STARTTLS & Cryptographic Audit
Audit your mail server's encryption in real-time. We execute live STARTTLS handshakes on ports 25 and 587, and Implicit SSL connections on port 465, to directly extract and inspect your cryptographic certificates for expiration dates, hostname mismatches, and trusted issuer chains.
A misconfigured or expired SSL/TLS certificate on your mail server will cause modern email clients and MTAs to silently drop your messages. Connect directly to your SMTP server to extract, inspect, and audit its cryptographic certificate.
Email encryption is mandatory in the modern web. If your SMTP server presents an invalid, expired, or self-signed certificate, receiving mail servers will refuse the secure connection.
STARTTLS upgrade to securely extract the hidden certificate.mail.example.com but you connect via smtp.example.com, strict MTAs will reject the connection. We expose the exact Subject Alternative Names.Your feedback has been submitted successfully. We appreciate your help in improving our tools.