Version: 2.1.5 OpenSSL 3.5.3 16 Sep 2025 Connected to 167.179.167.166 Testing SSL server prometheus.lan.ddnsgeek.com on port 80 using SNI name prometheus.lan.ddnsgeek.com SSL/TLS Protocols: SSLv2 disabled SSLv3 disabled TLSv1.0 disabled TLSv1.1 disabled TLSv1.2 enabled TLSv1.3 enabled TLS Fallback SCSV: Server supports TLS Fallback SCSV TLS renegotiation: Session renegotiation not supported TLS Compression: Compression disabled Heartbleed: TLSv1.3 not vulnerable to heartbleed TLSv1.2 not vulnerable to heartbleed Supported Server Cipher(s): Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256 Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384 Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256 Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253 Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253 Server Key Exchange Group(s): TLSv1.3 128 bits secp256r1 (NIST P-256) TLSv1.3 192 bits secp384r1 (NIST P-384) TLSv1.3 260 bits secp521r1 (NIST P-521) TLSv1.3 128 bits x25519 TLSv1.2 128 bits secp256r1 (NIST P-256) TLSv1.2 192 bits secp384r1 (NIST P-384) TLSv1.2 260 bits secp521r1 (NIST P-521) TLSv1.2 128 bits x25519 SSL Certificate: Certificate blob: -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISBg0+gZSOMXCS5AoRmD5pvahwMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTIwHhcNMjYwMjE3MTIzMzUxWhcNMjYwNTE4MTIzMzUwWjAmMSQwIgYDVQQD Extwcm9tZXRoZXVzLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUA A4ICDwAwggIKAoICAQCtAoXFxFZOFcr4+svCltzMpPs9/wbCcMDf+/4W62b78GQh ase0DUbkUx6azppbLnQHUa9Qy/QN/14NJk4xVEv9U/ICKsPKqQCnwCGlXNgwlwQW tiYenMjbnME4FqohzoxM0HPuTDs1imUx3qj+S7tgkaMcYk5GyKuOyToa6rID7Elt iMBb5imfEsv0M0UVjgYwCOL1cWEhnNBi0VZydaDjAh0ZFXdpsU+98CaXTSzJcgaz XZKIJ4Ci3n1+5pCdyw9wlGeMxbcRZPzsvIQ5Dc8+JuXGmHG7pZL4uYVluVeHO5Ow 7O/WKDCqL81831glofjV+n9GO2aYjV2lpboGt9+PoRlDAgmD4AYJC3KxriDAeHJh nWGkQT7EqB00XO3zo5VT/kJ7YEUPfHRBVQ+hn3RkAgAvbAyTOv3ITUpf984l4DnA 00SWOJYoqQiUir0B6dc0lumtlB7rajHREwAzBHXO5l09v5qEbItOtHx0KgOdw6Fl VXZf/SZtQuL/co7wvVEEQsTnmzm+MlA3hSItSngBHk1k0svHUVSqKgQr3J7HccDk t0kTcMz6oePKdeD+JLzZSU8jUC71Gb4L7ZvnS0wH9VrkiiuJ0QzGi0McgbtPHjqI gHDy0wO0MPXRQ67v55zM7bSUlIkvR998HUnjLNR6rG9ZDp57K819TXOnEkIMUwID AQABo4ICIjCCAh4wDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMB MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHMgMChVU3b/7gZ3tXhv0Kv5UYmfMB8G A1UdIwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAj BggrBgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wJgYDVR0RBB8wHYIb cHJvbWV0aGV1cy5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIB MC8GA1UdHwQoMCYwJKAioCCGHmh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMTEzLmNy bDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEmcm2neHXzs/DbezYdkprhbrwqH gBnRVVL76esp3fjDAAABnGvNSJ8AAAQDAEcwRQIhALJY99SvB2ZLeNal2bwpELMF FXmP16PZfZZ1HnBabOYrAiB0MjNKFgU4D8GHCzCp9FepVs32qAq54aJ0ejhhr11J EAB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8PyqnGAAABnGvNSOQAAAQD AEcwRQIgXQESJz2KpTYUdJy6TVhaNedBba+dWUySs35g+nmzm8kCIQDvXnPobldt 8uYr9Xcbri+v9dEQBZ+jLT9cRwlqp1ULeDANBgkqhkiG9w0BAQsFAAOCAQEAyu/S Lni0z7O+f8LLL3Nrg3FjureWg1z/wxbtHhQYdPc/gOe071JVlmla5yqH3R2Hut4U BBrAfQROxGeqYdkFZdhSP168Gv7SFW41YVpiojAiDjvqLxBnASEpv06fMIbZxf2i hXto5Ydx85eoSEHeFIUeEjLVu27SGDgyRn76neWBGwXgCQXn9yaFcDhnnPrzbKbJ yp22O2TrMf3OxC3rpry73w9EPYjtNirAko4YGr6F6HXnc2VOBEmhBa3/Q0EvEbf1 UHxU2pKgyHdM6B5xv5QQqZM330YNGIyZ4CBMR73tdr86U1JZTBbwaaHjyaV0DX2B DVfa0K07ZYqWBUw76g== -----END CERTIFICATE----- Version: 2 Serial Number: 06:0d:3e:81:94:8e:31:70:92:e4:0a:11:98:3e:69:bd:a8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: /C=US/O=Let's Encrypt/CN=R12 Not valid before: Feb 17 12:33:51 2026 GMT Not valid after: May 18 12:33:50 2026 GMT Subject: /CN=prometheus.lan.ddnsgeek.com Public Key Algorithm: NULL RSA Public Key: (4096 bit) RSA Public-Key: (4096 bit) Modulus: 00:ad:02:85:c5:c4:56:4e:15:ca:f8:fa:cb:c2:96: dc:cc:a4:fb:3d:ff:06:c2:70:c0:df:fb:fe:16:eb: 66:fb:f0:64:21:6a:c7:b4:0d:46:e4:53:1e:9a:ce: 9a:5b:2e:74:07:51:af:50:cb:f4:0d:ff:5e:0d:26: 4e:31:54:4b:fd:53:f2:02:2a:c3:ca:a9:00:a7:c0: 21:a5:5c:d8:30:97:04:16:b6:26:1e:9c:c8:db:9c: c1:38:16:aa:21:ce:8c:4c:d0:73:ee:4c:3b:35:8a: 65:31:de:a8:fe:4b:bb:60:91:a3:1c:62:4e:46:c8: ab:8e:c9:3a:1a:ea:b2:03:ec:49:6d:88:c0:5b:e6: 29:9f:12:cb:f4:33:45:15:8e:06:30:08:e2:f5:71: 61:21:9c:d0:62:d1:56:72:75:a0:e3:02:1d:19:15: 77:69:b1:4f:bd:f0:26:97:4d:2c:c9:72:06:b3:5d: 92:88:27:80:a2:de:7d:7e:e6:90:9d:cb:0f:70:94: 67:8c:c5:b7:11:64:fc:ec:bc:84:39:0d:cf:3e:26: e5:c6:98:71:bb:a5:92:f8:b9:85:65:b9:57:87:3b: 93:b0:ec:ef:d6:28:30:aa:2f:cd:7c:df:58:25:a1: f8:d5:fa:7f:46:3b:66:98:8d:5d:a5:a5:ba:06:b7: df:8f:a1:19:43:02:09:83:e0:06:09:0b:72:b1:ae: 20:c0:78:72:61:9d:61:a4:41:3e:c4:a8:1d:34:5c: ed:f3:a3:95:53:fe:42:7b:60:45:0f:7c:74:41:55: 0f:a1:9f:74:64:02:00:2f:6c:0c:93:3a:fd:c8:4d: 4a:5f:f7:ce:25:e0:39:c0:d3:44:96:38:96:28:a9: 08:94:8a:bd:01:e9:d7:34:96:e9:ad:94:1e:eb:6a: 31:d1:13:00:33:04:75:ce:e6:5d:3d:bf:9a:84:6c: 8b:4e:b4:7c:74:2a:03:9d:c3:a1:65:55:76:5f:fd: 26:6d:42:e2:ff:72:8e:f0:bd:51:04:42:c4:e7:9b: 39:be:32:50:37:85:22:2d:4a:78:01:1e:4d:64:d2: cb:c7:51:54:aa:2a:04:2b:dc:9e:c7:71:c0:e4:b7: 49:13:70:cc:fa:a1:e3:ca:75:e0:fe:24:bc:d9:49: 4f:23:50:2e:f5:19:be:0b:ed:9b:e7:4b:4c:07:f5: 5a:e4:8a:2b:89:d1:0c:c6:8b:43:1c:81:bb:4f:1e: 3a:88:80:70:f2:d3:03:b4:30:f5:d1:43:ae:ef:e7: 9c:cc:ed:b4:94:94:89:2f:47:df:7c:1d:49:e3:2c: d4:7a:ac:6f:59:0e:9e:7b:2b:cd:7d:4d:73:a7:12: 42:0c:53 Exponent: 65537 (0x10001) X509v3 Extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 73:20:30:28:55:53:76:FF:EE:06:77:B5:78:6F:D0:AB:F9:51:89:9F X509v3 Authority Key Identifier: 00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2 Authority Information Access: CA Issuers - URI:http://r12.i.lencr.org/ X509v3 Subject Alternative Name: DNS:prometheus.lan.ddnsgeek.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://r12.c.lencr.org/113.crl CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8: 5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3 Timestamp : Feb 17 13:32:21.535 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:B2:58:F7:D4:AF:07:66:4B:78:D6:A5: D9:BC:29:10:B3:05:15:79:8F:D7:A3:D9:7D:96:75:1E: 70:5A:6C:E6:2B:02:20:74:32:33:4A:16:05:38:0F:C1: 87:0B:30:A9:F4:57:A9:56:CD:F6:A8:0A:B9:E1:A2:74: 7A:38:61:AF:5D:49:10 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77: E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6 Timestamp : Feb 17 13:32:21.604 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5D:01:12:27:3D:8A:A5:36:14:74:9C:BA: 4D:58:5A:35:E7:41:6D:AF:9D:59:4C:92:B3:7E:60:FA: 79:B3:9B:C9:02:21:00:EF:5E:73:E8:6E:57:6D:F2:E6: 2B:F5:77:1B:AE:2F:AF:F5:D1:10:05:9F:A3:2D:3F:5C: 47:09:6A:A7:55:0B:78 Verify m: unable to get local issuer certificate SSL Certificate: Signature Algorithm: sha256WithRSAEncryption RSA Key Strength: 4096 Subject: prometheus.lan.ddnsgeek.com Altnames: DNS:prometheus.lan.ddnsgeek.com Issuer: R12 Not valid before: Feb 17 12:33:51 2026 GMT Not valid after: May 18 12:33:50 2026 GMT