Version: 2.1.5
OpenSSL 3.5.5 27 Jan 2026

Connected to 167.179.167.166

Testing SSL server gitea.lan.ddnsgeek.com on port 443 using SNI name gitea.lan.ddnsgeek.com

  SSL/TLS Protocols:
SSLv2     disabled
SSLv3     disabled
TLSv1.0   disabled
TLSv1.1   disabled
TLSv1.2   enabled
TLSv1.3   enabled

  TLS Fallback SCSV:
Server supports TLS Fallback SCSV

  TLS renegotiation:
Session renegotiation not supported

  TLS Compression:
Compression disabled

  Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed

  Supported Server Cipher(s):
Preferred TLSv1.3  128 bits  TLS_AES_128_GCM_SHA256
Accepted  TLSv1.3  256 bits  TLS_AES_256_GCM_SHA384
Accepted  TLSv1.3  256 bits  TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2  128 bits  ECDHE-RSA-AES128-GCM-SHA256   Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-GCM-SHA384   Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-CHACHA20-POLY1305   Curve 25519 DHE 253
Accepted  TLSv1.2  128 bits  ECDHE-RSA-AES128-SHA          Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-SHA          Curve 25519 DHE 253

  Server Key Exchange Group(s):
TLSv1.3  128 bits  secp256r1 (NIST P-256)
TLSv1.3  192 bits  secp384r1 (NIST P-384)
TLSv1.3  260 bits  secp521r1 (NIST P-521)
TLSv1.3  128 bits  x25519
TLSv1.2  128 bits  secp256r1 (NIST P-256)
TLSv1.2  192 bits  secp384r1 (NIST P-384)
TLSv1.2  260 bits  secp521r1 (NIST P-521)
TLSv1.2  128 bits  x25519

  SSL Certificate:
    Certificate blob:
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgISBXMHzczJpoZwyRBWBa+yn6kWMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTMwHhcNMjYwMzE0MTcyMjU4WhcNMjYwNjEyMTcyMjU3WjAhMR8wHQYDVQQD
ExZnaXRlYS5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
MIICCgKCAgEAvWOY53ppJ6WLWYEYvVxsttbUsXb3wic0EJmv1FoagUJq/oJgQqcc
EIQsGCIGy4J3cRAhOvJmrkAWYd89m3JEotOrc63jKNY+EXyxXkZcoYKgyCVGD2jj
Aqd84ICb17RwoU+lr4Uy6WDrbF/1tml00DAOy9M0BDcdNZu9dVRxRieKW3TAwgZ2
UbeWlqws1Qg0KQ8KmCx2xU/Eb1tNQi7+DzEKVWHjwvBvATrTMFl4OFd9cSl7gH86
B+gGFAHTj5//ETLIN6o6N9KVG39NQmol4E/JbxOuT6AWlxSVt4PydE57zixT1v3Q
aqUgupY++M7I3Szlrk20Irhum8Y0xD8jvN5dX3Yk/KY1OALysQ0RXCvi8ub88izz
vtqViF0hKXkexxQCWvVl5pnZMlv06AQaT13Wgb645iuby34E7fvaxPzbz3pqy9FC
PjiZIl02RHvtNcoFOlslsvuqoka8f8x8U/pUIiDK+eVmYL7oRCS5uN5a793OpIOX
RutnsqaracEYjHip9FKKToQVcDzIfrYG/4e7yKleKl9Kn/Qv0DNWyRrUQh5mlic5
gsfDQdQ61WwTQDqZ2vC2b+vgnn/q89/YwrPn6YURZmBzdHdWLStPdqu1CcGw7doy
UQ7fqPPn13SaUOmn81/aLTwiU2ZEuqyLtGOTd5SW8lwTk/soAK47oJcCAwEAAaOC
AiMwggIfMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBROtWKkyouZxS+wW5peSbSf2HqSxjAfBgNVHSME
GDAWgBTnq58PLDOgU9NeT3jIsoQOO9aSMzAzBggrBgEFBQcBAQQnMCUwIwYIKwYB
BQUHMAKGF2h0dHA6Ly9yMTMuaS5sZW5jci5vcmcvMCEGA1UdEQQaMBiCFmdpdGVh
Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYDVR0fBCcw
JTAjoCGgH4YdaHR0cDovL3IxMy5jLmxlbmNyLm9yZy8yMy5jcmwwggELBgorBgEE
AdZ5AgQCBIH8BIH5APcAdgBkEcRspBLsp4kcogIuALyrTygH1B41J6vq/tUDyX3N
8AAAAZztlPX9AAAEAwBHMEUCIQCRYaC3npHQ7klb+9/39/LgSLchw+9tykD2/WIN
7wQ7SAIgM+n9cxzXFSMLujZwNFcgA3QiSDWj4C9V/05AcA3ySycAfQBxfpXzwjiK
bbHjhEk9MeFaqWIIdi1CAOAFDNBntaZh4gAAAZztlPagAAgAAAUAC6iRyQQDAEYw
RAIgCFUtVX2G8nW8FHj86RP6mcQPnuwa610mntmBx8Nf63QCIBriRrYIhoGtrW4b
iGyo4fRUgymjMTNKTOpXKl5l4REKMA0GCSqGSIb3DQEBCwUAA4IBAQB8TQPBqCXO
PZnsVyDS+o6J9OcVv8H2DWti/W/zbw1VEeEggkvd2fs0wwZz19LJxPosmeyz4Uaq
PfY2OdBmfYIzC0dnJ1ds8oXkhjEq6YYXPp/a6YHkOm9mKQZXmDviC2IqTC76HmmT
uF9mxcgNltQpuLO8d2Vh9nP8ML7j7Gj5T1v5ZYT2Y7PxCrwv6o9owPIHmn+4k+61
VvrApIlNjtx8v6ZxxY497gOecybg1B/6kmpdDI/2E6zU81Y+p/CRSH+NOfA+B5tE
yNVjSg+2TIIlzH4v+dZvS6oO8vRdDmBuG7JpbeTBqDtwrwdpEIlycp1OBNRRrRVQ
5UTGSnpOjgf1
-----END CERTIFICATE-----
    Version: 2
    Serial Number: 05:73:07:cd:cc:c9:a6:86:70:c9:10:56:05:af:b2:9f:a9:16
    Signature Algorithm: sha256WithRSAEncryption
    Issuer: /C=US/O=Let's Encrypt/CN=R13
    Not valid before: Mar 14 17:22:58 2026 GMT
    Not valid after: Jun 12 17:22:57 2026 GMT
    Subject: /CN=gitea.lan.ddnsgeek.com
    Public Key Algorithm: NULL
    RSA Public Key: (4096 bit)
      RSA Public-Key: (4096 bit)
      Modulus:
          00:bd:63:98:e7:7a:69:27:a5:8b:59:81:18:bd:5c:
          6c:b6:d6:d4:b1:76:f7:c2:27:34:10:99:af:d4:5a:
          1a:81:42:6a:fe:82:60:42:a7:1c:10:84:2c:18:22:
          06:cb:82:77:71:10:21:3a:f2:66:ae:40:16:61:df:
          3d:9b:72:44:a2:d3:ab:73:ad:e3:28:d6:3e:11:7c:
          b1:5e:46:5c:a1:82:a0:c8:25:46:0f:68:e3:02:a7:
          7c:e0:80:9b:d7:b4:70:a1:4f:a5:af:85:32:e9:60:
          eb:6c:5f:f5:b6:69:74:d0:30:0e:cb:d3:34:04:37:
          1d:35:9b:bd:75:54:71:46:27:8a:5b:74:c0:c2:06:
          76:51:b7:96:96:ac:2c:d5:08:34:29:0f:0a:98:2c:
          76:c5:4f:c4:6f:5b:4d:42:2e:fe:0f:31:0a:55:61:
          e3:c2:f0:6f:01:3a:d3:30:59:78:38:57:7d:71:29:
          7b:80:7f:3a:07:e8:06:14:01:d3:8f:9f:ff:11:32:
          c8:37:aa:3a:37:d2:95:1b:7f:4d:42:6a:25:e0:4f:
          c9:6f:13:ae:4f:a0:16:97:14:95:b7:83:f2:74:4e:
          7b:ce:2c:53:d6:fd:d0:6a:a5:20:ba:96:3e:f8:ce:
          c8:dd:2c:e5:ae:4d:b4:22:b8:6e:9b:c6:34:c4:3f:
          23:bc:de:5d:5f:76:24:fc:a6:35:38:02:f2:b1:0d:
          11:5c:2b:e2:f2:e6:fc:f2:2c:f3:be:da:95:88:5d:
          21:29:79:1e:c7:14:02:5a:f5:65:e6:99:d9:32:5b:
          f4:e8:04:1a:4f:5d:d6:81:be:b8:e6:2b:9b:cb:7e:
          04:ed:fb:da:c4:fc:db:cf:7a:6a:cb:d1:42:3e:38:
          99:22:5d:36:44:7b:ed:35:ca:05:3a:5b:25:b2:fb:
          aa:a2:46:bc:7f:cc:7c:53:fa:54:22:20:ca:f9:e5:
          66:60:be:e8:44:24:b9:b8:de:5a:ef:dd:ce:a4:83:
          97:46:eb:67:b2:a6:ab:69:c1:18:8c:78:a9:f4:52:
          8a:4e:84:15:70:3c:c8:7e:b6:06:ff:87:bb:c8:a9:
          5e:2a:5f:4a:9f:f4:2f:d0:33:56:c9:1a:d4:42:1e:
          66:96:27:39:82:c7:c3:41:d4:3a:d5:6c:13:40:3a:
          99:da:f0:b6:6f:eb:e0:9e:7f:ea:f3:df:d8:c2:b3:
          e7:e9:85:11:66:60:73:74:77:56:2d:2b:4f:76:ab:
          b5:09:c1:b0:ed:da:32:51:0e:df:a8:f3:e7:d7:74:
          9a:50:e9:a7:f3:5f:da:2d:3c:22:53:66:44:ba:ac:
          8b:b4:63:93:77:94:96:f2:5c:13:93:fb:28:00:ae:
          3b:a0:97
      Exponent: 65537 (0x10001)
    X509v3 Extensions:
      X509v3 Key Usage: critical
        Digital Signature, Key Encipherment
      X509v3 Extended Key Usage:
        TLS Web Server Authentication
      X509v3 Basic Constraints: critical
        CA:FALSE
      X509v3 Subject Key Identifier:
        4E:B5:62:A4:CA:8B:99:C5:2F:B0:5B:9A:5E:49:B4:9F:D8:7A:92:C6
      X509v3 Authority Key Identifier:
        E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
      Authority Information Access:
        CA Issuers - URI:http://r13.i.lencr.org/
      X509v3 Subject Alternative Name:
        DNS:gitea.lan.ddnsgeek.com
      X509v3 Certificate Policies:
        Policy: 2.23.140.1.2.1
      X509v3 CRL Distribution Points:
        Full Name:
          URI:http://r13.c.lencr.org/23.crl

      CT Precertificate SCTs:
        Signed Certificate Timestamp:
            Version   : v1 (0x0)
            Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                        4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
            Timestamp : Mar 14 18:21:28.445 2026 GMT
            Extensions: none
            Signature : ecdsa-with-SHA256
                        30:45:02:21:00:91:61:A0:B7:9E:91:D0:EE:49:5B:FB:
                        DF:F7:F7:F2:E0:48:B7:21:C3:EF:6D:CA:40:F6:FD:62:
                        0D:EF:04:3B:48:02:20:33:E9:FD:73:1C:D7:15:23:0B:
                        BA:36:70:34:57:20:03:74:22:48:35:A3:E0:2F:55:FF:
                        4E:40:70:0D:F2:4B:27
        Signed Certificate Timestamp:
            Version   : v1 (0x0)
            Log ID    : 71:7E:95:F3:C2:38:8A:6D:B1:E3:84:49:3D:31:E1:5A:
                        A9:62:08:76:2D:42:00:E0:05:0C:D0:67:B5:A6:61:E2
            Timestamp : Mar 14 18:21:28.608 2026 GMT
            Extensions: 00:00:05:00:0B:A8:91:C9
            Signature : ecdsa-with-SHA256
                        30:44:02:20:08:55:2D:55:7D:86:F2:75:BC:14:78:FC:
                        E9:13:FA:99:C4:0F:9E:EC:1A:EB:5D:26:9E:D9:81:C7:
                        C3:5F:EB:74:02:20:1A:E2:46:B6:08:86:81:AD:AD:6E:
                        1B:88:6C:A8:E1:F4:54:83:29:A3:31:33:4A:4C:EA:57:
                        2A:5E:65:E1:11:0A
  Verify m:
    unable to get local issuer certificate

  SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength:    4096

Subject:  gitea.lan.ddnsgeek.com
Altnames: DNS:gitea.lan.ddnsgeek.com
Issuer:   R13

Not valid before: Mar 14 17:22:58 2026 GMT
Not valid after:  Jun 12 17:22:57 2026 GMT