Version: 2.1.5 OpenSSL 3.5.3 16 Sep 2025 Connected to 101.180.16.105 Testing SSL server kuma.lan.ddnsgeek.com on port 443 using SNI name kuma.lan.ddnsgeek.com SSL/TLS Protocols: SSLv2 disabled SSLv3 disabled TLSv1.0 disabled TLSv1.1 disabled TLSv1.2 enabled TLSv1.3 enabled TLS Fallback SCSV: Server supports TLS Fallback SCSV TLS renegotiation: Session renegotiation not supported TLS Compression: Compression disabled Heartbleed: TLSv1.3 not vulnerable to heartbleed TLSv1.2 not vulnerable to heartbleed Supported Server Cipher(s): Preferred TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256 Accepted TLSv1.3 128 bits TLS_AES_128_GCM_SHA256 Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384 Preferred TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253 Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253 Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253 Server Key Exchange Group(s): TLSv1.3 128 bits secp256r1 (NIST P-256) TLSv1.3 192 bits secp384r1 (NIST P-384) TLSv1.3 260 bits secp521r1 (NIST P-521) TLSv1.3 128 bits x25519 TLSv1.2 128 bits secp256r1 (NIST P-256) TLSv1.2 192 bits secp384r1 (NIST P-384) TLSv1.2 260 bits secp521r1 (NIST P-521) TLSv1.2 128 bits x25519 SSL Certificate: Certificate blob: -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy 2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+ BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp 5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5 AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/ 4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh 2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI 3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L 2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU 6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv ssZpBGM= -----END CERTIFICATE----- Version: 2 Serial Number: 05:86:0a:1e:7a:66:3c:3a:54:3c:98:da:38:f2:bd:dd:f4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: /C=US/O=Let's Encrypt/CN=R13 Not valid before: Apr 1 19:44:43 2026 GMT Not valid after: Jun 30 19:44:42 2026 GMT Subject: /CN=kuma.lan.ddnsgeek.com Public Key Algorithm: NULL RSA Public Key: (4096 bit) RSA Public-Key: (4096 bit) Modulus: 00:b6:6c:dc:b9:42:36:84:e7:62:86:94:70:f2:8a: 08:30:32:6d:18:51:4d:52:94:05:2b:1f:50:30:9f: 77:9f:2e:79:d4:d8:22:ae:17:f3:53:a4:b3:f6:6a: 19:2d:ec:9b:3f:6d:44:52:1c:98:08:48:8e:c3:f2: d4:37:b9:3d:7e:0f:b6:59:8e:58:d8:91:a5:d0:85: da:cb:45:d0:92:34:23:43:8b:77:26:04:47:11:59: 40:fc:72:74:b6:8d:76:60:c1:5e:82:f6:c5:36:9d: 78:31:88:33:44:9c:5c:b7:00:e2:69:a6:e5:28:e9: 35:36:7a:2a:5f:60:c1:f0:b3:3f:85:23:3f:e0:84: 3d:d9:95:37:fe:4f:c1:ce:ef:47:06:40:b0:51:40: ff:f8:72:ed:4a:73:9b:0b:fb:10:ce:93:cf:12:07: ff:75:8f:a1:5a:a5:49:97:ae:c2:da:21:a2:de:5f: b1:10:9b:b6:32:da:90:64:69:77:bf:e9:4c:73:36: e0:80:00:fa:b1:b6:4b:8c:3e:2f:53:72:69:bb:5f: d7:ea:a3:71:2b:31:c7:3c:06:d6:6a:78:67:29:d9: 9c:26:d6:c8:37:a5:88:c5:32:34:cb:4e:c1:80:73: 17:cc:05:6b:d0:8b:c9:e1:43:dd:80:87:e5:66:ec: ed:12:75:d5:04:14:d4:6f:a0:e8:a8:1b:d7:51:df: 60:be:bf:ac:34:13:4d:38:52:9b:7e:05:8d:14:5a: df:44:81:4a:c2:e0:8f:1a:c0:60:6b:2f:8f:c4:e6: a8:27:97:a1:e2:e6:1a:36:43:a3:f1:db:cc:9b:22: ea:12:43:b6:9e:26:d4:bc:83:99:c1:8c:2c:e9:e6: 7f:35:51:c4:ed:0f:df:25:85:92:96:45:12:4e:6c: 53:e1:f5:83:ff:97:16:33:e3:51:92:22:b4:60:06: 0e:8f:b7:15:3f:d6:72:74:ad:96:6f:7f:08:ae:8a: 0c:6b:35:da:0c:a3:9e:b5:82:16:b2:77:ad:3b:19: 56:74:24:f2:af:63:bb:1b:c4:49:09:e9:74:38:e4: 4d:8c:3f:92:85:f0:46:8f:76:f7:3e:57:6a:cf:f4: 38:f2:f3:4f:83:5d:4a:b9:16:c9:a1:33:e6:0a:d4: 57:c2:c3:a4:bd:70:de:c9:44:3f:45:d7:06:58:99: d1:ed:1d:d4:bb:36:6a:5a:83:6f:fc:c3:8d:94:25: 08:0d:f7:75:ac:7e:51:31:24:a7:4d:3a:e4:bd:25: 68:fd:e6:3f:38:5a:62:e4:81:6b:a0:5a:36:5c:ae: 09:35:d4:f2:fa:5a:43:7a:71:e7:03:b7:cf:a3:6e: 65:a3:bd Exponent: 65537 (0x10001) X509v3 Extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 55:DE:46:2F:60:4E:32:F7:75:78:FC:50:22:49:41:E2:7D:D1:47:9E X509v3 Authority Key Identifier: E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33 Authority Information Access: CA Issuers - URI:http://r13.i.lencr.org/ X509v3 Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://r13.c.lencr.org/8.crl CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF: C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA Timestamp : Apr 1 20:43:14.100 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:58:30:7D:E4:61:38:D6:FA:4F:92:CE:1B: 96:B7:08:49:EF:E6:E5:3D:1A:01:D1:7A:ED:C5:80:26: CD:5A:F6:8E:02:20:78:AA:85:22:93:AA:25:13:A6:BB: 5E:0C:8C:CA:64:6D:A3:0D:E9:4F:E6:F9:D6:9F:23:76: DF:81:6B:1B:30:3C Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19: D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27 Timestamp : Apr 1 20:43:14.497 2026 GMT Extensions: 00:00:05:00:05:2B:73:C8 Signature : ecdsa-with-SHA256 30:44:02:20:21:D8:AA:E2:2D:C4:AC:03:3B:C0:AA:BB: 9C:5F:31:D2:AD:98:1F:15:FE:6D:83:07:52:01:80:5B: B1:44:31:80:02:20:32:14:CA:70:4A:4A:BB:7D:5C:BD: A6:39:AE:31:08:DC:24:62:48:3D:33:44:3A:73:D2:6B: 91:DC:40:F4:56:2D Verify m: unable to get local issuer certificate SSL Certificate: Signature Algorithm: sha256WithRSAEncryption RSA Key Strength: 4096 Subject: kuma.lan.ddnsgeek.com Altnames: DNS:kuma.lan.ddnsgeek.com Issuer: R13 Not valid before: Apr 1 19:44:43 2026 GMT Not valid after: Jun 30 19:44:42 2026 GMT