Version: 2.1.5 OpenSSL 3.5.5 27 Jan 2026 Connected to 167.179.167.166 Testing SSL server monitor-kuma.lan.ddnsgeek.com on port 443 using SNI name monitor-kuma.lan.ddnsgeek.com SSL/TLS Protocols: SSLv2 disabled SSLv3 disabled TLSv1.0 disabled TLSv1.1 disabled TLSv1.2 enabled TLSv1.3 enabled TLS Fallback SCSV: Server supports TLS Fallback SCSV TLS renegotiation: Session renegotiation not supported TLS Compression: Compression disabled Heartbleed: TLSv1.3 not vulnerable to heartbleed TLSv1.2 not vulnerable to heartbleed Supported Server Cipher(s): Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256 Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384 Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256 Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253 Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253 Server Key Exchange Group(s): TLSv1.3 128 bits secp256r1 (NIST P-256) TLSv1.3 192 bits secp384r1 (NIST P-384) TLSv1.3 260 bits secp521r1 (NIST P-521) TLSv1.3 128 bits x25519 TLSv1.2 128 bits secp256r1 (NIST P-256) TLSv1.2 192 bits secp384r1 (NIST P-384) TLSv1.2 260 bits secp521r1 (NIST P-521) TLSv1.2 128 bits x25519 SSL Certificate: Certificate blob: -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgISBn5e0uF5fviZdYbmtrMH72GSMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTIwHhcNMjYwMjE2MDgxNzUwWhcNMjYwNTE3MDgxNzQ5WjAoMSYwJAYDVQQD Ex1tb25pdG9yLWt1bWEubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBALqtNqX0SNENyHOLkTUeqN3wL0L8y9DEim28fxjGlSER 29BbsNWaPbqR1NLOqnhb2Won10Ocb5kSEIXxqnQVnSulwRUTWMeJLiYxoVbtjTZt 5tS4O7kINjTVf1EwHNXpMRhpVDlwSNgdaHbsOE29X8eWqGPg0ZaTNvfUbHd0E5fR Rp29kEcWZT3UQIgyAGA04D+lHjZj3njiAwaY0eXFqhQjN5w+2zMUQBU/4Rg2tv76 tIP4dhc70pV/UxE4palreRsWnohNGvjr0LtidqdjMc3ntERbzlqKs12Sj+C51/Ts khqtU+d1/SlRZSSb2rskgduJABN0wjTJTwIZueU6fTN0zkSbrU9QYTlMiuNj+wAo 09baAIjK0/MmpIWEKh7lydRYV6sjYV7S5a07bFxnUkdv3X7viO1gMFjDLs82bpys Q7hfiTpI5555Hgdl+xefwp/bhCLd6UWMvhagzX0tmERar7tlC7MrzrE1z3QCa0dV /+OUh3uU9aYC8EhidPMwiGEGcnoKHNALng24tyO8Zr0qfpfW8kzrlV4GVtiYWFKs O1hn9krHglbkYTTDfDQBaiG+Krw+s3IwTJ6OGygn1TJEeEZqz74ZzBhfDuUlwV4e DMRWKediqg0Soni6wCr8Kvdagp2g6/gor+EcvFI1KwFvsWJTAAwi/LxeGR6nZ8aJ AgMBAAGjggIrMIICJzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUu6cNgdWxrMiRMCEWov9bEGClLcYw HwYDVR0jBBgwFoAUALUp8i2ObzHom0yteD763OkM0dIwMwYIKwYBBQUHAQEEJzAl MCMGCCsGAQUFBzAChhdodHRwOi8vcjEyLmkubGVuY3Iub3JnLzAoBgNVHREEITAf gh1tb25pdG9yLWt1bWEubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeB DAECATAuBgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjEyLmMubGVuY3Iub3JnLzE5 LmNybDCCAQwGCisGAQQB1nkCBAIEgf0EgfoA+AB1AJaXZL9VWJet90OHaDcIQnfp 8DrV9qTzNm5GpD8PyqnGAAABnGW8h/YAAAQDAEYwRAIgd21v0+zvMSe47Sbt8ONb MtFnjFQbZ/k1BTblbYGdCA8CIElRr+FAoQdykqxtk/mCLWQso0Wc0XSRklCH6UO3 au8VAH8AcX6V88I4im2x44RJPTHhWqliCHYtQgDgBQzQZ7WmYeIAAAGcZbyIOAAI AAAFAAmVFhAEAwBIMEYCIQDSqw3sFHaH9EICTzyAyeIk1xD3BTSs8xBRrmbN17mi xgIhALXQSw0vsbOdvaH6AKAKyCWYADhl+5qMokBS5sIIapptMA0GCSqGSIb3DQEB CwUAA4IBAQAW1nYKtFasFPe8JA15C72y4EkIz3rx+8Qg06cvPTrRo+Sz0lZU1MLH zbDIIbt8v8SEXk4Ha1FRmQHsxBgWFJjNdmW1FRBLe0mv63aQh9vKbYj8yJke9pXU FJ5/gXsj1O/isOnYMVpn5b6MLyPGdtisbybUWmG8f0cgpGgh+blIfVAYSFiPVJar UEq27l9U7agrWCWL4Yp41WXtjcsRMjexK/93EzyEkS3TKpOhv/AB4TPz6SQF5KHR gubLUVhPetDd+FyLz51dLh8bXEtq8Lp/ficAUj+X5hfuLLDtZCN/gzUDLzWdQBsK jsAhAJl8edhVJ3pBDFn/HBmj+2YKYz2J -----END CERTIFICATE----- Version: 2 Serial Number: 06:7e:5e:d2:e1:79:7e:f8:99:75:86:e6:b6:b3:07:ef:61:92 Signature Algorithm: sha256WithRSAEncryption Issuer: /C=US/O=Let's Encrypt/CN=R12 Not valid before: Feb 16 08:17:50 2026 GMT Not valid after: May 17 08:17:49 2026 GMT Subject: /CN=monitor-kuma.lan.ddnsgeek.com Public Key Algorithm: NULL RSA Public Key: (4096 bit) RSA Public-Key: (4096 bit) Modulus: 00:ba:ad:36:a5:f4:48:d1:0d:c8:73:8b:91:35:1e: a8:dd:f0:2f:42:fc:cb:d0:c4:8a:6d:bc:7f:18:c6: 95:21:11:db:d0:5b:b0:d5:9a:3d:ba:91:d4:d2:ce: aa:78:5b:d9:6a:27:d7:43:9c:6f:99:12:10:85:f1: aa:74:15:9d:2b:a5:c1:15:13:58:c7:89:2e:26:31: a1:56:ed:8d:36:6d:e6:d4:b8:3b:b9:08:36:34:d5: 7f:51:30:1c:d5:e9:31:18:69:54:39:70:48:d8:1d: 68:76:ec:38:4d:bd:5f:c7:96:a8:63:e0:d1:96:93: 36:f7:d4:6c:77:74:13:97:d1:46:9d:bd:90:47:16: 65:3d:d4:40:88:32:00:60:34:e0:3f:a5:1e:36:63: de:78:e2:03:06:98:d1:e5:c5:aa:14:23:37:9c:3e: db:33:14:40:15:3f:e1:18:36:b6:fe:fa:b4:83:f8: 76:17:3b:d2:95:7f:53:11:38:a5:a9:6b:79:1b:16: 9e:88:4d:1a:f8:eb:d0:bb:62:76:a7:63:31:cd:e7: b4:44:5b:ce:5a:8a:b3:5d:92:8f:e0:b9:d7:f4:ec: 92:1a:ad:53:e7:75:fd:29:51:65:24:9b:da:bb:24: 81:db:89:00:13:74:c2:34:c9:4f:02:19:b9:e5:3a: 7d:33:74:ce:44:9b:ad:4f:50:61:39:4c:8a:e3:63: fb:00:28:d3:d6:da:00:88:ca:d3:f3:26:a4:85:84: 2a:1e:e5:c9:d4:58:57:ab:23:61:5e:d2:e5:ad:3b: 6c:5c:67:52:47:6f:dd:7e:ef:88:ed:60:30:58:c3: 2e:cf:36:6e:9c:ac:43:b8:5f:89:3a:48:e7:9e:79: 1e:07:65:fb:17:9f:c2:9f:db:84:22:dd:e9:45:8c: be:16:a0:cd:7d:2d:98:44:5a:af:bb:65:0b:b3:2b: ce:b1:35:cf:74:02:6b:47:55:ff:e3:94:87:7b:94: f5:a6:02:f0:48:62:74:f3:30:88:61:06:72:7a:0a: 1c:d0:0b:9e:0d:b8:b7:23:bc:66:bd:2a:7e:97:d6: f2:4c:eb:95:5e:06:56:d8:98:58:52:ac:3b:58:67: f6:4a:c7:82:56:e4:61:34:c3:7c:34:01:6a:21:be: 2a:bc:3e:b3:72:30:4c:9e:8e:1b:28:27:d5:32:44: 78:46:6a:cf:be:19:cc:18:5f:0e:e5:25:c1:5e:1e: 0c:c4:56:29:e7:62:aa:0d:12:a2:78:ba:c0:2a:fc: 2a:f7:5a:82:9d:a0:eb:f8:28:af:e1:1c:bc:52:35: 2b:01:6f:b1:62:53:00:0c:22:fc:bc:5e:19:1e:a7: 67:c6:89 Exponent: 65537 (0x10001) X509v3 Extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: BB:A7:0D:81:D5:B1:AC:C8:91:30:21:16:A2:FF:5B:10:60:A5:2D:C6 X509v3 Authority Key Identifier: 00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2 Authority Information Access: CA Issuers - URI:http://r12.i.lencr.org/ X509v3 Subject Alternative Name: DNS:monitor-kuma.lan.ddnsgeek.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://r12.c.lencr.org/19.crl CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77: E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6 Timestamp : Feb 16 09:16:20.342 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:77:6D:6F:D3:EC:EF:31:27:B8:ED:26:ED: F0:E3:5B:32:D1:67:8C:54:1B:67:F9:35:05:36:E5:6D: 81:9D:08:0F:02:20:49:51:AF:E1:40:A1:07:72:92:AC: 6D:93:F9:82:2D:64:2C:A3:45:9C:D1:74:91:92:50:87: E9:43:B7:6A:EF:15 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 71:7E:95:F3:C2:38:8A:6D:B1:E3:84:49:3D:31:E1:5A: A9:62:08:76:2D:42:00:E0:05:0C:D0:67:B5:A6:61:E2 Timestamp : Feb 16 09:16:20.408 2026 GMT Extensions: 00:00:05:00:09:95:16:10 Signature : ecdsa-with-SHA256 30:46:02:21:00:D2:AB:0D:EC:14:76:87:F4:42:02:4F: 3C:80:C9:E2:24:D7:10:F7:05:34:AC:F3:10:51:AE:66: CD:D7:B9:A2:C6:02:21:00:B5:D0:4B:0D:2F:B1:B3:9D: BD:A1:FA:00:A0:0A:C8:25:98:00:38:65:FB:9A:8C:A2: 40:52:E6:C2:08:6A:9A:6D Verify m: unable to get local issuer certificate SSL Certificate: Signature Algorithm: sha256WithRSAEncryption RSA Key Strength: 4096 Subject: monitor-kuma.lan.ddnsgeek.com Altnames: DNS:monitor-kuma.lan.ddnsgeek.com Issuer: R12 Not valid before: Feb 16 08:17:50 2026 GMT Not valid after: May 17 08:17:49 2026 GMT