Version: 2.1.5 OpenSSL 3.5.5 27 Jan 2026 Connected to 167.179.167.166 Testing SSL server familytree.lan.ddnsgeek.com on port 443 using SNI name familytree.lan.ddnsgeek.com SSL/TLS Protocols: SSLv2 disabled SSLv3 disabled TLSv1.0 disabled TLSv1.1 disabled TLSv1.2 enabled TLSv1.3 enabled TLS Fallback SCSV: Server supports TLS Fallback SCSV TLS renegotiation: Session renegotiation not supported TLS Compression: Compression disabled Heartbleed: TLSv1.3 not vulnerable to heartbleed TLSv1.2 not vulnerable to heartbleed Supported Server Cipher(s): Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256 Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384 Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256 Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253 Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253 Server Key Exchange Group(s): TLSv1.3 128 bits secp256r1 (NIST P-256) TLSv1.3 192 bits secp384r1 (NIST P-384) TLSv1.3 260 bits secp521r1 (NIST P-521) TLSv1.3 128 bits x25519 TLSv1.2 128 bits secp256r1 (NIST P-256) TLSv1.2 192 bits secp384r1 (NIST P-384) TLSv1.2 260 bits secp521r1 (NIST P-521) TLSv1.2 128 bits x25519 SSL Certificate: Certificate blob: -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISBi3Mw9SeEQdSnmCBsaJqOHA7MA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTMwHhcNMjYwMzE4MDk0NzA4WhcNMjYwNjE2MDk0NzA3WjAmMSQwIgYDVQQD ExtmYW1pbHl0cmVlLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUA A4ICDwAwggIKAoICAQCdZC3rPLgqTZKWTofBxMT9UNnOcu5ABtt7Hg8U5H5dsjiN UZLFYQAxygb9Szs/dIdB1JYjRe+nF4n4gDPGpDq6yvBxLYeP+EYOVQc/n2HN7ZRO EMMGZarokajlwXYbcekJFz2dNk0fFo3T3qY0C+gMRs2oK8D56GeiW5oZY532Y4Nd +OeMX6i/vXk6m3YZ72Ailcbo3otvSdioIZoyHdiliOWdapP0A7nAInX4qqnyDVj6 6FMiDxEOmG3HpKjQQVTufyxaAJW2pAgAvq/0FEgEdhhCDYFE8pfD5gKChpIpBE0+ WB2ZNzL+URzBhwVRav4F6oU+f3JnRD2CLq9jZkGWrje2IijdkqB9DQmRtemA+rR5 fnRKThywDq/bad5YA8mVR0DXZDmzWWPFlYQCsOwaRJe7UlvFKHO3snqH0kZOdhQf DVGNaFAuhl1HTb32N1G7pZjkKxljHSfSO/kkJp8KSUOf+JlNcOQKbDH98qdyzSpL WLXIFYM1XBgfAhDHodmF5lIlZCTvnd+/3ndu+wzDYWwutT2n02oHxWUYhChv7ubo cfGlMarWz5NLQsBJ0ygkYdYJC34XVL1nSBCxIfQ/zvHP80sjYV5XJQnSUCjFYJih efvbuPLOsL26b+H5FyIHE0EcuIE/mlvT5omz3PuoPK6nDxZ/Fi4/m+bj6U+vNQID AQABo4ICIjCCAh4wDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMB MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKXbi5Ic7KIME903fix+9giLQAJbMB8G A1UdIwQYMBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAj BggrBgEFBQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wJgYDVR0RBB8wHYIb ZmFtaWx5dHJlZS5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIB MC4GA1UdHwQnMCUwI6AhoB+GHWh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvNjAuY3Js MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAZBHEbKQS7KeJHKICLgC8q08oB9Qe NSer6v7VA8l9zfAAAAGdAI0T2wAABAMARzBFAiB1h1zGPYbRvh7fSkfMETbaZI1x Q5CknrKknzI/0x+O6AIhAJhxhUPNxvGsJIIp1UmGz58XuWgP6x2HjJ3/dZTIfMwL AHcAyzj3FYl8hKFEX1vB3fvJbvKaWc1HCmkFhbDLFMMUWOcAAAGdAI0T7QAABAMA SDBGAiEA8d38SZptSnikGOi2dlP8tpKueY3UY7Lb20a0aDe/J7kCIQDuE+ebfmdE mXHLh4DnojQ0UtAJKIbbaYtalKLKJg1FyDANBgkqhkiG9w0BAQsFAAOCAQEAWQ+/ lj1iVoe8YkSXMfXA6STPJgFb3uS8b4VeT4kwdlapZXX/L4nmHKXNI52roqfL1ajo zPzK5Txt3ZO6N1aDUo9Nbb4W3CJ4x+Um7EnZwsFu/JmKOvMkSaCIPecm8hn1I+c2 6Gl9hm5i4TKdFImXy+SNv1ollK3FafliqyV+1CdtfOwUNJZoQF9zm7PM2Us/3yvL Vb9GSP/Ij5jwqI0wYwo6HK6ZjzCpuUEPnh75RaaguTNvj6v7w0KHmX9BZ4AoY4fa e6tGtVhxAxtcrVaDUq5FXmKaCVMgHtU76lV2sHOeldUlLh9y9aM53ILrln2eS3L2 x5kvhutAzOLKXVX2cA== -----END CERTIFICATE----- Version: 2 Serial Number: 06:2d:cc:c3:d4:9e:11:07:52:9e:60:81:b1:a2:6a:38:70:3b Signature Algorithm: sha256WithRSAEncryption Issuer: /C=US/O=Let's Encrypt/CN=R13 Not valid before: Mar 18 09:47:08 2026 GMT Not valid after: Jun 16 09:47:07 2026 GMT Subject: /CN=familytree.lan.ddnsgeek.com Public Key Algorithm: NULL RSA Public Key: (4096 bit) RSA Public-Key: (4096 bit) Modulus: 00:9d:64:2d:eb:3c:b8:2a:4d:92:96:4e:87:c1:c4: c4:fd:50:d9:ce:72:ee:40:06:db:7b:1e:0f:14:e4: 7e:5d:b2:38:8d:51:92:c5:61:00:31:ca:06:fd:4b: 3b:3f:74:87:41:d4:96:23:45:ef:a7:17:89:f8:80: 33:c6:a4:3a:ba:ca:f0:71:2d:87:8f:f8:46:0e:55: 07:3f:9f:61:cd:ed:94:4e:10:c3:06:65:aa:e8:91: a8:e5:c1:76:1b:71:e9:09:17:3d:9d:36:4d:1f:16: 8d:d3:de:a6:34:0b:e8:0c:46:cd:a8:2b:c0:f9:e8: 67:a2:5b:9a:19:63:9d:f6:63:83:5d:f8:e7:8c:5f: a8:bf:bd:79:3a:9b:76:19:ef:60:22:95:c6:e8:de: 8b:6f:49:d8:a8:21:9a:32:1d:d8:a5:88:e5:9d:6a: 93:f4:03:b9:c0:22:75:f8:aa:a9:f2:0d:58:fa:e8: 53:22:0f:11:0e:98:6d:c7:a4:a8:d0:41:54:ee:7f: 2c:5a:00:95:b6:a4:08:00:be:af:f4:14:48:04:76: 18:42:0d:81:44:f2:97:c3:e6:02:82:86:92:29:04: 4d:3e:58:1d:99:37:32:fe:51:1c:c1:87:05:51:6a: fe:05:ea:85:3e:7f:72:67:44:3d:82:2e:af:63:66: 41:96:ae:37:b6:22:28:dd:92:a0:7d:0d:09:91:b5: e9:80:fa:b4:79:7e:74:4a:4e:1c:b0:0e:af:db:69: de:58:03:c9:95:47:40:d7:64:39:b3:59:63:c5:95: 84:02:b0:ec:1a:44:97:bb:52:5b:c5:28:73:b7:b2: 7a:87:d2:46:4e:76:14:1f:0d:51:8d:68:50:2e:86: 5d:47:4d:bd:f6:37:51:bb:a5:98:e4:2b:19:63:1d: 27:d2:3b:f9:24:26:9f:0a:49:43:9f:f8:99:4d:70: e4:0a:6c:31:fd:f2:a7:72:cd:2a:4b:58:b5:c8:15: 83:35:5c:18:1f:02:10:c7:a1:d9:85:e6:52:25:64: 24:ef:9d:df:bf:de:77:6e:fb:0c:c3:61:6c:2e:b5: 3d:a7:d3:6a:07:c5:65:18:84:28:6f:ee:e6:e8:71: f1:a5:31:aa:d6:cf:93:4b:42:c0:49:d3:28:24:61: d6:09:0b:7e:17:54:bd:67:48:10:b1:21:f4:3f:ce: f1:cf:f3:4b:23:61:5e:57:25:09:d2:50:28:c5:60: 98:a1:79:fb:db:b8:f2:ce:b0:bd:ba:6f:e1:f9:17: 22:07:13:41:1c:b8:81:3f:9a:5b:d3:e6:89:b3:dc: fb:a8:3c:ae:a7:0f:16:7f:16:2e:3f:9b:e6:e3:e9: 4f:af:35 Exponent: 65537 (0x10001) X509v3 Extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: A5:DB:8B:92:1C:EC:A2:0C:13:DD:37:7E:2C:7E:F6:08:8B:40:02:5B X509v3 Authority Key Identifier: E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33 Authority Information Access: CA Issuers - URI:http://r13.i.lencr.org/ X509v3 Subject Alternative Name: DNS:familytree.lan.ddnsgeek.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://r13.c.lencr.org/60.crl CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB: 4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0 Timestamp : Mar 18 10:45:38.907 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:75:87:5C:C6:3D:86:D1:BE:1E:DF:4A:47: CC:11:36:DA:64:8D:71:43:90:A4:9E:B2:A4:9F:32:3F: D3:1F:8E:E8:02:21:00:98:71:85:43:CD:C6:F1:AC:24: 82:29:D5:49:86:CF:9F:17:B9:68:0F:EB:1D:87:8C:9D: FF:75:94:C8:7C:CC:0B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Mar 18 10:45:38.925 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:F1:DD:FC:49:9A:6D:4A:78:A4:18:E8: B6:76:53:FC:B6:92:AE:79:8D:D4:63:B2:DB:DB:46:B4: 68:37:BF:27:B9:02:21:00:EE:13:E7:9B:7E:67:44:99: 71:CB:87:80:E7:A2:34:34:52:D0:09:28:86:DB:69:8B: 5A:94:A2:CA:26:0D:45:C8 Verify m: unable to get local issuer certificate SSL Certificate: Signature Algorithm: sha256WithRSAEncryption RSA Key Strength: 4096 Subject: familytree.lan.ddnsgeek.com Altnames: DNS:familytree.lan.ddnsgeek.com Issuer: R13 Not valid before: Mar 18 09:47:08 2026 GMT Not valid after: Jun 16 09:47:07 2026 GMT