Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025

Connected to 167.179.167.166

Testing SSL server shifts.lan.ddnsgeek.com on port 443 using SNI name shifts.lan.ddnsgeek.com

  SSL/TLS Protocols:
SSLv2     disabled
SSLv3     disabled
TLSv1.0   disabled
TLSv1.1   disabled
TLSv1.2   enabled
TLSv1.3   enabled

  TLS Fallback SCSV:
Server supports TLS Fallback SCSV

  TLS renegotiation:
Session renegotiation not supported

  TLS Compression:
Compression disabled

  Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed

  Supported Server Cipher(s):
Preferred TLSv1.3  128 bits  TLS_AES_128_GCM_SHA256
Accepted  TLSv1.3  256 bits  TLS_AES_256_GCM_SHA384
Accepted  TLSv1.3  256 bits  TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2  128 bits  ECDHE-RSA-AES128-GCM-SHA256   Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-GCM-SHA384   Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-CHACHA20-POLY1305   Curve 25519 DHE 253
Accepted  TLSv1.2  128 bits  ECDHE-RSA-AES128-SHA          Curve 25519 DHE 253
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-SHA          Curve 25519 DHE 253

  Server Key Exchange Group(s):
TLSv1.3  128 bits  secp256r1 (NIST P-256)
TLSv1.3  192 bits  secp384r1 (NIST P-384)
TLSv1.3  260 bits  secp521r1 (NIST P-521)
TLSv1.3  128 bits  x25519
TLSv1.2  128 bits  secp256r1 (NIST P-256)
TLSv1.2  192 bits  secp384r1 (NIST P-384)
TLSv1.2  260 bits  secp521r1 (NIST P-521)
TLSv1.2  128 bits  x25519

  SSL Certificate:
    Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
    Version: 2
    Serial Number: 06:c2:db:d5:bc:7b:80:51:f9:36:13:8a:ed:f3:c9:68:6b:72
    Signature Algorithm: sha256WithRSAEncryption
    Issuer: /C=US/O=Let's Encrypt/CN=R13
    Not valid before: Mar 31 03:04:05 2026 GMT
    Not valid after: Jun 29 03:04:04 2026 GMT
    Subject: /CN=shifts.lan.ddnsgeek.com
    Public Key Algorithm: NULL
    RSA Public Key: (4096 bit)
      RSA Public-Key: (4096 bit)
      Modulus:
          00:e1:53:42:0b:af:85:92:16:91:5c:a2:72:2b:de:
          ff:27:e0:ac:a1:f2:c4:17:6f:47:cf:9c:d7:37:2f:
          c5:5f:71:3f:1d:95:4f:07:8a:44:3c:51:f8:62:ec:
          ea:b3:4d:f8:ea:3f:66:4f:92:f3:0d:2a:60:a0:0a:
          67:f2:5e:7a:7f:bc:53:64:2c:bc:c6:2d:cc:e4:d1:
          46:d2:cb:58:27:a5:44:91:e9:91:15:c8:7b:bc:6f:
          bd:87:5b:df:a5:ff:1b:e7:dc:76:23:1b:5c:aa:3a:
          e0:84:e1:fb:38:40:e8:f5:d1:7e:f7:6f:de:12:73:
          f2:26:d7:da:97:19:25:04:10:8c:3d:83:76:10:14:
          74:65:ee:b7:58:77:ec:15:c3:e1:9a:50:dd:d8:0a:
          67:d9:82:82:ff:2b:39:7b:cf:0a:c4:a8:8b:7b:9e:
          39:9d:5d:2f:90:6d:f2:fc:c5:d1:2c:20:1e:55:84:
          70:ef:d5:89:48:71:37:23:cc:63:73:91:b7:db:83:
          cd:cb:9d:b6:0a:54:cb:2a:1a:58:74:8a:30:8b:39:
          24:4a:4d:9a:cb:9a:0c:fe:74:01:64:8a:4e:75:8c:
          ae:3f:51:2e:ed:68:8c:96:60:17:39:b7:7b:4d:51:
          0d:52:62:95:c3:1c:72:f2:f3:c5:92:5f:85:c6:93:
          5e:65:39:83:48:83:ed:ce:6f:ca:20:a8:d2:b3:56:
          b0:69:8c:0c:07:11:18:c0:ac:6f:e1:fc:6a:49:4e:
          3e:07:3c:ca:f0:fb:7b:ca:74:f0:b4:94:ea:2e:a6:
          c1:59:23:b1:15:a3:6b:0e:3e:b0:b9:ca:81:a8:39:
          6a:ed:71:ef:2d:79:08:bd:fe:ea:75:6d:17:ba:3f:
          94:db:94:6c:85:02:3f:dc:6a:97:3c:cd:34:1e:f4:
          7d:25:35:d7:20:94:53:1e:04:a4:e9:e7:ea:ed:f7:
          5c:df:ce:f5:e3:72:73:63:28:79:96:de:16:81:4c:
          58:b5:34:01:23:e1:8a:d3:bd:61:75:d7:cc:52:2c:
          74:ab:b3:06:1f:36:c7:6c:d1:bd:23:da:26:1d:28:
          89:8a:71:18:e3:c2:99:1b:47:03:c8:c8:aa:17:38:
          7a:fb:23:37:cd:f9:d4:56:f0:c1:49:17:17:3b:5b:
          86:05:35:80:2d:3d:7b:78:06:17:df:fb:dc:70:f6:
          4b:4c:5c:70:5e:46:8d:09:1c:48:73:79:ca:5a:08:
          19:fd:3e:32:a0:70:2e:97:f7:bd:8a:8e:bc:d8:aa:
          48:35:34:07:b5:f1:c7:3b:e6:c5:22:8c:ed:a4:67:
          4e:5a:92:3b:98:79:e3:92:53:36:14:74:48:7f:33:
          d2:17:a5
      Exponent: 65537 (0x10001)
    X509v3 Extensions:
      X509v3 Key Usage: critical
        Digital Signature, Key Encipherment
      X509v3 Extended Key Usage:
        TLS Web Server Authentication
      X509v3 Basic Constraints: critical
        CA:FALSE
      X509v3 Subject Key Identifier:
        87:DC:63:30:1A:33:55:D3:DF:2E:D5:67:CD:D0:92:D1:94:8B:38:94
      X509v3 Authority Key Identifier:
        E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
      Authority Information Access:
        CA Issuers - URI:http://r13.i.lencr.org/
      X509v3 Subject Alternative Name:
        DNS:shifts.lan.ddnsgeek.com
      X509v3 Certificate Policies:
        Policy: 2.23.140.1.2.1
      X509v3 CRL Distribution Points:
        Full Name:
          URI:http://r13.c.lencr.org/115.crl

      CT Precertificate SCTs:
        Signed Certificate Timestamp:
            Version   : v1 (0x0)
            Log ID    : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19:
                        D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27
            Timestamp : Mar 31 04:02:36.498 2026 GMT
            Extensions: 00:00:05:00:04:E6:32:52
            Signature : ecdsa-with-SHA256
                        30:46:02:21:00:AD:55:DC:56:78:61:00:83:CD:E2:54:
                        DE:90:7C:D5:B0:03:2C:6F:BA:43:18:B6:43:4E:B3:29:
                        EC:12:DF:88:56:02:21:00:BC:E9:CC:89:86:47:5E:4C:
                        9D:61:EA:8A:E5:19:93:52:D8:65:01:FB:2B:FD:57:8C:
                        F2:E1:17:8A:49:D7:8B:76
        Signed Certificate Timestamp:
            Version   : v1 (0x0)
            Log ID    : D1:6E:A9:A5:68:07:7E:66:35:A0:3F:37:A5:DD:BC:03:
                        A5:3C:41:12:14:D4:88:18:F5:E9:31:B3:23:CB:95:04
            Timestamp : Mar 31 04:02:36.102 2026 GMT
            Extensions: none
            Signature : ecdsa-with-SHA256
                        30:45:02:21:00:DE:42:C1:DB:E2:6D:C0:BE:CF:E6:5D:
                        60:47:AC:9A:D8:46:D6:67:ED:FC:7C:37:C7:1B:F2:B9:
                        AE:4F:99:1A:09:02:20:15:94:F0:83:40:07:8E:E5:C5:
                        F3:E1:1E:A7:51:12:D4:E8:53:B7:D4:F2:85:3A:C5:FD:
                        82:A0:8C:52:E1:E7:3A
  Verify m:
    unable to get local issuer certificate

  SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength:    4096

Subject:  shifts.lan.ddnsgeek.com
Altnames: DNS:shifts.lan.ddnsgeek.com
Issuer:   R13

Not valid before: Mar 31 03:04:05 2026 GMT
Not valid after:  Jun 29 03:04:04 2026 GMT