Version: 2.1.5 OpenSSL 3.5.5 27 Jan 2026 Connected to 167.179.167.166 Testing SSL server searxng.lan.ddnsgeek.com on port 443 using SNI name searxng.lan.ddnsgeek.com SSL/TLS Protocols: SSLv2 disabled SSLv3 disabled TLSv1.0 disabled TLSv1.1 disabled TLSv1.2 enabled TLSv1.3 enabled TLS Fallback SCSV: Server supports TLS Fallback SCSV TLS renegotiation: Session renegotiation not supported TLS Compression: Compression disabled Heartbleed: TLSv1.3 not vulnerable to heartbleed TLSv1.2 not vulnerable to heartbleed Supported Server Cipher(s): Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256 Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384 Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256 Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253 Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253 Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253 Server Key Exchange Group(s): TLSv1.3 128 bits secp256r1 (NIST P-256) TLSv1.3 192 bits secp384r1 (NIST P-384) TLSv1.3 260 bits secp521r1 (NIST P-521) TLSv1.3 128 bits x25519 TLSv1.2 128 bits secp256r1 (NIST P-256) TLSv1.2 192 bits secp384r1 (NIST P-384) TLSv1.2 260 bits secp521r1 (NIST P-521) TLSv1.2 128 bits x25519 SSL Certificate: Certificate blob: -----BEGIN CERTIFICATE----- MIIGCjCCBPKgAwIBAgISBoeBYTRyaoIWfoh54gT8+h9wMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTIwHhcNMjYwNDA3MDA0NDM0WhcNMjYwNzA2MDA0NDMzWjAjMSEwHwYDVQQD ExhzZWFyeG5nLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4IC DwAwggIKAoICAQC2Nco6YK5yss+y5+fA0w93a1CMjv2yqZKNZsWXnl9ac2FNpmf2 kU9yWr9o+vjxhlFiyAsDIZlI+1pnObefQs41bvxCmVzzvFE9pYnBsMoZkaUKDXLn /shOh1XA/9yU8U/kDlGF8l9a4a64Dt/vnIJeudu7/zCtaTV0cITF9Oe5iBoYNbtr 2V81YeUc/egUrkpLJv+BOLXCSFbAMbbx6RuIZEjj/4oB0kZa0+D7hARsYN2wpsEt lggem4xr3RoeHodr0rM5hQNg7OvazMUB1d+R6kgBndVrhv+TzGW4GAvxF/bcKZyV 832TsDOoWIisgqKaDiArbv4NBwyhaY6kf577rxkz7spq4ogQBnvq7YL0CDnNWQL4 CczJIzYjoHy66hDnpq2j/5Ng7vWcjvL6tlC8LRsU5C2xtCJJj7wecrzGHc10UzRs 849h9q7NDxkdUaoHS24vmuXbEuhExrDF0XYiIDjNDaf4OUtYGHYjDkmgxqqT8qzu 8J26oGDRf66gQ2zMBCQCSbGjuA+dVdFkeFY9ofwXPhf773iDq/kMEbScdkxUK704 ZWO/NwJ4nb73//igiQb5Lg8OCt1Lfov30T3uRPJuWCrXy0JESEIvDl7fRv4ayFZc M8RW30mJyvJP2pvT4eZvt1EFLKa9cMCWwqidccWNnd3sRt4ME4fzzWj8YwIDAQAB o4ICJjCCAiIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFAVdWP4wmjh+HJcJlwY4MDrvdR5JMB8GA1Ud IwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAjBggr BgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wIwYDVR0RBBwwGoIYc2Vh cnhuZy5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC8GA1Ud HwQoMCYwJKAioCCGHmh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMTEzLmNybDCCAQsG CisGAQQB1nkCBAIEgfwEgfkA9wB1AMs49xWJfIShRF9bwd37yW7ymlnNRwppBYWw yxTDFFjnAAABnWWbhvsAAAQDAEYwRAIgYeLYQse3OQmeZ4bnf4nfZVwiJuPIgQk0 uai2b3xSo18CIC2iZXBWePi++6+LwtNcJYKlX8uRh6pkjJCamQ/xMP7rAH4AqCbL 4wrGNRJGUz/gZfFPGdluGQgTxB3ZbXkAsxI8VScAAAGdZZuKGQAIAAAFAAXkmSwE AwBHMEUCIQC1+nMHUb8YR5UL4hHDuQ0dlU6kJ5beCFGDSTTrvYYiPgIgPfCn8ndZ nYx1kGwz7kW7MdGVjZiCcmHNTSrguRtVnfgwDQYJKoZIhvcNAQELBQADggEBAFQh FXnwXbkDc3H2yXkDnzxZ7KDE/DG5OP4XK4qYUZ7O+KfVEAMw8KH6IimaryftC0q2 2ru+glbhAro9g4knBNbS52BwXWnJrWXMeeO3pg+MHyh15eawrSMWW211Tds7nMYd Fx5uxpJglhIob8inqNf0T3xmAAYxinmOkD7OH8oBKo61+Pe+yGw4X5kBL7Owpl3k hVpJm2pRcC8bopwWD00d/lP2IqSbMAniBSsWDrIAE+Pzkz+R7pmTkNjJfVSrLVQb 13u5NDtG2PTyweFtNuCtUwN+mtDv2ZDKIjQx+ksn4Inqp10HqZtaSVPTJGHZtAqK exPZpzI9ocSVGMygmJg= -----END CERTIFICATE----- Version: 2 Serial Number: 06:87:81:61:34:72:6a:82:16:7e:88:79:e2:04:fc:fa:1f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: /C=US/O=Let's Encrypt/CN=R12 Not valid before: Apr 7 00:44:34 2026 GMT Not valid after: Jul 6 00:44:33 2026 GMT Subject: /CN=searxng.lan.ddnsgeek.com Public Key Algorithm: NULL RSA Public Key: (4096 bit) RSA Public-Key: (4096 bit) Modulus: 00:b6:35:ca:3a:60:ae:72:b2:cf:b2:e7:e7:c0:d3: 0f:77:6b:50:8c:8e:fd:b2:a9:92:8d:66:c5:97:9e: 5f:5a:73:61:4d:a6:67:f6:91:4f:72:5a:bf:68:fa: f8:f1:86:51:62:c8:0b:03:21:99:48:fb:5a:67:39: b7:9f:42:ce:35:6e:fc:42:99:5c:f3:bc:51:3d:a5: 89:c1:b0:ca:19:91:a5:0a:0d:72:e7:fe:c8:4e:87: 55:c0:ff:dc:94:f1:4f:e4:0e:51:85:f2:5f:5a:e1: ae:b8:0e:df:ef:9c:82:5e:b9:db:bb:ff:30:ad:69: 35:74:70:84:c5:f4:e7:b9:88:1a:18:35:bb:6b:d9: 5f:35:61:e5:1c:fd:e8:14:ae:4a:4b:26:ff:81:38: b5:c2:48:56:c0:31:b6:f1:e9:1b:88:64:48:e3:ff: 8a:01:d2:46:5a:d3:e0:fb:84:04:6c:60:dd:b0:a6: c1:2d:96:08:1e:9b:8c:6b:dd:1a:1e:1e:87:6b:d2: b3:39:85:03:60:ec:eb:da:cc:c5:01:d5:df:91:ea: 48:01:9d:d5:6b:86:ff:93:cc:65:b8:18:0b:f1:17: f6:dc:29:9c:95:f3:7d:93:b0:33:a8:58:88:ac:82: a2:9a:0e:20:2b:6e:fe:0d:07:0c:a1:69:8e:a4:7f: 9e:fb:af:19:33:ee:ca:6a:e2:88:10:06:7b:ea:ed: 82:f4:08:39:cd:59:02:f8:09:cc:c9:23:36:23:a0: 7c:ba:ea:10:e7:a6:ad:a3:ff:93:60:ee:f5:9c:8e: f2:fa:b6:50:bc:2d:1b:14:e4:2d:b1:b4:22:49:8f: bc:1e:72:bc:c6:1d:cd:74:53:34:6c:f3:8f:61:f6: ae:cd:0f:19:1d:51:aa:07:4b:6e:2f:9a:e5:db:12: e8:44:c6:b0:c5:d1:76:22:20:38:cd:0d:a7:f8:39: 4b:58:18:76:23:0e:49:a0:c6:aa:93:f2:ac:ee:f0: 9d:ba:a0:60:d1:7f:ae:a0:43:6c:cc:04:24:02:49: b1:a3:b8:0f:9d:55:d1:64:78:56:3d:a1:fc:17:3e: 17:fb:ef:78:83:ab:f9:0c:11:b4:9c:76:4c:54:2b: bd:38:65:63:bf:37:02:78:9d:be:f7:ff:f8:a0:89: 06:f9:2e:0f:0e:0a:dd:4b:7e:8b:f7:d1:3d:ee:44: f2:6e:58:2a:d7:cb:42:44:48:42:2f:0e:5e:df:46: fe:1a:c8:56:5c:33:c4:56:df:49:89:ca:f2:4f:da: 9b:d3:e1:e6:6f:b7:51:05:2c:a6:bd:70:c0:96:c2: a8:9d:71:c5:8d:9d:dd:ec:46:de:0c:13:87:f3:cd: 68:fc:63 Exponent: 65537 (0x10001) X509v3 Extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 05:5D:58:FE:30:9A:38:7E:1C:97:09:97:06:38:30:3A:EF:75:1E:49 X509v3 Authority Key Identifier: 00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2 Authority Information Access: CA Issuers - URI:http://r12.i.lencr.org/ X509v3 Subject Alternative Name: DNS:searxng.lan.ddnsgeek.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://r12.c.lencr.org/113.crl CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Apr 7 01:43:04.699 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:61:E2:D8:42:C7:B7:39:09:9E:67:86:E7: 7F:89:DF:65:5C:22:26:E3:C8:81:09:34:B9:A8:B6:6F: 7C:52:A3:5F:02:20:2D:A2:65:70:56:78:F8:BE:FB:AF: 8B:C2:D3:5C:25:82:A5:5F:CB:91:87:AA:64:8C:90:9A: 99:0F:F1:30:FE:EB Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19: D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27 Timestamp : Apr 7 01:43:05.497 2026 GMT Extensions: 00:00:05:00:05:E4:99:2C Signature : ecdsa-with-SHA256 30:45:02:21:00:B5:FA:73:07:51:BF:18:47:95:0B:E2: 11:C3:B9:0D:1D:95:4E:A4:27:96:DE:08:51:83:49:34: EB:BD:86:22:3E:02:20:3D:F0:A7:F2:77:59:9D:8C:75: 90:6C:33:EE:45:BB:31:D1:95:8D:98:82:72:61:CD:4D: 2A:E0:B9:1B:55:9D:F8 Verify m: unable to get local issuer certificate SSL Certificate: Signature Algorithm: sha256WithRSAEncryption RSA Key Strength: 4096 Subject: searxng.lan.ddnsgeek.com Altnames: DNS:searxng.lan.ddnsgeek.com Issuer: R12 Not valid before: Apr 7 00:44:34 2026 GMT Not valid after: Jul 6 00:44:33 2026 GMT