Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025

Connected to 167.179.167.166

Testing SSL server searxng.lan.ddnsgeek.com on port 443 using SNI name searxng.lan.ddnsgeek.com

  SSL/TLS Protocols:
SSLv2     disabled
SSLv3     disabled
TLSv1.0   disabled
TLSv1.1   disabled
TLSv1.2   enabled
TLSv1.3   enabled

  TLS Fallback SCSV:
Server supports TLS Fallback SCSV

  TLS renegotiation:
Session renegotiation not supported

  TLS Compression:
Compression disabled

  Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed

  Supported Server Cipher(s):
Preferred TLSv1.3  128 bits  TLS_AES_128_GCM_SHA256
Accepted  TLSv1.3  256 bits  TLS_AES_256_GCM_SHA384
Accepted  TLSv1.3  256 bits  TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2  128 bits  ECDHE-RSA-AES128-GCM-SHA256   Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-GCM-SHA384   Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-CHACHA20-POLY1305   Curve 25519 DHE 253
Accepted  TLSv1.2  128 bits  ECDHE-RSA-AES128-SHA          Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-SHA          Curve 25519 DHE 253

  Server Key Exchange Group(s):
TLSv1.3  128 bits  secp256r1 (NIST P-256)
TLSv1.3  192 bits  secp384r1 (NIST P-384)
TLSv1.3  260 bits  secp521r1 (NIST P-521)
TLSv1.3  128 bits  x25519
TLSv1.2  128 bits  secp256r1 (NIST P-256)
TLSv1.2  192 bits  secp384r1 (NIST P-384)
TLSv1.2  260 bits  secp521r1 (NIST P-521)
TLSv1.2  128 bits  x25519

  SSL Certificate:
    Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
    Version: 2
    Serial Number: 06:56:62:7e:d9:c3:3c:08:6c:68:7f:c7:fb:bb:43:73:22:a4
    Signature Algorithm: sha256WithRSAEncryption
    Issuer: /C=US/O=Let's Encrypt/CN=R12
    Not valid before: Feb  5 19:02:34 2026 GMT
    Not valid after: May  6 19:02:33 2026 GMT
    Subject: /CN=searxng.lan.ddnsgeek.com
    Public Key Algorithm: NULL
    RSA Public Key: (4096 bit)
      RSA Public-Key: (4096 bit)
      Modulus:
          00:b6:35:ca:3a:60:ae:72:b2:cf:b2:e7:e7:c0:d3:
          0f:77:6b:50:8c:8e:fd:b2:a9:92:8d:66:c5:97:9e:
          5f:5a:73:61:4d:a6:67:f6:91:4f:72:5a:bf:68:fa:
          f8:f1:86:51:62:c8:0b:03:21:99:48:fb:5a:67:39:
          b7:9f:42:ce:35:6e:fc:42:99:5c:f3:bc:51:3d:a5:
          89:c1:b0:ca:19:91:a5:0a:0d:72:e7:fe:c8:4e:87:
          55:c0:ff:dc:94:f1:4f:e4:0e:51:85:f2:5f:5a:e1:
          ae:b8:0e:df:ef:9c:82:5e:b9:db:bb:ff:30:ad:69:
          35:74:70:84:c5:f4:e7:b9:88:1a:18:35:bb:6b:d9:
          5f:35:61:e5:1c:fd:e8:14:ae:4a:4b:26:ff:81:38:
          b5:c2:48:56:c0:31:b6:f1:e9:1b:88:64:48:e3:ff:
          8a:01:d2:46:5a:d3:e0:fb:84:04:6c:60:dd:b0:a6:
          c1:2d:96:08:1e:9b:8c:6b:dd:1a:1e:1e:87:6b:d2:
          b3:39:85:03:60:ec:eb:da:cc:c5:01:d5:df:91:ea:
          48:01:9d:d5:6b:86:ff:93:cc:65:b8:18:0b:f1:17:
          f6:dc:29:9c:95:f3:7d:93:b0:33:a8:58:88:ac:82:
          a2:9a:0e:20:2b:6e:fe:0d:07:0c:a1:69:8e:a4:7f:
          9e:fb:af:19:33:ee:ca:6a:e2:88:10:06:7b:ea:ed:
          82:f4:08:39:cd:59:02:f8:09:cc:c9:23:36:23:a0:
          7c:ba:ea:10:e7:a6:ad:a3:ff:93:60:ee:f5:9c:8e:
          f2:fa:b6:50:bc:2d:1b:14:e4:2d:b1:b4:22:49:8f:
          bc:1e:72:bc:c6:1d:cd:74:53:34:6c:f3:8f:61:f6:
          ae:cd:0f:19:1d:51:aa:07:4b:6e:2f:9a:e5:db:12:
          e8:44:c6:b0:c5:d1:76:22:20:38:cd:0d:a7:f8:39:
          4b:58:18:76:23:0e:49:a0:c6:aa:93:f2:ac:ee:f0:
          9d:ba:a0:60:d1:7f:ae:a0:43:6c:cc:04:24:02:49:
          b1:a3:b8:0f:9d:55:d1:64:78:56:3d:a1:fc:17:3e:
          17:fb:ef:78:83:ab:f9:0c:11:b4:9c:76:4c:54:2b:
          bd:38:65:63:bf:37:02:78:9d:be:f7:ff:f8:a0:89:
          06:f9:2e:0f:0e:0a:dd:4b:7e:8b:f7:d1:3d:ee:44:
          f2:6e:58:2a:d7:cb:42:44:48:42:2f:0e:5e:df:46:
          fe:1a:c8:56:5c:33:c4:56:df:49:89:ca:f2:4f:da:
          9b:d3:e1:e6:6f:b7:51:05:2c:a6:bd:70:c0:96:c2:
          a8:9d:71:c5:8d:9d:dd:ec:46:de:0c:13:87:f3:cd:
          68:fc:63
      Exponent: 65537 (0x10001)
    X509v3 Extensions:
      X509v3 Key Usage: critical
        Digital Signature, Key Encipherment
      X509v3 Extended Key Usage:
        TLS Web Server Authentication, TLS Web Client Authentication
      X509v3 Basic Constraints: critical
        CA:FALSE
      X509v3 Subject Key Identifier:
        05:5D:58:FE:30:9A:38:7E:1C:97:09:97:06:38:30:3A:EF:75:1E:49
      X509v3 Authority Key Identifier:
        00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
      Authority Information Access:
        CA Issuers - URI:http://r12.i.lencr.org/
      X509v3 Subject Alternative Name:
        DNS:searxng.lan.ddnsgeek.com
      X509v3 Certificate Policies:
        Policy: 2.23.140.1.2.1
      X509v3 CRL Distribution Points:
        Full Name:
          URI:http://r12.c.lencr.org/37.crl

      CT Precertificate SCTs:
        Signed Certificate Timestamp:
            Version   : v1 (0x0)
            Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                        4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
            Timestamp : Feb  5 20:01:04.327 2026 GMT
            Extensions: none
            Signature : ecdsa-with-SHA256
                        30:45:02:21:00:A5:46:C7:B5:F3:80:05:6A:AC:34:CA:
                        DE:AB:06:25:7F:E3:8B:26:D8:5F:61:EF:C6:09:B4:5B:
                        EF:AA:A0:86:E6:02:20:7B:3E:6B:9F:D3:3D:F9:80:0D:
                        CB:95:AE:E2:C9:EA:4E:B2:24:7C:51:0A:DB:0F:73:9A:
                        69:8E:82:78:0B:4C:9C
        Signed Certificate Timestamp:
            Version   : v1 (0x0)
            Log ID    : A5:C9:78:92:5D:57:46:17:82:87:0D:D8:89:66:0B:5C:
                        55:64:8B:7D:00:40:F2:EC:07:68:51:D1:88:69:19:F7
            Timestamp : Feb  5 20:01:04.830 2026 GMT
            Extensions: 00:00:05:00:31:40:DF:DA
            Signature : ecdsa-with-SHA256
                        30:45:02:21:00:E9:7A:61:BF:E9:3D:B7:42:62:27:5B:
                        2F:1B:D6:E1:93:59:83:CD:7A:69:99:E0:C4:95:32:82:
                        63:8F:41:9C:EE:02:20:0D:D6:9F:34:4F:88:05:CA:40:
                        2B:06:A2:AF:AE:4A:7F:C0:9E:6D:52:F7:FE:D0:A0:FC:
                        56:3D:EC:8E:69:99:8B
  Verify m:
    unable to get local issuer certificate

  SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength:    4096

Subject:  searxng.lan.ddnsgeek.com
Altnames: DNS:searxng.lan.ddnsgeek.com
Issuer:   R12

Not valid before: Feb  5 19:02:34 2026 GMT
Not valid after:  May  6 19:02:33 2026 GMT