Version: 2.1.5 OpenSSL 3.5.5 27 Jan 2026 Connected to 167.179.167.166 Testing SSL server gotify.lan.ddnsgeek.com on port 443 using SNI name gotify.lan.ddnsgeek.com SSL/TLS Protocols: SSLv2 disabled SSLv3 disabled TLSv1.0 disabled TLSv1.1 disabled TLSv1.2 enabled TLSv1.3 enabled TLS Fallback SCSV: Server supports TLS Fallback SCSV TLS renegotiation: Session renegotiation not supported TLS Compression: Compression disabled Heartbleed: TLSv1.3 not vulnerable to heartbleed TLSv1.2 not vulnerable to heartbleed Supported Server Cipher(s): Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256 Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384 Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256 Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253 Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253 Server Key Exchange Group(s): TLSv1.3 128 bits secp256r1 (NIST P-256) TLSv1.3 192 bits secp384r1 (NIST P-384) TLSv1.3 260 bits secp521r1 (NIST P-521) TLSv1.3 128 bits x25519 TLSv1.2 128 bits secp256r1 (NIST P-256) TLSv1.2 192 bits secp384r1 (NIST P-384) TLSv1.2 260 bits secp521r1 (NIST P-521) TLSv1.2 128 bits x25519 SSL Certificate: Certificate blob: -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgISBWjxVFy9rGrar3/Ia3tZt0wJMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTMwHhcNMjYwMjE0MTkwMjMxWhcNMjYwNTE1MTkwMjMwWjAiMSAwHgYDVQQD Exdnb3RpZnkubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP ADCCAgoCggIBAJKWJGSSAoVrS6NqFLLjikQard2jHkoMhwLwosukVIZ70U+dxLdM k7PJb/DHLM1sj4Wf04jBBMF2tlD/A4/unLaX3No+bsznq6V6yYVA0QFWQZhKrhN3 hsHLRbyuibfan2XQNMCWPtmWEe76xTP+i2STKFoZmz4oSRilOExy5RzxwWDei4qn 4dtrLSp/vHvaDTERd8eY7ssmOM39HkzZbZpHP0kg0AaejBUTK7jcjTTVQat/09sR TH41bajyXdqdQ5D8JWESKZTxtT579M8wGQOEfe68dnVRSH4XSw69MfuHpIXzhTl9 pZOx2091QqOwN80Aj4rfHz182qCdwXEmnTT8V+nnJ6Zl566Ch5Z/SJG6Kw1ozoPk h68Nzmt1j60PxW4DYW1CH/Xg9TrV04gZreQ9/uMpPmwX4x9aqmKuiP4QttKwLN43 4F1p6D9/hBNHJvwnkTD7N+MxsnoRsOfGOLLIWaggEcwByEj2WctTbwWWBbnZNEgH m2aI782aWDCIk3/eKy8Ikh/Lvy0YwdCSXj8x9XNrii7cl2uUTvbN7Vk8NiVapowx PZ4O0mFPnOlZQ5NZTvRjSo19IQeNDYuzJIEgADHRTPqTvi+aLzs2oyeOuDWmfvyg 4GLXhxIzy6WQtVSFzAFp6g3ogJLIQ6poRiHTugWDDppj/sqMugBYwWMfAgMBAAGj ggIlMIICITAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQU6cGnXT7obSZnDAKEzKmtQ4U1CMgwHwYDVR0j BBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMGCCsG AQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAiBgNVHREEGzAZghdnb3Rp ZnkubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8E JzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEwLmNybDCCAQwGCisG AQQB1nkCBAIEgf0EgfoA+AB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8P yqnGAAABnF2+CggAAAQDAEcwRQIgXZAcyFu2NrRhVSoEKvpPZdQVjeXWsj+RkmPL v75RmQoCIQCHRZek8tNK2DlyM85HTCLV3UOI/N3PBC+FZKwNc8a9cgB+ABqLnWlK V5jImaDKiL30j8C0VmDMw2ANH3H0af/H0ayjAAABnF2+CywACAAABQBH+lCyBAMA RzBFAiAQHPX3dCEgtXOtKnunRRmiTCXrEXzZL+KHpU/4bnCEcQIhALLzF1xFYvJR y8MDKPHd6SXSi01LFkil8UNBu1x++cLCMA0GCSqGSIb3DQEBCwUAA4IBAQBzxqbU ANmKar7Hl1sDtpXXmYA7fqtT8QToH8hne93Edrhe4wa9aJzb/SJS5Jp9Dkuqb/WG ES0HMFD1MSvO37cpCsuKebYrsz8RT86iYFTrlUqvHsgUA7YukdZy7zi6LEXIi7xN 7ywov+BUO30KakhcG95fLYTqudoWlEEpOtiiSzvyGaNcNIX8FKh+SUgxGFlPO3Ep UQWefkONj9BkFwKu63UdmP3TXP4X8sDZXY7vA6qsoA1k2WOzDVGY3TFC3kArlkjD Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr u7L76W6EfP8Aau/l -----END CERTIFICATE----- Version: 2 Serial Number: 05:68:f1:54:5c:bd:ac:6a:da:af:7f:c8:6b:7b:59:b7:4c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: /C=US/O=Let's Encrypt/CN=R13 Not valid before: Feb 14 19:02:31 2026 GMT Not valid after: May 15 19:02:30 2026 GMT Subject: /CN=gotify.lan.ddnsgeek.com Public Key Algorithm: NULL RSA Public Key: (4096 bit) RSA Public-Key: (4096 bit) Modulus: 00:92:96:24:64:92:02:85:6b:4b:a3:6a:14:b2:e3: 8a:44:1a:ad:dd:a3:1e:4a:0c:87:02:f0:a2:cb:a4: 54:86:7b:d1:4f:9d:c4:b7:4c:93:b3:c9:6f:f0:c7: 2c:cd:6c:8f:85:9f:d3:88:c1:04:c1:76:b6:50:ff: 03:8f:ee:9c:b6:97:dc:da:3e:6e:cc:e7:ab:a5:7a: c9:85:40:d1:01:56:41:98:4a:ae:13:77:86:c1:cb: 45:bc:ae:89:b7:da:9f:65:d0:34:c0:96:3e:d9:96: 11:ee:fa:c5:33:fe:8b:64:93:28:5a:19:9b:3e:28: 49:18:a5:38:4c:72:e5:1c:f1:c1:60:de:8b:8a:a7: e1:db:6b:2d:2a:7f:bc:7b:da:0d:31:11:77:c7:98: ee:cb:26:38:cd:fd:1e:4c:d9:6d:9a:47:3f:49:20: d0:06:9e:8c:15:13:2b:b8:dc:8d:34:d5:41:ab:7f: d3:db:11:4c:7e:35:6d:a8:f2:5d:da:9d:43:90:fc: 25:61:12:29:94:f1:b5:3e:7b:f4:cf:30:19:03:84: 7d:ee:bc:76:75:51:48:7e:17:4b:0e:bd:31:fb:87: a4:85:f3:85:39:7d:a5:93:b1:db:4f:75:42:a3:b0: 37:cd:00:8f:8a:df:1f:3d:7c:da:a0:9d:c1:71:26: 9d:34:fc:57:e9:e7:27:a6:65:e7:ae:82:87:96:7f: 48:91:ba:2b:0d:68:ce:83:e4:87:af:0d:ce:6b:75: 8f:ad:0f:c5:6e:03:61:6d:42:1f:f5:e0:f5:3a:d5: d3:88:19:ad:e4:3d:fe:e3:29:3e:6c:17:e3:1f:5a: aa:62:ae:88:fe:10:b6:d2:b0:2c:de:37:e0:5d:69: e8:3f:7f:84:13:47:26:fc:27:91:30:fb:37:e3:31: b2:7a:11:b0:e7:c6:38:b2:c8:59:a8:20:11:cc:01: c8:48:f6:59:cb:53:6f:05:96:05:b9:d9:34:48:07: 9b:66:88:ef:cd:9a:58:30:88:93:7f:de:2b:2f:08: 92:1f:cb:bf:2d:18:c1:d0:92:5e:3f:31:f5:73:6b: 8a:2e:dc:97:6b:94:4e:f6:cd:ed:59:3c:36:25:5a: a6:8c:31:3d:9e:0e:d2:61:4f:9c:e9:59:43:93:59: 4e:f4:63:4a:8d:7d:21:07:8d:0d:8b:b3:24:81:20: 00:31:d1:4c:fa:93:be:2f:9a:2f:3b:36:a3:27:8e: b8:35:a6:7e:fc:a0:e0:62:d7:87:12:33:cb:a5:90: b5:54:85:cc:01:69:ea:0d:e8:80:92:c8:43:aa:68: 46:21:d3:ba:05:83:0e:9a:63:fe:ca:8c:ba:00:58: c1:63:1f Exponent: 65537 (0x10001) X509v3 Extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: E9:C1:A7:5D:3E:E8:6D:26:67:0C:02:84:CC:A9:AD:43:85:35:08:C8 X509v3 Authority Key Identifier: E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33 Authority Information Access: CA Issuers - URI:http://r13.i.lencr.org/ X509v3 Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://r13.c.lencr.org/10.crl CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77: E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6 Timestamp : Feb 14 20:01:01.448 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:5D:90:1C:C8:5B:B6:36:B4:61:55:2A:04: 2A:FA:4F:65:D4:15:8D:E5:D6:B2:3F:91:92:63:CB:BF: BE:51:99:0A:02:21:00:87:45:97:A4:F2:D3:4A:D8:39: 72:33:CE:47:4C:22:D5:DD:43:88:FC:DD:CF:04:2F:85: 64:AC:0D:73:C6:BD:72 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1A:8B:9D:69:4A:57:98:C8:99:A0:CA:88:BD:F4:8F:C0: B4:56:60:CC:C3:60:0D:1F:71:F4:69:FF:C7:D1:AC:A3 Timestamp : Feb 14 20:01:01.740 2026 GMT Extensions: 00:00:05:00:47:FA:50:B2 Signature : ecdsa-with-SHA256 30:45:02:20:10:1C:F5:F7:74:21:20:B5:73:AD:2A:7B: A7:45:19:A2:4C:25:EB:11:7C:D9:2F:E2:87:A5:4F:F8: 6E:70:84:71:02:21:00:B2:F3:17:5C:45:62:F2:51:CB: C3:03:28:F1:DD:E9:25:D2:8B:4D:4B:16:48:A5:F1:43: 41:BB:5C:7E:F9:C2:C2 Verify m: unable to get local issuer certificate SSL Certificate: Signature Algorithm: sha256WithRSAEncryption RSA Key Strength: 4096 Subject: gotify.lan.ddnsgeek.com Altnames: DNS:gotify.lan.ddnsgeek.com Issuer: R13 Not valid before: Feb 14 19:02:31 2026 GMT Not valid after: May 15 19:02:30 2026 GMT