Version: 2.1.5 OpenSSL 3.5.3 16 Sep 2025 Connected to 167.179.167.166 Testing SSL server portainer.lan.ddnsgeek.com on port 443 using SNI name portainer.lan.ddnsgeek.com SSL/TLS Protocols: SSLv2 disabled SSLv3 disabled TLSv1.0 disabled TLSv1.1 disabled TLSv1.2 enabled TLSv1.3 enabled TLS Fallback SCSV: Server supports TLS Fallback SCSV TLS renegotiation: Session renegotiation not supported TLS Compression: Compression disabled Heartbleed: TLSv1.3 not vulnerable to heartbleed TLSv1.2 not vulnerable to heartbleed Supported Server Cipher(s): Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256 Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384 Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256 Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253 Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253 Server Key Exchange Group(s): TLSv1.3 128 bits secp256r1 (NIST P-256) TLSv1.3 192 bits secp384r1 (NIST P-384) TLSv1.3 260 bits secp521r1 (NIST P-521) TLSv1.3 128 bits x25519 TLSv1.2 128 bits secp256r1 (NIST P-256) TLSv1.2 192 bits secp384r1 (NIST P-384) TLSv1.2 260 bits secp521r1 (NIST P-521) TLSv1.2 128 bits x25519 SSL Certificate: Certificate blob: -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgISBsg1ZLJw0cv2UfvVzu+cQlgCMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTMwHhcNMjYwMzE5MDk0NzIzWhcNMjYwNjE3MDk0NzIyWjAlMSMwIQYDVQQD Expwb3J0YWluZXIubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD ggIPADCCAgoCggIBAKMm47zvPNfZfTFU/Mp0UZqbT4C+UqTU/+zZZLh0nF4XDFRQ O3Fu+VU3QzMpG8T99mzoT8c9MsybotIHE1nubHT8nemTekDw6hY6FUV0dYwrL62w 1J7YwgOi+kpvRc5rUg4L85CV3d/xC8J+mwt82T+4Ow4DJlY+e/RgTsoo7bf5X1kq BW/m6LnuCEFF7rX/4n+IVn735mEFFWAFn0S5TPWbMKDrmg//F3Zne5DoJqC9Lj1r KFHedTlrda63RekxvNLpwHSMbNuZ52LAUh1+wGnM8ymcw33KG4mtYNiBhqLnvq+v DmopRkPYlmqg7PCfy30LmfIfV+BMkZme4O24E2Y7xl/yDT56BSDL3/yW4hs46kiq zbp7HIRYDJ5PWiHS8nJ3v9q/LblszAXC0HxWyWs68zCcsYZcd1EDiV/FRT9m6jeT ryO8I+lnhxDLS6a6NPck1iQK5FObfTaSu1cYF01P2hAExnn5sFgyGcnp4P2rVx9i WvylkAoU1cqKHtUcky1MSfsZuWUE47AJNRv3Yj110ENQc1S/Wa9kkwKXwkhJ81BH JWPWWSFjIku2V6w+EI976BeyrdZuVtsxVf0wwJCh8sejFxICevMUMNHncsH4UFgv 43JTdlHjwtH9xlOGxkrnAIK39t1ULZzSSEqjzny5CJR08ZiL7k+KTnS8TscNAgMB AAGjggInMIICIzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUGBkTAWvzSygsPNmDUx6ZR2WckyEwHwYD VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpw b3J0YWluZXIubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAt BgNVHR8EJjAkMCKgIKAehhxodHRwOi8vcjEzLmMubGVuY3Iub3JnLzMuY3JsMIIB DAYKKwYBBAHWeQIEAgSB/QSB+gD4AHYAlpdkv1VYl633Q4doNwhCd+nwOtX2pPM2 bkakPw/KqcYAAAGdBbOpdAAABAMARzBFAiEAgUwjInt0rBtOYCN6nCrD1EKL7pEA /QY7Lj/wPotVO6gCIHlsJomZx8u4ML7EYkV2KYf32Zpc7lZ8iO+wFEJpf095AH4A qCbL4wrGNRJGUz/gZfFPGdluGQgTxB3ZbXkAsxI8VScAAAGdBbOswQAIAAAFAAOB KpMEAwBHMEUCIQDhamf7YTSbsGRXMfSq2+PkLunyjAqmlaOxhbQgKASD+wIgW+dm FufaFc9vCQBEpGE3CzHTcl5udMxxnelbVFvvhk8wDQYJKoZIhvcNAQELBQADggEB AB3uEKA2bL7g+07pANuiJ0JPnEkRterVO2aHBoKNxvguz+wLMhLKDma3SXbdggYp SIxzjtkSdovQQli4pgy/Bd2jA3SnSXv7YEuESMLBo4HaKrA4lb0gMC32kQ6id2hH 5syYKV/rRwF/a6O44ZvPY4LI1iDI+gl5WtGqdi4vQj7zI+fmcNYZKw/Oy5IQ8XMt yJAvX19M7OFNANflS9iIcMJYSYAESbqcJfFtLpmH/x6KMWV2RCRz7nf2IlndeJOl nU1nvv8d3RO0AE76kBHDLwJjM7leI030imdtzQjHv0ec4B0ppRZS7xGJc8p8hImS qIzE87xRUM0BPYpFB2untK4= -----END CERTIFICATE----- Version: 2 Serial Number: 06:c8:35:64:b2:70:d1:cb:f6:51:fb:d5:ce:ef:9c:42:58:02 Signature Algorithm: sha256WithRSAEncryption Issuer: /C=US/O=Let's Encrypt/CN=R13 Not valid before: Mar 19 09:47:23 2026 GMT Not valid after: Jun 17 09:47:22 2026 GMT Subject: /CN=portainer.lan.ddnsgeek.com Public Key Algorithm: NULL RSA Public Key: (4096 bit) RSA Public-Key: (4096 bit) Modulus: 00:a3:26:e3:bc:ef:3c:d7:d9:7d:31:54:fc:ca:74: 51:9a:9b:4f:80:be:52:a4:d4:ff:ec:d9:64:b8:74: 9c:5e:17:0c:54:50:3b:71:6e:f9:55:37:43:33:29: 1b:c4:fd:f6:6c:e8:4f:c7:3d:32:cc:9b:a2:d2:07: 13:59:ee:6c:74:fc:9d:e9:93:7a:40:f0:ea:16:3a: 15:45:74:75:8c:2b:2f:ad:b0:d4:9e:d8:c2:03:a2: fa:4a:6f:45:ce:6b:52:0e:0b:f3:90:95:dd:df:f1: 0b:c2:7e:9b:0b:7c:d9:3f:b8:3b:0e:03:26:56:3e: 7b:f4:60:4e:ca:28:ed:b7:f9:5f:59:2a:05:6f:e6: e8:b9:ee:08:41:45:ee:b5:ff:e2:7f:88:56:7e:f7: e6:61:05:15:60:05:9f:44:b9:4c:f5:9b:30:a0:eb: 9a:0f:ff:17:76:67:7b:90:e8:26:a0:bd:2e:3d:6b: 28:51:de:75:39:6b:75:ae:b7:45:e9:31:bc:d2:e9: c0:74:8c:6c:db:99:e7:62:c0:52:1d:7e:c0:69:cc: f3:29:9c:c3:7d:ca:1b:89:ad:60:d8:81:86:a2:e7: be:af:af:0e:6a:29:46:43:d8:96:6a:a0:ec:f0:9f: cb:7d:0b:99:f2:1f:57:e0:4c:91:99:9e:e0:ed:b8: 13:66:3b:c6:5f:f2:0d:3e:7a:05:20:cb:df:fc:96: e2:1b:38:ea:48:aa:cd:ba:7b:1c:84:58:0c:9e:4f: 5a:21:d2:f2:72:77:bf:da:bf:2d:b9:6c:cc:05:c2: d0:7c:56:c9:6b:3a:f3:30:9c:b1:86:5c:77:51:03: 89:5f:c5:45:3f:66:ea:37:93:af:23:bc:23:e9:67: 87:10:cb:4b:a6:ba:34:f7:24:d6:24:0a:e4:53:9b: 7d:36:92:bb:57:18:17:4d:4f:da:10:04:c6:79:f9: b0:58:32:19:c9:e9:e0:fd:ab:57:1f:62:5a:fc:a5: 90:0a:14:d5:ca:8a:1e:d5:1c:93:2d:4c:49:fb:19: b9:65:04:e3:b0:09:35:1b:f7:62:3d:75:d0:43:50: 73:54:bf:59:af:64:93:02:97:c2:48:49:f3:50:47: 25:63:d6:59:21:63:22:4b:b6:57:ac:3e:10:8f:7b: e8:17:b2:ad:d6:6e:56:db:31:55:fd:30:c0:90:a1: f2:c7:a3:17:12:02:7a:f3:14:30:d1:e7:72:c1:f8: 50:58:2f:e3:72:53:76:51:e3:c2:d1:fd:c6:53:86: c6:4a:e7:00:82:b7:f6:dd:54:2d:9c:d2:48:4a:a3: ce:7c:b9:08:94:74:f1:98:8b:ee:4f:8a:4e:74:bc: 4e:c7:0d Exponent: 65537 (0x10001) X509v3 Extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 18:19:13:01:6B:F3:4B:28:2C:3C:D9:83:53:1E:99:47:65:9C:93:21 X509v3 Authority Key Identifier: E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33 Authority Information Access: CA Issuers - URI:http://r13.i.lencr.org/ X509v3 Subject Alternative Name: DNS:portainer.lan.ddnsgeek.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://r13.c.lencr.org/3.crl CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77: E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6 Timestamp : Mar 19 10:45:53.652 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:81:4C:23:22:7B:74:AC:1B:4E:60:23: 7A:9C:2A:C3:D4:42:8B:EE:91:00:FD:06:3B:2E:3F:F0: 3E:8B:55:3B:A8:02:20:79:6C:26:89:99:C7:CB:B8:30: BE:C4:62:45:76:29:87:F7:D9:9A:5C:EE:56:7C:88:EF: B0:14:42:69:7F:4F:79 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19: D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27 Timestamp : Mar 19 10:45:54.497 2026 GMT Extensions: 00:00:05:00:03:81:2A:93 Signature : ecdsa-with-SHA256 30:45:02:21:00:E1:6A:67:FB:61:34:9B:B0:64:57:31: F4:AA:DB:E3:E4:2E:E9:F2:8C:0A:A6:95:A3:B1:85:B4: 20:28:04:83:FB:02:20:5B:E7:66:16:E7:DA:15:CF:6F: 09:00:44:A4:61:37:0B:31:D3:72:5E:6E:74:CC:71:9D: E9:5B:54:5B:EF:86:4F Verify m: unable to get local issuer certificate SSL Certificate: Signature Algorithm: sha256WithRSAEncryption RSA Key Strength: 4096 Subject: portainer.lan.ddnsgeek.com Altnames: DNS:portainer.lan.ddnsgeek.com Issuer: R13 Not valid before: Mar 19 09:47:23 2026 GMT Not valid after: Jun 17 09:47:22 2026 GMT