Version: 2.1.5
OpenSSL 3.5.5 27 Jan 2026

Connected to 167.179.167.166

Testing SSL server node-red.lan.ddnsgeek.com on port 443 using SNI name node-red.lan.ddnsgeek.com

  SSL/TLS Protocols:
SSLv2     disabled
SSLv3     disabled
TLSv1.0   disabled
TLSv1.1   disabled
TLSv1.2   enabled
TLSv1.3   enabled

  TLS Fallback SCSV:
Server supports TLS Fallback SCSV

  TLS renegotiation:
Session renegotiation not supported

  TLS Compression:
Compression disabled

  Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed

  Supported Server Cipher(s):
Preferred TLSv1.3  128 bits  TLS_AES_128_GCM_SHA256
Accepted  TLSv1.3  256 bits  TLS_AES_256_GCM_SHA384
Accepted  TLSv1.3  256 bits  TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2  128 bits  ECDHE-RSA-AES128-GCM-SHA256   Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-GCM-SHA384   Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-CHACHA20-POLY1305   Curve 25519 DHE 253
Accepted  TLSv1.2  128 bits  ECDHE-RSA-AES128-SHA          Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-SHA          Curve 25519 DHE 253

  Server Key Exchange Group(s):
TLSv1.3  128 bits  secp256r1 (NIST P-256)
TLSv1.3  192 bits  secp384r1 (NIST P-384)
TLSv1.3  260 bits  secp521r1 (NIST P-521)
TLSv1.3  128 bits  x25519
TLSv1.2  128 bits  secp256r1 (NIST P-256)
TLSv1.2  192 bits  secp384r1 (NIST P-384)
TLSv1.2  260 bits  secp521r1 (NIST P-521)
TLSv1.2  128 bits  x25519

  SSL Certificate:
    Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
    Version: 2
    Serial Number: 05:8b:a1:d8:23:42:4c:c9:4e:b1:5f:18:b0:b9:57:88:73:02
    Signature Algorithm: sha256WithRSAEncryption
    Issuer: /C=US/O=Let's Encrypt/CN=R12
    Not valid before: Mar 30 03:53:05 2026 GMT
    Not valid after: Jun 28 03:53:04 2026 GMT
    Subject: /CN=node-red.lan.ddnsgeek.com
    Public Key Algorithm: NULL
    RSA Public Key: (4096 bit)
      RSA Public-Key: (4096 bit)
      Modulus:
          00:e0:35:a5:30:28:07:3b:0c:1a:92:11:c6:4b:c6:
          8b:b6:a7:70:35:64:b7:a8:84:e5:50:4c:bc:52:76:
          0c:04:45:0b:07:de:0f:a4:17:e3:1f:84:da:04:56:
          da:18:f1:a3:ea:50:f8:29:eb:37:9c:5c:76:2c:44:
          ad:e8:39:f2:26:d2:b4:4a:ff:fe:7f:af:46:42:79:
          35:10:24:16:f2:7f:08:40:06:33:c6:71:77:89:5e:
          d7:1b:96:7b:20:9d:30:75:d6:b3:33:10:d1:34:ca:
          d3:f8:38:4c:1c:0d:37:8c:8b:ad:bf:57:5d:ac:d6:
          9c:8e:0b:d8:85:f2:74:f3:8e:da:9d:fe:ec:fe:20:
          43:16:2f:1a:9e:e4:0c:20:8d:99:92:7c:e0:36:63:
          2c:18:aa:53:60:48:f9:c0:1a:21:d0:d3:0f:3c:95:
          6f:6e:11:07:e5:89:1e:47:33:57:e3:87:4a:77:16:
          1e:e8:40:1b:e8:db:bf:fd:7b:98:61:43:3e:2e:51:
          d9:36:c5:3c:25:37:a7:0d:17:fd:57:d6:f0:e6:91:
          db:4f:02:11:88:df:0c:60:e1:51:83:dd:e6:7c:a4:
          d7:3a:55:9f:d0:5a:6c:fd:a5:ee:60:88:85:f2:11:
          dc:7b:ac:31:78:98:c6:f1:ab:05:e5:21:97:50:a9:
          47:85:fb:73:a7:b7:11:78:74:cb:6e:de:b7:24:b2:
          39:50:ff:36:b9:29:03:73:0b:dd:dd:43:d9:3e:32:
          74:df:db:f9:a3:03:ea:6a:8e:fe:50:95:b3:40:9a:
          c5:b8:0d:79:37:6d:89:08:2c:e4:94:16:44:4e:61:
          4f:02:f8:b7:1e:78:23:a5:a4:91:e1:e1:50:26:13:
          30:45:57:be:8f:f2:eb:37:b2:06:0b:76:bc:3d:da:
          34:a1:d9:57:7b:e2:19:c7:ec:31:75:40:4d:d3:bd:
          5b:82:ea:43:c1:30:c1:f0:66:03:f4:dc:d9:1c:36:
          cb:e5:4a:a0:db:d6:9c:4b:5a:30:28:64:c1:08:80:
          8d:58:1b:e4:ee:ab:30:20:28:ab:d1:e6:f2:94:0f:
          f6:2b:51:ec:b6:2c:1b:f6:a6:db:7a:28:48:87:80:
          73:c3:58:3c:e8:f5:64:a9:ba:ae:4a:3d:2d:68:28:
          17:b4:27:e3:16:2b:90:12:88:55:16:92:9d:ae:dd:
          de:36:0e:5e:e7:a7:1a:67:13:c1:c0:60:35:94:d5:
          2d:ad:eb:eb:77:db:9a:23:47:19:3e:7a:28:a5:56:
          0b:c0:fa:35:be:db:09:59:7e:53:0c:f2:61:3c:9c:
          62:5c:f0:e8:26:e6:b1:8b:c7:29:36:5e:d6:a3:b1:
          a1:e4:89
      Exponent: 65537 (0x10001)
    X509v3 Extensions:
      X509v3 Key Usage: critical
        Digital Signature, Key Encipherment
      X509v3 Extended Key Usage:
        TLS Web Server Authentication
      X509v3 Basic Constraints: critical
        CA:FALSE
      X509v3 Subject Key Identifier:
        19:80:E0:E9:6A:E8:B2:47:A1:87:17:D8:C5:9B:1E:E9:60:FF:3E:FF
      X509v3 Authority Key Identifier:
        00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
      Authority Information Access:
        CA Issuers - URI:http://r12.i.lencr.org/
      X509v3 Subject Alternative Name:
        DNS:node-red.lan.ddnsgeek.com
      X509v3 Certificate Policies:
        Policy: 2.23.140.1.2.1
      X509v3 CRL Distribution Points:
        Full Name:
          URI:http://r12.c.lencr.org/3.crl

      CT Precertificate SCTs:
        Signed Certificate Timestamp:
            Version   : v1 (0x0)
            Log ID    : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
                        E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
            Timestamp : Mar 30 04:51:35.538 2026 GMT
            Extensions: none
            Signature : ecdsa-with-SHA256
                        30:46:02:21:00:BF:AE:C8:FA:FC:2B:96:55:8C:AA:13:
                        E0:C3:A2:3D:A5:68:6F:B8:4F:B1:41:F4:71:5C:36:86:
                        13:CC:47:9C:A1:02:21:00:8E:C6:CD:B5:2A:63:7C:A9:
                        E7:54:0A:2C:0E:72:3F:AA:4C:90:5C:21:7B:39:06:1F:
                        99:B5:29:AE:B3:1B:7F:37
        Signed Certificate Timestamp:
            Version   : v1 (0x0)
            Log ID    : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:
                        1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A
            Timestamp : Mar 30 04:51:36.150 2026 GMT
            Extensions: 00:00:05:00:04:E0:E1:1D
            Signature : ecdsa-with-SHA256
                        30:46:02:21:00:9F:17:37:A4:08:03:31:58:96:DE:22:
                        DD:D0:FF:9D:53:EA:0D:FC:9A:B9:C3:14:13:FB:FB:F2:
                        2D:AC:7B:D9:7D:02:21:00:8A:DD:E7:46:83:17:56:7E:
                        A8:6E:B6:74:65:F1:F6:68:63:46:C5:C0:59:CF:F7:15:
                        19:87:DA:20:BB:FB:D6:8B
  Verify m:
    unable to get local issuer certificate

  SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength:    4096

Subject:  node-red.lan.ddnsgeek.com
Altnames: DNS:node-red.lan.ddnsgeek.com
Issuer:   R12

Not valid before: Mar 30 03:53:05 2026 GMT
Not valid after:  Jun 28 03:53:04 2026 GMT