Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025

Connected to 167.179.167.166

Testing SSL server passbolt.lan.ddnsgeek.com on port 443 using SNI name passbolt.lan.ddnsgeek.com

  SSL/TLS Protocols:
SSLv2     disabled
SSLv3     disabled
TLSv1.0   disabled
TLSv1.1   disabled
TLSv1.2   enabled
TLSv1.3   enabled

  TLS Fallback SCSV:
Server supports TLS Fallback SCSV

  TLS renegotiation:
Session renegotiation not supported

  TLS Compression:
Compression disabled

  Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed

  Supported Server Cipher(s):
Preferred TLSv1.3  128 bits  TLS_AES_128_GCM_SHA256
Accepted  TLSv1.3  256 bits  TLS_AES_256_GCM_SHA384
Accepted  TLSv1.3  256 bits  TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2  128 bits  ECDHE-RSA-AES128-GCM-SHA256   Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-GCM-SHA384   Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-CHACHA20-POLY1305   Curve 25519 DHE 253
Accepted  TLSv1.2  128 bits  ECDHE-RSA-AES128-SHA          Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-SHA          Curve 25519 DHE 253

  Server Key Exchange Group(s):
TLSv1.3  128 bits  secp256r1 (NIST P-256)
TLSv1.3  192 bits  secp384r1 (NIST P-384)
TLSv1.3  260 bits  secp521r1 (NIST P-521)
TLSv1.3  128 bits  x25519
TLSv1.2  128 bits  secp256r1 (NIST P-256)
TLSv1.2  192 bits  secp384r1 (NIST P-384)
TLSv1.2  260 bits  secp521r1 (NIST P-521)
TLSv1.2  128 bits  x25519

  SSL Certificate:
    Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
    Version: 2
    Serial Number: 06:b1:d7:0b:1a:8a:64:6e:ec:4a:80:43:f3:c3:4b:cc:d8:00
    Signature Algorithm: sha256WithRSAEncryption
    Issuer: /C=US/O=Let's Encrypt/CN=R13
    Not valid before: Feb  5 19:02:28 2026 GMT
    Not valid after: May  6 19:02:27 2026 GMT
    Subject: /CN=passbolt.lan.ddnsgeek.com
    Public Key Algorithm: NULL
    RSA Public Key: (4096 bit)
      RSA Public-Key: (4096 bit)
      Modulus:
          00:ee:cc:fc:1d:df:68:45:fe:8c:13:03:3c:88:96:
          4d:8c:4b:df:0b:5f:61:4b:d0:e3:b3:88:81:78:b5:
          bc:8a:3c:af:e1:4b:f7:58:2d:b1:4a:b9:e0:94:01:
          43:53:81:07:3c:3f:c0:87:3c:f4:c6:09:12:9f:42:
          ec:4a:f5:e7:ec:1c:e0:6b:a3:0f:13:24:f0:8b:79:
          b9:e4:e5:00:63:bc:40:bc:20:49:fa:70:f3:57:48:
          17:c0:f6:7f:8e:d4:05:9c:eb:08:e4:3d:3a:04:c3:
          c1:d9:bb:93:a4:0f:8c:04:55:f1:47:66:da:da:0d:
          64:4a:47:75:fa:50:b8:96:f3:7e:57:b5:6c:06:27:
          94:60:93:b8:2b:e6:0b:6b:d1:7c:b9:d1:d4:59:65:
          c3:f5:21:e8:50:09:36:04:cb:95:38:dd:5b:1f:aa:
          c2:64:5f:38:b9:fb:ee:6e:10:4d:2c:8a:7c:22:9f:
          8f:61:41:dc:b4:4d:96:12:c7:ca:32:5a:d0:59:eb:
          bc:c2:ff:e1:76:f6:33:99:60:9a:55:fc:d2:17:fb:
          7d:2f:cc:16:e6:51:84:63:ff:8d:22:f3:93:c5:b6:
          48:29:0a:04:78:b9:ce:64:cb:53:32:b9:eb:1e:7d:
          0a:5f:0d:fe:17:3b:72:97:f0:0d:c2:01:bd:3a:c3:
          98:22:b6:c7:bf:39:09:c4:80:cb:2a:bd:41:c5:8b:
          32:d8:5f:8f:c1:b5:04:77:52:6b:8d:0f:bb:38:cb:
          cf:f0:9f:a1:ac:c6:0f:3b:7b:01:ab:7d:6f:c8:c3:
          a3:08:7a:da:e4:68:68:83:74:57:a6:61:f3:0b:27:
          50:c1:4e:c1:17:f4:4f:c0:5d:51:64:02:61:f2:dd:
          da:8e:27:15:a2:af:96:95:65:b4:d3:ae:23:6c:f3:
          63:14:73:ae:8c:91:a9:89:5d:7c:33:4c:67:9e:6d:
          bd:8d:14:84:a9:d5:7e:91:ff:f8:9d:79:92:eb:3a:
          8b:2e:0e:2a:e5:08:14:d2:1a:62:f4:64:29:46:1b:
          01:9e:e9:63:94:91:fe:02:0b:8f:39:71:dc:f4:a1:
          97:94:f1:74:d2:38:8d:58:90:94:06:8c:8a:35:33:
          70:4d:1f:4b:1f:a8:c3:2a:40:1f:53:33:eb:6d:d6:
          a6:ab:d8:08:ba:64:e3:da:83:3d:9a:c1:e7:14:2f:
          a7:e2:ff:db:e0:fa:01:f7:e1:6f:b5:a9:0b:28:17:
          8c:8c:25:fa:e8:51:e8:5f:cb:fc:c0:94:be:f1:ab:
          37:45:e8:e9:ad:d5:70:e0:24:21:78:9f:f2:d1:3e:
          c6:e7:92:b4:0e:42:c9:b3:0d:c7:11:54:e2:d7:e4:
          19:c3:39
      Exponent: 65537 (0x10001)
    X509v3 Extensions:
      X509v3 Key Usage: critical
        Digital Signature, Key Encipherment
      X509v3 Extended Key Usage:
        TLS Web Server Authentication, TLS Web Client Authentication
      X509v3 Basic Constraints: critical
        CA:FALSE
      X509v3 Subject Key Identifier:
        9B:4B:96:AB:A2:A1:CD:3E:D1:8D:85:EF:C9:E6:F2:04:B4:6A:63:2C
      X509v3 Authority Key Identifier:
        E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
      Authority Information Access:
        CA Issuers - URI:http://r13.i.lencr.org/
      X509v3 Subject Alternative Name:
        DNS:passbolt.lan.ddnsgeek.com
      X509v3 Certificate Policies:
        Policy: 2.23.140.1.2.1
      X509v3 CRL Distribution Points:
        Full Name:
          URI:http://r13.c.lencr.org/1.crl

      CT Precertificate SCTs:
        Signed Certificate Timestamp:
            Version   : v1 (0x0)
            Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                        4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
            Timestamp : Feb  5 20:00:59.205 2026 GMT
            Extensions: none
            Signature : ecdsa-with-SHA256
                        30:44:02:20:7D:4A:2A:04:73:A4:57:CC:14:E3:F6:12:
                        9B:09:70:35:4E:A4:47:19:B4:30:45:05:E3:2C:D0:D4:
                        96:3C:97:74:02:20:54:86:03:4E:88:A3:E5:89:85:05:
                        49:EC:49:96:06:A4:DB:34:9F:A2:56:20:EA:60:89:76:
                        30:A4:6C:CB:EF:9E
        Signed Certificate Timestamp:
            Version   : v1 (0x0)
            Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                        DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
            Timestamp : Feb  5 20:00:59.234 2026 GMT
            Extensions: none
            Signature : ecdsa-with-SHA256
                        30:46:02:21:00:BD:05:6D:6E:6E:1C:49:29:7E:FC:6E:
                        0A:94:8C:0F:C8:07:65:9C:78:D0:76:54:FB:4A:33:36:
                        04:5B:CE:70:A9:02:21:00:BB:FC:8D:F0:DC:44:58:04:
                        DC:27:34:65:6B:EB:19:58:A4:86:49:92:C4:18:10:3F:
                        17:F5:11:6E:F6:48:D5:30
  Verify m:
    unable to get local issuer certificate

  SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength:    4096

Subject:  passbolt.lan.ddnsgeek.com
Altnames: DNS:passbolt.lan.ddnsgeek.com
Issuer:   R13

Not valid before: Feb  5 19:02:28 2026 GMT
Not valid after:  May  6 19:02:27 2026 GMT