checktls dump

checktls.log

Checking test@neuland.tech:

looking up MX hosts on domain "neuland.tech"

    mail.neuland.tech (preference:10)

Trying TLS on mail.neuland.tech[163.172.125.60] (10):
seconds 		test stage and result
[000.104] 		Connected to server
[000.552] 	<--  	220 mail.neuland.tech ESMTP Postfix
[000.553] 		We are allowed to connect
[000.553] 	 --> 	EHLO checktls.com
[000.640] 	<--  	250-mail.neuland.tech
250-PIPELINING
250-SIZE 26214400
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
[000.641] 		We can use this server
[000.641] 		TLS is an option on this server
[000.641] 	 --> 	STARTTLS
[000.728] 	<--  	220 2.0.0 Ready to start TLS
[000.729] 		STARTTLS command works on this server
[000.931] 		SSLVersion in use: TLSv1.2
[000.931] 		Cipher in use: ECDHE-RSA-AES256-GCM-SHA384
[000.931] 		Connection converted to SSL
[000.936] 		

Certificate 1 of 3 in chain:
serialNumber= 03:df:c7:48:ad:6f:a9:cb:39:ee:e2:06:f4:74:3b:64:f5:cf
subject= /CN=mail.neuland.tech
issuer= /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3

[000.939] 		

Certificate 2 of 3 in chain:
serialNumber= 0a:01:41:42:00:00:01:53:85:73:6a:0b:85:ec:a7:08
subject= /C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
issuer= /O=Digital Signature Trust Co./CN=DST Root CA X3

[000.941] 		

Certificate 3 of 3 in chain:
serialNumber= 44:af:b0:80:d6:a3:27:ba:89:30:39:86:2e:f8:40:6b
subject= /O=Digital Signature Trust Co./CN=DST Root CA X3
issuer= /O=Digital Signature Trust Co./CN=DST Root CA X3

[000.941] 		Cert VALIDATED: ok
[000.941] 		Cert Hostname VERIFIED (mail.neuland.tech = mail.neuland.tech | DNS:autoconfig.neuland.tech | DNS:autodiscover.neuland.tech | DNS:mail.neuland.tech | DNS:webmail.neuland.tech)
[000.941] 	 ~~> 	EHLO checktls.com
[001.030] 	<~~  	250-mail.neuland.tech
250-PIPELINING
250-SIZE 26214400
250-ETRN
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
[001.031] 		TLS successfully started on this server
[001.031] 	 ~~> 	MAIL FROM:<test@checktls.com>
[001.120] 	<~~  	250 2.1.0 Ok
[001.121] 		Sender is OK
[001.121] 	 ~~> 	RCPT TO:<test@neuland.tech>
[001.211] 	<~~  	554 5.7.1 <www6.checktls.com[159.89.187.50]>: Client host rejected: Access denied
[001.211] 		Cannot proof email address (reason: RCPT TO rejected)
[001.211] 		Note: This does not affect the CheckTLS Confidence Factor
[001.212] 	 ~~> 	QUIT
[001.300] 	<~~  	221 2.0.0 Bye