC jBxyK2AHJzOVUOpTSeaeWjRH6eVgq8ebnwxrN1APCKRhb99SRgfF5SttfVl9CHt+ qlimvDKxX7/PeXz+PW3KAI/DOTBF7mjZUUvIRZLr2Tv7AXtl27fbfpEtXhlBVsdy 2JtMrKu0qbfxfWeOr1uD69WWsPkgWZ8HHP+7VibHwyXUuc7FmHuxDQCtWFNkj9rm lZr6d0LRlE/gU6T/SDixaqBbYR7VEOEMYhL0SA== -----END CERTIFICATE----- Version: 2 Serial Number: 06:cf:38:7c:e0:4c:1c:3d:33:ab:43:a3:d8:37:d1:8d:2d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: /C=US/O=Let's Encrypt/CN=R12 Not valid before: Feb 9 19:02:37 2026 GMT Not valid after: May 10 19:02:36 2026 GMT Subject: /CN=nextcloud.lan.ddnsgeek.com Public Key Algorithm: NULL RSA Public Key: (4096 bit) RSA Public-Key: (4096 bit) Modulus: 00:c7:d9:3d:cb:23:50:44:40:c9:10:77:9a:f0:b1: fa:45:09:13:fe:60:29:e9:6f:ba:53:0c:57:7b:82: 76:29:7c:ca:2a:29:dc:28:17:1c:d3:75:13:ff:61: b0:af:3f:82:e7:97:53:50:1b:72:93:54:ac:73:f5: 72:53:65:ac:c9:2e:f8:6b:b0:01:01:78:f9:eb:a5: 25:dc:9c:5c:cf:14:04:e0:78:1e:45:8e:fc:29:63: 4a:76:b5:11:94:25:3f:1e:05:84:32:cc:4a:48:b6: b8:b3:fd:9a:03:4e:33:5f:e5:05:0d:6a:3c:6d:c1: dc:45:cb:28:ea:86:94:44:3f:cc:e8:e0:fe:0c:8f: 10:1c:63:58:0d:db:61:96:4d:e2:88:9a:14:79:c0: df:6a:27:b4:53:7b:09:0e:c2:39:e0:89:0a:74:69: af:6c:c0:52:fa:51:3b:95:39:b8:7d:9c:7c:0a:6d: e2:08:5a:f4:54:12:80:08:fa:94:0a:85:18:3a:d1: 0c:ba:94:97:5a:06:63:81:cc:e4:35:83:85:88:98: 9c:9f:e7:df:88:43:46:85:8e:b7:50:f4:d8:fa:42: 8c:d4:1f:3b:80:83:b3:ee:ae:75:03:7b:cc:13:50: 05:98:92:04:4b:69:1a:74:27:ef:71:05:78:49:51: be:81:aa:64:ca:d0:14:96:ba:fd:51:25:7b:ea:09: c5:d4:0b:e4:92:2f:c9:ea:88:2e:57:c9:aa:53:20: 02:23:38:ac:8b:54:2a:5f:61:4e:d5:8e:7d:3b:8f: 08:66:ed:3f:1e:ea:0c:6e:a0:74:3d:82:0f:17:60: 3d:f3:c1:b1:e8:8a:53:a0:d5:b1:b1:c0:b3:a6:80: bf:5e:fd:f3:63:b4:14:87:f8:2c:4e:ef:4a:69:15: 4a:9c:da:7d:84:57:77:1f:c5:e4:8e:99:8b:eb:7b: 4a:5b:02:fa:5e:dc:66:26:0c:03:27:d4:0c:fe:a4: 98:ee:e6:08:64:51:42:6c:6e:d5:48:ba:85:98:c8: 58:46:b6:54:9e:9e:a6:e7:98:ec:6b:6b:12:6b:15: ba:59:da:fa:ea:be:8f:3d:af:23:fb:a4:f7:d1:05: 1f:63:59:b9:cf:fa:e6:2e:bb:50:08:d4:96:56:00: ff:9f:1d:4d:c0:ba:91:7e:bf:58:ee:42:4d:1b:02: ce:48:58:d1:c0:98:db:11:ab:b3:68:ba:6e:89:39: d1:3c:d0:f7:42:25:22:96:b8:20:ad:7d:b8:3b:a7: c5:be:a2:ec:11:58:fe:6e:7a:96:6a:4a:91:87:32: 35:f9:41:08:ea:cf:b4:14:a4:56:95:1e:e3:9b:24: 55:57:51 Exponent: 65537 (0x10001) X509v3 Extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 2F:A7:49:E0:BE:37:58:D6:3C:25:3E:3C:7E:92:B6:37:6E:0C:8A:6C X509v3 Authority Key Identifier: 00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2 Authority Information Access: CA Issuers - URI:http://r12.i.lencr.org/ X509v3 Subject Alternative Name: DNS:nextcloud.lan.ddnsgeek.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://r12.c.lencr.org/81.crl CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E3:23:8D:F2:8D:A2:88:E0:AA:E0:AC:F0:FA:90:C9:85: F0:B6:BF:F5:D2:A5:27:B0:01:FC:1C:44:58:C4:B6:E8 Timestamp : Feb 9 20:01:07.523 2026 GMT Extensions: 00:00:05:00:32:0E:2C:21 Signature : ecdsa-with-SHA256 30:45:02:20:22:B0:B2:76:41:B6:38:0D:E4:FA:8B:78: C4:38:71:46:97:27:CE:40:4A:1D:33:59:CA:51:C4:96: F5:73:D0:9F:02:21:00:DF:26:E7:8B:78:27:15:8D:8A: C5:C4:57:E2:04:2E:C7:FF:4C:5D:8D:44:88:3F:45:30: 64:A9:96:C5:AA:3F:4F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF: C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA Timestamp : Feb 9 20:01:09.430 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F9:07:C4:11:7C:F0:DB:30:2C:1C:F1: DA:3A:A7:D5:17:A7:26:8B:40:E2:B1:6B:35:03:3D:D4: 4A:1F:FF:26:7B:02:20:07:2F:99:3E:72:A1:32:FC:62: 7F:E5:E4:AB:0D:82:EB:EC:70:A0:14:16:41:13:91:47: 62:55:DF:43:F9:77:D8 Verify m: unable to get local issuer certificate SSL Certificate: Signature Algorithm: sha256WithRSAEncryption RSA Key Strength: 4096 Subject: nextcloud.lan.ddnsgeek.com Altnames: DNS:nextcloud.lan.ddnsgeek.com Issuer: R12 Not valid before: Feb 9 19:02:37 2026 GMT Not valid after: May 10 19:02:36 2026 GMT