SSL Security Test of imap.online.net

Test the SSL/TLS stack of your web or email server for security, cryptographic flaws and misconfigurations, and compliance with NIST & HIPAA
Free online tool with PDF report
  • Web Server SSL/TLS Security
  • Post-Quantum Cryptography (PQC) Readiness
  • Email Server SSL/TLS Security
  • PCI DSS, HIPAA & NIST Compliance
  • SSL Certificate Validity
  • Best-Practices Compliance
Free online tool with PDF report
181,616,695 tests performed
Provided "as is" without any warranty of any kind
159
tests
running
62,472
tests
in 24 hours
Tests in 24 Hours
Share this report:

Summary of imap.online.net:993 (IMAPS) SSL Security Test

Provided "as is" without any warranty of any kind.
This test was made 89 days ago and may be outdated
Refresh Test
Date/Time:Mar 2nd, 2026 06:10 GMT+0
Source IP/Port:62.210.16.34:993
Protocol:IMAPS
Location:Paris, FranceFrance
Your final score:
  • A
  • B
  • C
  • F
F

Executive Summary for imap.online.net

  • SSL/TLS Certificate Analysis
    1 SSL/TLS end-entity certificate(s) detected: the first certificate is a trusted RSA 2048 bits certificate with issuer Sectigo Public Server Authentication CA DV R36 valid until February 21, 2027. 2 certificate chain(s) detected. Show details.
  • PCI DSS Compliance Test
    11 of 25 supported cipher suites are not compliant with PCI DSS. The server supports PCI DSS compliant protocols (TLSv1.2) as well as non-compliant protocols (TLSv1.0 and TLSv1.1). All supported elliptic curves are compliant with PCI DSS: P-256. There are 3 more issue(s) which make the server non-compliant with PCI DSS: diffie-hellman parameter weak, potential Marvin Attack, cve-2014-0224. Show details.
  • NIST and HIPAA Compliance Test
    13 of 25 supported cipher suites are not compliant with NIST and HIPAA. The server supports NIST and HIPAA compliant protocols (TLSv1.2) as well as non-compliant protocols (TLSv1.0 and TLSv1.1). All supported elliptic curves are compliant with NIST and HIPAA: P-256. There are 4 more issue(s) which make the server non-compliant with NIST and HIPAA: server does not support OCSP stapling, diffie-hellman parameter weak, server does not support TLS 1.3, server does not support extended master sECret. Show details.
  • Industry Best Practices Test
    4 issue(s) related to industry best practices were identified: server does not support TLS 1.3, server does not have cipher preference, TLS_fallback_scsv, server supports client-initiated secure renegotiation. Show details.
Please wait. Data is loading...
Please wait. Data is loading...
Share this report: