Version: 2.1.5 OpenSSL 3.5.5 27 Jan 2026 Connected to 167.179.167.166 Testing SSL server traefik.lan.ddnsgeek.com on port 443 using SNI name traefik.lan.ddnsgeek.com SSL/TLS Protocols: SSLv2 disabled SSLv3 disabled TLSv1.0 disabled TLSv1.1 disabled TLSv1.2 enabled TLSv1.3 enabled TLS Fallback SCSV: Server supports TLS Fallback SCSV TLS renegotiation: Session renegotiation not supported TLS Compression: Compression disabled Heartbleed: TLSv1.3 not vulnerable to heartbleed TLSv1.2 not vulnerable to heartbleed Supported Server Cipher(s): Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256 Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384 Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256 Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253 Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253 Server Key Exchange Group(s): TLSv1.3 128 bits secp256r1 (NIST P-256) TLSv1.3 192 bits secp384r1 (NIST P-384) TLSv1.3 260 bits secp521r1 (NIST P-521) TLSv1.3 128 bits x25519 TLSv1.2 128 bits secp256r1 (NIST P-256) TLSv1.2 192 bits secp384r1 (NIST P-384) TLSv1.2 260 bits secp521r1 (NIST P-521) TLSv1.2 128 bits x25519 SSL Certificate: Certificate blob: -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgISBS2doeeMRnZ7rS8hQrl4D4mJMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTIwHhcNMjYwMjI0MTcxNTU2WhcNMjYwNTI1MTcxNTU1WjAjMSEwHwYDVQQD Exh0cmFlZmlrLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4IC DwAwggIKAoICAQDPV80efBCHNEUZ3FWDhW0Zs1QZYXkN9XoeXMuPbWU+LhfvXtUz 8RoGL0FPNt99LeVQOAOvKO0ZTbSgo594o+RrnBrckl9tDAtfJAFNJNkvrLZtZsD7 kN7zljaGSgcHCKyX+C9TG0+KwV9qmVijc/9CaUJ2p8H21DVktVwJyHscc0UiMIak 5UqMAtfQrjIcNp+5pYiDpEHhBJ9LXDk4pFBOnJWF3tzuiAoNa5jgwSEV+6MpTQ4K 7m5G/J5v642WCIjsfAmjAFEVqO54rrEaP++0BiWPSyeXNJ6+sB7uk6jbMwFNzCIC aRe1llv9afnz17qWAfdEaXclyBbM/fyto/QMQa5hntBNHDByPXqkGE23+TeIlRKF mw3161Uzc2ycRAm49DYMM0W7MVINOZE2syssqMt/F33n3Mqx/exGZE9u8d2lqoPr i+KJSSb2MsFHPJGIL9FfH/2tYfpJQI6KexbYZxOsRj2YzgX5b8DocWNFCw/diCz2 GHrBFAcn+IqYAjjnC/5NqNc3xBi+zBWdo4gjmrSHrX/eeaHq1dNaBRIKKN4Z/0Eh Y9eMkQUZby6rDqf+l2D7Mae4QcdYMKW/IeMgQXFAMuwTyXHXVdiLCOcnOlsf2HLa wy48HR9jI56jSH6q3vIRqWFVMfDN/58wgqbqTUEQtybbRaNqISG3TmAcFQIDAQAB o4ICJzCCAiMwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFLhm3925P+ID7gXZ8jbNGN5ad3ArMB8GA1Ud IwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAjBggr BgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wIwYDVR0RBBwwGoIYdHJh ZWZpay5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC4GA1Ud HwQnMCUwI6AhoB+GHWh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMTAuY3JsMIIBDQYK KwYBBAHWeQIEAgSB/gSB+wD5AH4AcX6V88I4im2x44RJPTHhWqliCHYtQgDgBQzQ Z7WmYeIAAAGckNwO+AAIAAAFAApBBmMEAwBHMEUCIQD2eX809wAYVzKDAs0Xk8gD QYeXJJjHkP4JVkNQnxATvQIgK0tOHxZl0BuqNLfnMHZxKXTL3MBXlK6BUc8IRNJC U+sAdwAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAAAZyQ3BZhAAAE AwBIMEYCIQDZXBfbpozxVgDyGgDIcK2XJUYLohKnZlieElRQWHzwCgIhAOMPKNgE QAvRA4h69si49WrT7jxmZofyPF0Wnr6YYkZAMA0GCSqGSIb3DQEBCwUAA4IBAQDG NoVBNA/6pAHXZ96vPay1KL05TUYb1FjDSeqyjULEbkoabaIXrD95ocx3K+mElsa9 M/pYYcNirGKmwcWTnIbsfCbGhlw6ipN+Nh+SdGj104BGYqxwaxgUML7i3s7dMXXT /oebN7CpDskRQYBIzB1DFDBxBHJBV8mYpe1U0zNpkpHyHGKK4IcSXn58r2e23uNn bAnG4a0dbmSfKaP5T+BCK5ANUiAowQlQhfYy4Ez/Ht9tLtzeOSanAE1A7+kV0PkZ kNt6WRsWU8xqbDEDTXflZHEqAIuBZ7oZdKsuvOMUPmIExtyY6KZLDSzAssBn2G76 HejYTdxMZZXS7/veLh/0 -----END CERTIFICATE----- Version: 2 Serial Number: 05:2d:9d:a1:e7:8c:46:76:7b:ad:2f:21:42:b9:78:0f:89:89 Signature Algorithm: sha256WithRSAEncryption Issuer: /C=US/O=Let's Encrypt/CN=R12 Not valid before: Feb 24 17:15:56 2026 GMT Not valid after: May 25 17:15:55 2026 GMT Subject: /CN=traefik.lan.ddnsgeek.com Public Key Algorithm: NULL RSA Public Key: (4096 bit) RSA Public-Key: (4096 bit) Modulus: 00:cf:57:cd:1e:7c:10:87:34:45:19:dc:55:83:85: 6d:19:b3:54:19:61:79:0d:f5:7a:1e:5c:cb:8f:6d: 65:3e:2e:17:ef:5e:d5:33:f1:1a:06:2f:41:4f:36: df:7d:2d:e5:50:38:03:af:28:ed:19:4d:b4:a0:a3: 9f:78:a3:e4:6b:9c:1a:dc:92:5f:6d:0c:0b:5f:24: 01:4d:24:d9:2f:ac:b6:6d:66:c0:fb:90:de:f3:96: 36:86:4a:07:07:08:ac:97:f8:2f:53:1b:4f:8a:c1: 5f:6a:99:58:a3:73:ff:42:69:42:76:a7:c1:f6:d4: 35:64:b5:5c:09:c8:7b:1c:73:45:22:30:86:a4:e5: 4a:8c:02:d7:d0:ae:32:1c:36:9f:b9:a5:88:83:a4: 41:e1:04:9f:4b:5c:39:38:a4:50:4e:9c:95:85:de: dc:ee:88:0a:0d:6b:98:e0:c1:21:15:fb:a3:29:4d: 0e:0a:ee:6e:46:fc:9e:6f:eb:8d:96:08:88:ec:7c: 09:a3:00:51:15:a8:ee:78:ae:b1:1a:3f:ef:b4:06: 25:8f:4b:27:97:34:9e:be:b0:1e:ee:93:a8:db:33: 01:4d:cc:22:02:69:17:b5:96:5b:fd:69:f9:f3:d7: ba:96:01:f7:44:69:77:25:c8:16:cc:fd:fc:ad:a3: f4:0c:41:ae:61:9e:d0:4d:1c:30:72:3d:7a:a4:18: 4d:b7:f9:37:88:95:12:85:9b:0d:f5:eb:55:33:73: 6c:9c:44:09:b8:f4:36:0c:33:45:bb:31:52:0d:39: 91:36:b3:2b:2c:a8:cb:7f:17:7d:e7:dc:ca:b1:fd: ec:46:64:4f:6e:f1:dd:a5:aa:83:eb:8b:e2:89:49: 26:f6:32:c1:47:3c:91:88:2f:d1:5f:1f:fd:ad:61: fa:49:40:8e:8a:7b:16:d8:67:13:ac:46:3d:98:ce: 05:f9:6f:c0:e8:71:63:45:0b:0f:dd:88:2c:f6:18: 7a:c1:14:07:27:f8:8a:98:02:38:e7:0b:fe:4d:a8: d7:37:c4:18:be:cc:15:9d:a3:88:23:9a:b4:87:ad: 7f:de:79:a1:ea:d5:d3:5a:05:12:0a:28:de:19:ff: 41:21:63:d7:8c:91:05:19:6f:2e:ab:0e:a7:fe:97: 60:fb:31:a7:b8:41:c7:58:30:a5:bf:21:e3:20:41: 71:40:32:ec:13:c9:71:d7:55:d8:8b:08:e7:27:3a: 5b:1f:d8:72:da:c3:2e:3c:1d:1f:63:23:9e:a3:48: 7e:aa:de:f2:11:a9:61:55:31:f0:cd:ff:9f:30:82: a6:ea:4d:41:10:b7:26:db:45:a3:6a:21:21:b7:4e: 60:1c:15 Exponent: 65537 (0x10001) X509v3 Extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: B8:66:DF:DD:B9:3F:E2:03:EE:05:D9:F2:36:CD:18:DE:5A:77:70:2B X509v3 Authority Key Identifier: 00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2 Authority Information Access: CA Issuers - URI:http://r12.i.lencr.org/ X509v3 Subject Alternative Name: DNS:traefik.lan.ddnsgeek.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://r12.c.lencr.org/10.crl CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 71:7E:95:F3:C2:38:8A:6D:B1:E3:84:49:3D:31:E1:5A: A9:62:08:76:2D:42:00:E0:05:0C:D0:67:B5:A6:61:E2 Timestamp : Feb 24 18:14:26.808 2026 GMT Extensions: 00:00:05:00:0A:41:06:63 Signature : ecdsa-with-SHA256 30:45:02:21:00:F6:79:7F:34:F7:00:18:57:32:83:02: CD:17:93:C8:03:41:87:97:24:98:C7:90:FE:09:56:43: 50:9F:10:13:BD:02:20:2B:4B:4E:1F:16:65:D0:1B:AA: 34:B7:E7:30:76:71:29:74:CB:DC:C0:57:94:AE:81:51: CF:08:44:D2:42:53:EB Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF: C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA Timestamp : Feb 24 18:14:28.705 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:D9:5C:17:DB:A6:8C:F1:56:00:F2:1A: 00:C8:70:AD:97:25:46:0B:A2:12:A7:66:58:9E:12:54: 50:58:7C:F0:0A:02:21:00:E3:0F:28:D8:04:40:0B:D1: 03:88:7A:F6:C8:B8:F5:6A:D3:EE:3C:66:66:87:F2:3C: 5D:16:9E:BE:98:62:46:40 Verify m: unable to get local issuer certificate SSL Certificate: Signature Algorithm: sha256WithRSAEncryption RSA Key Strength: 4096 Subject: traefik.lan.ddnsgeek.com Altnames: DNS:traefik.lan.ddnsgeek.com Issuer: R12 Not valid before: Feb 24 17:15:56 2026 GMT Not valid after: May 25 17:15:55 2026 GMT