Batch Output Formats
Batch test output depends on the Batch TestType being run:
Receiver
Receiver: text
The results file shows the Confidence Factor for each target, one per line, for example:
100 onetest@checktls.com
100 twotest@checktls.com
Receiver: csv
The results file is a two column csv file, one target per row. Columns are the Confidence Factor and Target, for example:
100,"onetest@checktls.com"
100,"twotest@checktls.com"
Receiver: pager
The results file is a terse form of the interactive Matrix, for example:
Addr,CF,Ans,Con,HELO,TLS,Cert,Sec,From,To
onetest@checktls.com,100,100,100,100,100,100,100,100,0
twotest@checktls.com,100,100,100,100,100,100,100,100,0
Receiver: pager-html
The results file is the same as "pager" above but in an HTML table, for example:
| Addr | CF | Ans | Con | HELO | TLS | Cert | Sec | From | To |
|---|---|---|---|---|---|---|---|---|---|
| onetest@checktls.com | 100 | 100 | 100 | 100 | 100 | 100 | 100 | 100 | 0 |
| twotest@checktls.com | 100 | 100 | 100 | 100 | 100 | 100 | 100 | 100 | 0 |
Receiver: xml
The results file returns in simple XML with <Score> (Confidence Factor) and <Target> from the , for example:
<CheckTLS test="BatchTestReceiver">
<Results>
<Result>
<Score>100</Score>
<Target>onetest@checktls.com</Target>
</Result>
<Result>
<Score>100</Score>
<Target>twotest@checktls.com</Target>
</Result>
</Results>
</CheckTLS>
Receiver: xml-score
The results file returns in XML the "Score" Output Format results of the interactive test, for example:
<CheckTLS test="BatchTestReceiver">
<Results>
<Result>
<eMailAddress>testone@checktls.com</eMailAddress>
<ConfidenceFactor>100</ConfidenceFactor>
<MXConfidenceFactor>100</MXConfidenceFactor>
<MXCount>1</MXCount>
</Result>
<Result>
<eMailAddress>testtwo@checktls.com</eMailAddress>
<ConfidenceFactor>75</ConfidenceFactor>
<MXConfidenceFactor>100</MXConfidenceFactor>
<MXCount>1</MXCount>
</Result>
</Results>
</CheckTLS>
Receiver: xml-matrix
The results file returns in XML the "Matrix" Output Format results of the interactive test, for example:
<CheckTLS test="BatchTestReceiver">
<Results>
<Result>
<eMailAddress>test@checktls.com</eMailAddress>
<ConfidenceFactor>100</ConfidenceFactor>
<Connected>100</Connected>
<Allowed>100</Allowed>
<SignedOn>100</SignedOn>
<TLSAvailable>100</TLSAvailable>
<NegotiatedTLS>100</NegotiatedTLS>
<CertOK>100</CertOK>
<SenderOK>100</SenderOK>
<ProofedAddress>100</ProofedAddress>
<MXCount>1</MXCount>
<MX exchange="www.checktls.com" preference="20">
<Connected>0.020458</Connected>
<Allowed>2.00779</Allowed>
<SignedOn>2.012302</SignedOn>
<TLSAvailable>2.017546</TLSAvailable>
<NegotiatedTLS>4.275149</NegotiatedTLS>
<CertOK>4.258508</CertOK>
<SenderOK>4.328082</SenderOK>
<ProofedAddress>4.334522</ProofedAddress>
</MX>
</Result>
</Results>
</CheckTLS>
Receiver: xml-detail
The results file returns in XML the "Detail" Output Format results of the interactive test, for example:
(see just below for the full Detail from )
<CheckTLS test="BatchTestReceiver">
<eMailAddress>test@checktls.com</eMailAddress>
<ConfidenceFactor>100</ConfidenceFactor>
<Connected>100</Connected>
<Allowed>100</Allowed>
<SignedOn>100</SignedOn>
<TLSAvailable>100</TLSAvailable>
<NegotiatedTLS>100</NegotiatedTLS>
<CertOK>100</CertOK>
<SenderOK>100</SenderOK>
<ProofedAddress>100</ProofedAddress>
<MXCount>1</MXCount>
<MX exchange="www.checktls.com" preference="20">
<Connected>0.023249</Connected>
<Allowed>0.102055</Allowed>
<SignedOn>0.103797</SignedOn>
<TLSAvailable>0.105284</TLSAvailable>
<NegotiatedTLS>0.517981</NegotiatedTLS>
<CertOK>0.503749</CertOK>
<SenderOK>0.557888</SenderOK>
<ProofedAddress>0.562938</ProofedAddress>
</MX>
</CheckTLS>
Receiver: xml-certdetail
The results file returns in XML the "CertDetail" Output Format results of the interactive test (similar to xml-detail above but with more info about the certificates used).
Receiver: xml-ssldetail
The results file returns in XML the "SSLDetail" Output Format results of the interactive test (similar to xml-certdetail above but with details of the SSL "conversation" unencrypted).
Receiver: xml-detail with SMTP Detail XML
The results file is the output shown above but also includes the full SMTP "conversation" between the client and the server, for example:
<CheckTLS test="BatchTestReceiver">
<eMailAddress>test@checktls.com</eMailAddress>
<ConfidenceFactor>100</ConfidenceFactor>
<Connected>100</Connected>
<Allowed>100</Allowed>
<SignedOn>100</SignedOn>
<TLSAvailable>100</TLSAvailable>
<NegotiatedTLS>100</NegotiatedTLS>
<CertOK>100</CertOK>
<SenderOK>100</SenderOK>
<ProofedAddress>100</ProofedAddress>
<MXCount>1</MXCount>
<MX exchange="www.checktls.com" preference="20">
<Connected>0.023249</Connected>
<Allowed>0.102055</Allowed>
<SignedOn>0.103797</SignedOn>
<TLSAvailable>0.105284</TLSAvailable>
<NegotiatedTLS>0.517981</NegotiatedTLS>
<CertOK>0.503749</CertOK>
<SenderOK>0.557888</SenderOK>
<ProofedAddress>0.562938</ProofedAddress>
<detail>
<![CDATA[
[000.023] Connected to server
[000.102]<--220 www.checktls.com ESMTP Sendmail 8.14.4/8.14.4; Fri, 12 Nov 2010 13:46:30 -0500
[000.102] We are allowed to connect
[000.102]-->EHLO checktls.com
[000.104]<--250-www.checktls.com Hello www.checktls.com [192.168.1.165], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH DIGEST-MD5 CRAM-MD5
250-STARTTLS
250-DELIVERBY
250 HELP
[000.104] We can use this server
[000.104] TLS is an option on this server
[000.104]-->STARTTLS
[000.105]<--220 2.0.0 Ready to start TLS
[000.105] STARTTLS command works on this server
[000.505] Cipher in use: DHE-RSA-AES256-SHA
[000.505] Cert Authority: /C=US/ST=Arizona /L=Scottsdale/O=GoDaddy.com, Inc. /OU=http://certificates.godaddy.com/repository /CN=Go Daddy Secure Certification Authority /serialNumber=07969287
[000.506] Cert Owner: /O=www.checktls.com /OU=Domain Control Validated/CN=www.checktls.com
[000.506] Cert CommonName: www.checktls.com
[000.506] Cert SubjectAltName: 2/checktls.com
[000.507] Cert Hostname VERIFIED (www.checktls.com)
[000.507] Cert chain VERIFIED (0 (ok))
[000.507] Connection converted to SSL
[000.507]~~>EHLO checktls.com
[000.518]<~~250-www.checktls.com Hello www.checktls.com [192.168.1.165], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
250-DELIVERBY
250 HELP
[000.518] TLS successfully started on this server
[000.519]~~>MAIL FROM: <test@checktls.com>
[000.558]<~~250 2.1.0 <test@checktls.com>... Sender ok
[000.558] Sender is OK
[000.558]~~>RCPT TO: <test@checktls.com>
[000.563]<~~250 2.1.5 <test@checktls.com>... Recipient ok
[000.563] Recipient OK, E-mail address proofed
[000.563]~~>QUIT
[000.569]<~~221 2.0.0 www.checktls.com closing connection
]]>
</detail>
</MX>
</CheckTLS>
Receiver: xml-certdetail and xml-ssldetail with SMTP Detail XML
These show the same parsed fields as the results above but also including the full SMTP "conversation".
ReceiverAssureTLS
ReceiverAssureTLS: text
The results file shows the Assurredness Factor for each target, one per line, for example:
0 checktls.com
100 mandatorytls.checktls.com
ReceiverAssureTLS: csv
The results file is a two column csv file, one target per row. Columns are the Assuredness Factor and Target, for example:
0,"checktls.com"
100,"mandatorytls.checktls.com"
ReceiverAssureTLS: pager
The results file is a terse form of the interactive Matrix, for example:
Addr,AF,Ans,Con,HELO,TLS,ATLS
checktls.com,0,100,100,100,100,0
mandatorytls.checktls.com,100,100,100,100,100,100
ReceiverAssureTLS: pager-html
The results file is the same as "pager" above but in an HTML table, for example:
| Addr | AF | Ans | Con | HELO | TLS | ATLS |
|---|---|---|---|---|---|---|
| checktls.com | 0 | 100 | 100 | 100 | 100 | 0 |
| mandatorytls.checktls.com | 100 | 100 | 100 | 100 | 100 | 100 |
ReceiverAssureTLS: xml
The results file shows the Assuredness Factor and the target address, for example:
<CheckTLS test="BatchTestreceiverassuretls" version="V03.07.01">
<Results format="xml">
<Result>
<Score>0</Score>
<Target>checktls.com</Target>
</Result>
<Result>
<Score>100</Score>
<Target>mandatorytls.checktls.com</Target>
</Result>
</Results>
</CheckTLS>
ReceiverAssureTLS: xml-score
The results file returns in XML the Score level results of the interactive test, for example:
<CheckTLS test="BatchTestreceiverassuretls" version="V03.07.01">
<Results format="xml-score">
<Result>
<eMailAddress>checktls.com</eMailAddress>
<AssurednessFactor>0</AssurednessFactor>
<MXConfidenceFactor></MXConfidenceFactor>
<MXCount>1</MXCount>
<MXAddrCount>1</MXAddrCount>
</Result>
<Result>
<eMailAddress>mandatorytls.checktls.com</eMailAddress>
<AssurednessFactor>100</AssurednessFactor>
<MXConfidenceFactor></MXConfidenceFactor>
<MXCount>1</MXCount>
<MXAddrCount>1</MXAddrCount>
</Result>
</Results>
</CheckTLS>
ReceiverAssureTLS: xml-matrix
The results file returns in XML the Score level results of the interactive test, for example:
<CheckTLS test="BatchTestreceiverassuretls" version="V03.07.01">
<Results format="xml-matrix">
<Result>
<eMailAddress>checktls.com</eMailAddress>
<AssurednessFactor>0</AssurednessFactor>
<MXConfidenceFactor></MXConfidenceFactor>
<MXCount>1</MXCount>
<MXAddrCount>1</MXAddrCount>
<Answer>100</Answer>
<Connect>100</Connect>
<HELO>100</HELO>
<TLS>100</TLS>
<AssureTLS>0</AssureTLS>
<MX exchange="mail6.checktls.com[159.89.187.50]" preference="20">
<Answer>0.012104</Answer>
<Connect>0.186976</Connect>
<HELO>0.188209</HELO>
<TLS>0.188241</TLS>
<AssureTLS>0</AssureTLS>
<MXStep name="HELO">2</MXStep>
</MX>
</Result>
<Result>
<eMailAddress>mandatorytls.checktls.com</eMailAddress>
<AssurednessFactor>100</AssurednessFactor>
<MXConfidenceFactor></MXConfidenceFactor>
<MXCount>1</MXCount>
<MXAddrCount>1</MXAddrCount>
<Answer>100</Answer>
<Connect>100</Connect>
<HELO>100</HELO>
<TLS>100</TLS>
<AssureTLS>100</AssureTLS>
<MX exchange="mandatorytls.checktls.com[10.132.36.231]" preference="0">
<Answer>0.091495</Answer>
<Connect>0.129975</Connect>
<HELO>0.131331</HELO>
<TLS>0.132579</TLS>
<AssureTLS>0.07711</AssureTLS>
<MXStep name="AssureTLS">10</MXStep>
</MX>
</Result>
</Results>
</CheckTLS>
ReceiverAssureTLS: xml-detail
The results file shows parsed fields from the Detail level results of the interactive test, for example:
(see just below for the full Detail from ReceiverAssureTLS)
<CheckTLS test="BatchTestreceiverassuretls" version="V03.07.01">
<Results format="xml-detail">
<Result>
<eMailAddress>checktls.com</eMailAddress>
<AssurednessFactor>0</AssurednessFactor>
<MXConfidenceFactor></MXConfidenceFactor>
<MXCount>1</MXCount>
<MXAddrCount>1</MXAddrCount>
<Answer>100</Answer>
<Connect>100</Connect>
<HELO>100</HELO>
<TLS>100</TLS>
<AssureTLS>0</AssureTLS>
<MX exchange="mail6.checktls.com[159.89.187.50]" preference="20">
<Answer>0.004366</Answer>
<Connect>0.234804</Connect>
<HELO>0.236594</HELO>
<TLS>0.236646</TLS>
<AssureTLS>0</AssureTLS>
<MXStep name="HELO">2</MXStep>
<SSL>
<SSLVersion></SSLVersion>
<Cipher>n/a</Cipher>
<SSLDeprecated>n/a</SSLDeprecated>
<Certs count="0">
</Certs>
</SSL>
</MX>
</Result>
<Result>
<eMailAddress>mandatorytls.checktls.com</eMailAddress>
<AssurednessFactor>100</AssurednessFactor>
<MXConfidenceFactor></MXConfidenceFactor>
<MXCount>1</MXCount>
<MXAddrCount>1</MXAddrCount>
<Answer>100</Answer>
<Connect>100</Connect>
<HELO>100</HELO>
<TLS>100</TLS>
<AssureTLS>100</AssureTLS>
<MX exchange="mandatorytls.checktls.com[10.132.36.231]" preference="0">
<Answer>0.034515</Answer>
<Connect>0.096095</Connect>
<HELO>0.100014</HELO>
<TLS>0.101473</TLS>
<AssureTLS>0.024042</AssureTLS>
<MXStep name="AssureTLS">10</MXStep>
<SSL>
<SSLVersion>TLSv1_2</SSLVersion>
<Cipher>ECDHE-RSA-CHACHA20-POLY1305</Cipher>
<SSLDeprecated>0</SSLDeprecated>
<Certs count="3">
</Certs>
</SSL>
</MX>
</Result>
</Results>
</CheckTLS>
ReceiverAssureTLS: xml-certdetail
The results file shows the CertDetail level results of the interactive test (similar to xml-detail above but with more info about the certificates used).
ReceiverAssureTLS: xml-ssldetail
The results file shows the SSLDetail level results of the interactive test (similar to xml-certdetail above but with details of the SSL "conversation" unencrypted).
ReceiverAssureTLS: xml-detail with SMTP Detail XML
The results file is the output shown above but also includes the full SMTP "conversation" between the client and the server, for example:
<CheckTLS test="BatchTestreceiverassuretls" version="V03.07.01">
<Results format="xml-detail">
<Result>
<eMailAddress>checktls.com</eMailAddress>
<AssurednessFactor>0</AssurednessFactor>
<MXConfidenceFactor></MXConfidenceFactor>
<MXCount>1</MXCount>
<MXAddrCount>1</MXAddrCount>
<Answer>100</Answer>
<Connect>100</Connect>
<HELO>100</HELO>
<TLS>100</TLS>
<AssureTLS>0</AssureTLS>
<MX exchange="mail6.checktls.com[159.89.187.50]" preference="20">
<Answer>0.004366</Answer>
<Connect>0.234804</Connect>
<HELO>0.236594</HELO>
<TLS>0.236646</TLS>
<AssureTLS>0</AssureTLS>
<MXStep name="HELO">2</MXStep>
<SSL>
<SSLVersion></SSLVersion>
<Cipher>n/a</Cipher>
<SSLDeprecated>n/a</SSLDeprecated>
<Certs count="0">
</Certs>
</SSL>
<detail><![CDATA[
[000.004] Connected to server
[000.235]<-- 220 www6.CheckTLS.com ESMTP Sendmail 8.14.7/8.14.7; Sun, 12 Aug 2018 13:41:58 -0400
[000.235] We are allowed to connect
[000.235] -->EHLO www6.CheckTLS.com
[000.237]<-- 250-www6.CheckTLS.com Hello www6.checktls.com [159.89.187.50], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH GSSAPI DIGEST-MD5 CRAM-MD5
250-STARTTLS
250-DELIVERBY
250 HELP
[000.237] We can use this server
[000.237] TLS is an option on this server
[000.237] -->MAIL FROM:<test@checktls.com>
[000.277]<-- 250 2.1.0 <test@checktls.com>... Sender ok
[000.277] Sender is OK
[000.277] It looks like we can send without TLS
[000.277] -->QUIT
[000.281]<-- 221 2.0.0 www6.CheckTLS.com closing connection
]]>
</detail>
</MX>
</Result>
<Result>
<eMailAddress>mandatorytls.checktls.com</eMailAddress>
<AssurednessFactor>100</AssurednessFactor>
<MXConfidenceFactor></MXConfidenceFactor>
<MXCount>1</MXCount>
<MXAddrCount>1</MXAddrCount>
<Answer>100</Answer>
<Connect>100</Connect>
<HELO>100</HELO>
<TLS>100</TLS>
<AssureTLS>100</AssureTLS>
<MX exchange="mandatorytls.checktls.com[10.132.36.231]" preference="0">
<Answer>0.034515</Answer>
<Connect>0.096095</Connect>
<HELO>0.100014</HELO>
<TLS>0.101473</TLS>
<AssureTLS>0.024042</AssureTLS>
<MXStep name="AssureTLS">10</MXStep>
<SSL>
<SSLVersion>TLSv1_2</SSLVersion>
<Cipher>ECDHE-RSA-CHACHA20-POLY1305</Cipher>
<SSLDeprecated>0</SSLDeprecated>
<Certs count="3">
</Certs>
</SSL>
<detail><![CDATA[
[000.002] Connected to server
[000.021]<-- 220 ts6.checktls.com ESMTP TestSender Sun, 12 Aug 2018 13:41:59 -0400
[000.022] We are allowed to connect
[000.022] -->EHLO www6.CheckTLS.com
[000.023]<-- 250-ts6.checktls.com Hello [10.132.109.248], pleased to meet you
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-STARTTLS
250 HELP
[000.023] We can use this server
[000.023] TLS is an option on this server
[000.023] -->MAIL FROM:<test@checktls.com>
[000.024]<-- 500 MandatoryTLS requires STARTTLS
[000.024] -->QUIT
[000.025]<-- 221 ts6.checktls.com closing connection
[000.035] Connected to server
[000.096]<-- 220 ts6.checktls.com ESMTP TestSender Sun, 12 Aug 2018 13:41:59 -0400
[000.096] We are allowed to connect
[000.096] -->EHLO www6.CheckTLS.com
[000.100]<-- 250-ts6.checktls.com Hello [10.132.109.248], pleased to meet you
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-STARTTLS
250 HELP
[000.100] We can use this server
[000.100] TLS is an option on this server
[000.100] -->STARTTLS
[000.101]<-- 220 Ready to start TLS
[000.101] STARTTLS command works on this server
[000.204] Connection converted to SSL
SSLVersion in use: TLSv1_2
Cipher in use: ECDHE-RSA-CHACHA20-POLY1305
Certificate 1 of 3 in chain: Cert VALIDATED: ok
Cert Hostname VERIFIED (mandatorytls.checktls.com = *.checktls.com | DNS:*.checktls.com | DNS:checktls.com)
cert not revoked by CRL
cert not revoked by OCSP
serialNumber=c9:fa:14:5e:b4:99:e5:d4
subject= /OU=Domain Control Validated/CN=*.checktls.com
issuer= /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
Certificate 2 of 3 in chain: Cert VALIDATED: ok
cert not revoked by CRL
cert not revoked by OCSP
serialNumber=07
subject= /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
issuer= /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
Certificate 3 of 3 in chain: Cert VALIDATED: ok
cert not revoked by CRL
cert not revoked by OCSP
serialNumber=00
subject= /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
issuer= /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
[000.485] ~~>EHLO www6.CheckTLS.com
[000.496]<~~ 250-ts6.checktls.com Hello [10.132.109.248], pleased to meet you
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 HELP
[000.496] TLS successfully started on this server
[000.496] ~~>MAIL FROM:<test@checktls.com>
[000.498]<~~ 250 Ok - mail from test@checktls.com
[000.498] Sender is OK
[000.498] ~~>QUIT
[000.509]<~~ 221 ts6.checktls.com closing connection
]]>
</detail>
</MX>
</Result>
</Results>
</CheckTLS>
ReceiverAssureTLS: xml-certdetail and xml-ssldetail with SMTP Detail XML
These show the same parsed fields as the results above but also including the full SMTP "conversation".
TestSender
Batch sender tests only have one Format option: xml-detail.
A Batch sender test runs the interactive ("TestSender") test using the "Save to file? XML" option, so the Result looks like this:
<CheckTLS test="BatchTestSender" version="V01.75.05">
<Results>
<Result>
<Status>SUCCESS</Status>
<ConfidenceFactor available="108" max="132" percent="100.00">108</ConfidenceFactor>
</Result>
</Results>
</CheckTLS>
Rather than use the Format node to choose options to display, a Batch sender test uses a SenderExtraItems attribute on the Target node, for example:
<Target SenderExtraItems="TLS Headers SSLVERSION SSLCIPHER ClientCert SNI SPF DKIM DMARC FCRDNS BIMI DNS DNSSEC SMTP">TestSender-Reply@CheckTLS.com</Target>
The results of a Batch sender test with these options looks like (again the same as the interactive test with these options and "Save to file? XML"):
<CheckTLS test="TestSender" version="V01.75.02">
<Results>
<Result>
<ConfidenceFactor available="130" max="132" percent="93.85">122</ConfidenceFactor>
<Status>SUCCESS</Status>
<RECEIVER>
<Connection>
<From>104.131.168.30</From>
</Connection>
<DNS>
<_104.131.168.30>
<PTR>mailbox1-do.checktls.com +FCrDNS</PTR>
</_104.131.168.30>
<mailbox1-do.checktls.com>
<A>+DNSSEC 104.131.168.30 +FCrDNS</A>
</mailbox1-do.checktls.com>
</DNS>
</RECEIVER>
<SENDER>
<Header>
<To>TestSender-Reply@CheckTLS.com</To>
<From>test@TestSender.CheckTLS.com</From>
<Date>Sat, 27 Jun 2026 16:05:31 -0400</Date>
<Subject>CheckTLS TestSender Trigger (passwordhere)</Subject>
</Header>
<ClientCert>-----BEGIN CERTIFICATE-----
MIIHxDCCBqygAwIBAgIJAKoqBUM2KO7dMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
...lines removed for brevity...
aXdkd2Yd2nQXPsMiZy5fS8scMZsV0II/658Lk1kRS0G//e0zlyQpbXpVxIRWyo5q
8N40EZXuxyxRlr1WLOdVskHIFyKfdCZH
-----END CERTIFICATE-----</ClientCert>
<SNI>[none]</SNI>
</SENDER>
<TLS>
<info>
<SSLVersion>TLSv1_3</SSLVersion>
<SSLCipher>TLS_AES_256_GCM_SHA384</SSLCipher>
</info>
<result>Successful</result>
</TLS>
<SPF>
<DNS>
<whitelist.checktls.com>
<A>+DNSSEC 20.75.92.117,142.93.73.156,20.75.92.114,20.75.92.115,167.71.160.115,134.209.47.28,20.75.92.118,20.75.92.116,165.227.190.238,134.209.169.224,20.75.92.112,104.131.118.193,104.131.168.30,20.75.92.113</A>
</whitelist.checktls.com>
<mailbox1-do.checktls.com>
<TXT>+DNSSEC "v=spf1 a -all"</TXT>
<A>+DNSSEC 104.131.168.30</A>
</mailbox1-do.checktls.com>
<ts11-do.checktls.com>
<A>+DNSSEC 165.227.190.238</A>
</ts11-do.checktls.com>
<testsender.checktls.com>
<MX>+DNSSEC 20 ts11-do.checktls.com.</MX>
<TXT>+DNSSEC "v=spf1 a mx a:whitelist.checktls.com a:spf.checktls.com -all"</TXT>
</testsender.checktls.com>
</DNS>
<mfrom>
<identity>test@TestSender.CheckTLS.com</identity>
<ip_address>104.131.168.30</ip_address>
<sent>104.131.168.30</sent>
<record>v=spf1 a mx a:whitelist.checktls.com a:spf.checktls.com -all</record>
<text>pass (Mechanism 'a:whitelist.checktls.com' matched)</text>
<local>testsender.checktls.com: 104.131.168.30 is authorized to use 'test@TestSender.CheckTLS.com' in 'mfrom' identity (mechanism 'a:whitelist.checktls.com' matched)</local>
<header>Received-SPF: pass (testsender.checktls.com: 104.131.168.30 is authorized to use 'test@TestSender.CheckTLS.com' in 'mfrom' identity (mechanism 'a:whitelist.checktls.com' matched)) receiver=ts11-do.checktls.com; identity=mailfrom; envelope-from="test@TestSender.CheckTLS.com"; helo=ts11-do.checktls.com; client-ip=104.131.168.30</header>
<result>pass</result>
</mfrom>
<helo>
<identity>mailbox1-do.checktls.com</identity>
<ip_address>104.131.168.30</ip_address>
<sent>mailbox1-do.checktls.com</sent>
<record>v=spf1 a -all</record>
<text>pass (Mechanism 'a' matched)</text>
<local>mailbox1-do.checktls.com: 104.131.168.30 is authorized to use 'mailbox1-do.checktls.com' in 'helo' identity (mechanism 'a' matched)</local>
<header>Received-SPF: pass (mailbox1-do.checktls.com: 104.131.168.30 is authorized to use 'mailbox1-do.checktls.com' in 'helo' identity (mechanism 'a' matched)) receiver=ts11-do.checktls.com; identity=helo; helo=mailbox1-do.checktls.com; client-ip=104.131.168.30</header>
<result>pass</result>
</helo>
</SPF>
<DKIM>
<result>none</result>
</DKIM>
<DMARC>
<mfrom>
<domain>TestSender.CheckTLS.com</domain>
</mfrom>
<helo>
<domain>mailbox1-do.checktls.com</domain>
</helo>
<DNS>
<_dmarc.checktls.com>
<TXT>+DNSSEC "v=DMARC1; p=quarantine"</TXT>
</_dmarc.checktls.com>
<testsender.checktls.com>
<MX>+DNSSEC 20 ts11-do.checktls.com.</MX>
</testsender.checktls.com>
</DNS>
<spf_align>strict</spf_align>
<published>
<p>quarantine</p>
<domain>checktls.com</domain>
<v>DMARC1</v>
</published>
<disposition>none</disposition>
<spf>pass</spf>
<dkim>fail</dkim>
<result>pass</result>
</DMARC>
<BIMI><domain>TestSender.CheckTLS.com</domain><header>not present</header>result</BIMI>
<SMTP><![CDATA[<-- 220 ts11-do.checktls.com ESMTP TestSender(V01.75.02) Sat, 27 Jun 2026 16:06:33 -0400
--> EHLO mailbox1-do.checktls.com
<-- 250-ts11-do.checktls.com Hello mailbox1-do.checktls.com [104.131.168.30], pleased to meet you
<-- 250-ENHANCEDSTATUSCODES
<-- 250-8BITMIME
<-- 250-STARTTLS
<-- 250 HELP
...lines removed for brevity...
<~~ 250 Ok
~~> QUIT
<~~ 221 ts11-do.checktls.com closing connection
]]></SMTP>
</Result>
</Results>
</CheckTLS>
TestThru
Batch thru tests must specify one of the xml- format options (xml-score, xml-matrixi, xml-smtp, xml-detail, xml-certdetail, xml-ssldetail).
A Batch thru test runs the interactive ("TestReceiver") test to send an email to the specified Target, and it uses the interactive ("TestSender") test to receive the reply email. The only results these two tests have in common are in XML which is why a Batch thru test requires an xml- format option.
The results of a Batch thru test shows the TestReceiver and TestSender results. It also shows:
- <ConfidenceFactor>
- An overall measure of the quality of the Target email systems (receiving and sending).
- <SendToSeconds>
- How long it took for us to send the message to the remote email system. The timer starts when we first try to connect to the server and it ends when we close the connection after we finish sending the email.
- <TurnAroundSeconds>
- How long it took for the remote email system to process the incoming email and turn it around and start sending it back. The timer starts when we close the connection after sending the email and it ends when we first get a connection back from the remote email system.
- <ReceiptFromSeconds>
- How long it took for the remove email system to send the email to us. The timer starts when we get a connection from the remote email system and ends when we finish receiving the email.
With this basic Batch thru test input XML:
<BatchTest TestType="thru">
<Target>TestThru-Reply@CheckTLS.com</Target>
<Delivery><Format>xml-score</Format></Delivery>
</BatchTest>
The basic Batch thru test result looks like:
<CheckTLS test="BatchTestThru" version="V03.08.00">
<Results>
<Result>
<ConfidenceFactor>111</ConfidenceFactor>
<Target>TestThru-Reply@CheckTLS.com</Target>
<SendToSeconds>1</SendToSeconds>
<TurnAroundSeconds>61</TurnAroundSeconds>
<ReceiptFromSeconds>0</ReceiptFromSeconds>
<TestReceiver>
<CheckTLS test="TestReceiver" origin="www12-do.checktls.com" version="V03.97.15/1.1.1k" run="2026-07-22T15:54:21Z">
<eMailAddress>TestThru-Reply@CheckTLS.com</eMailAddress>
<ConfidenceFactor available="114" percent="100.00" max="123">114</ConfidenceFactor>
<OutputFormat>XML_Score</OutputFormat>
<MXConfidenceFactor>100</MXConfidenceFactor>
</CheckTLS>
</TestReceiver>
<TestSender>
<CheckTLS test="TestSender" version="V01.75.05">
<ConfidenceFactor available="108" max="132" percent="100.00">108</ConfidenceFactor>
<Status>SUCCESS</Status>
</CheckTLS>
</TestSender>
</Result>
</Results>
</CheckTLS>
A complete Batch Thru XML file (source XML here), which runs both TestSender and TestReceiver with full output and options (TestReceiver ssldetail and Extra Items, TestSender with More Options) output looks like:
<CheckTLS test="BatchTestThru" version="V03.08.00">
<Results>
<Result>
<ConfidenceFactor>123</ConfidenceFactor>
<Target>
TestThru-Reply@CheckTLS.com
</Target>
<SendToSeconds>6</SendToSeconds>
<TurnAroundSeconds>61</TurnAroundSeconds>
<ReceiptFromSeconds>0</ReceiptFromSeconds>
<TestReceiver>
<CheckTLS test="TestReceiver" origin="www2-do.checktls.com" version="V03.98.01/1.1.1k" run="2026-07-24T21:41:57Z">
<eMailAddress>TestThru-Reply@CheckTLS.com</eMailAddress>
<ConfidenceFactor available="123" percent="100.00" max="123">123</ConfidenceFactor>
<OutputFormat>XML_SSLDetail</OutputFormat>
<MXConfidenceFactor>100</MXConfidenceFactor>
<DNS_LOOKUPS>
<SearchList>1.1.1.1,2001:4860:4860::8888,8.8.8.8</SearchList>
<MTASTSpolicy URL="https://mta-sts.CheckTLS.com/.well-known/mta-sts.txt">
<version>STSv1</version>
<mode>testing</mode>
<max_age>86401</max_age>
<mx>*.checktls.com</mx>
</MTASTSpolicy>
<MTASTS_TXT Lookup="_mta-sts.CheckTLS.com" DNSSEC="1" NS="1.1.1.1">"v=STSv1; id=20200520120000"</MTASTS_TXT>
<TLSRPT_TXT Lookup="_smtp._tls.CheckTLS.com" DNSSEC="1" NS="1.1.1.1">"v=TLSRPTv1; rua=mailto:sts-reports@checktls.com"</TLSRPT_TXT>
<MX Lookup="CheckTLS.com" DNSSEC="1" NS="1.1.1.1">10 mail14.CheckTLS.com,20 mail11.CheckTLS.com,20 mail12.CheckTLS.com</MX>
<MXS>
<MX_MTASTS Lookup="mail14.CheckTLS.com">Pass</MX_MTASTS>
<MX_CNAME Lookup="mail14.CheckTLS.com" DNSSEC="1" NS="1.1.1.1">www14-azure.CheckTLS.com</MX_CNAME>
<MX_A Lookup="www14-azure.CheckTLS.com" DNSSEC="1" FCRDNS="1" NS="1.1.1.1">20.75.92.112</MX_A>
<MX_PTR Lookup="20.75.92.112" DNSSEC="0" FCRDNS="1" NS="1.1.1.1">www14-azure.CheckTLS.com</MX_PTR>
<MX_MTASTS Lookup="mail11.CheckTLS.com">Pass</MX_MTASTS>
<MX_CNAME Lookup="mail11.CheckTLS.com" DNSSEC="1" NS="1.1.1.1">mail11-do.CheckTLS.com</MX_CNAME>
<MX_A Lookup="mail11-do.CheckTLS.com" DNSSEC="1" FCRDNS="1" NS="1.1.1.1">134.209.47.28</MX_A>
<MX_PTR Lookup="134.209.47.28" DNSSEC="0" FCRDNS="1" NS="1.1.1.1">mail11-do.CheckTLS.com</MX_PTR>
<MX_MTASTS Lookup="mail12.CheckTLS.com">Pass</MX_MTASTS>
<MX_CNAME Lookup="mail12.CheckTLS.com" DNSSEC="1" NS="1.1.1.1">mail12-do.CheckTLS.com</MX_CNAME>
<MX_A Lookup="mail12-do.CheckTLS.com" DNSSEC="1" FCRDNS="1" NS="1.1.1.1">104.131.118.193</MX_A>
<MX_PTR Lookup="104.131.118.193" DNSSEC="0" FCRDNS="1" NS="1.1.1.1">mail12-do.CheckTLS.com</MX_PTR>
</MXS>
<TLSA Lookup="_25._tcp.mail14.CheckTLS.com" DNSSEC="1" NS="1.1.1.1">2 1 1 2A8F2D8AF0EB123898F74C866AC3FA669054E23C17BC7A95BD023419 2DC635D0</TLSA>
<TLSA Lookup="_25._tcp.mail11.CheckTLS.com" DNSSEC="1" NS="1.1.1.1">2 1 1 2A8F2D8AF0EB123898F74C866AC3FA669054E23C17BC7A95BD023419 2DC635D0</TLSA>
<TLSA Lookup="_25._tcp.mail12.CheckTLS.com" DNSSEC="1" NS="1.1.1.1">2 1 1 2A8F2D8AF0EB123898F74C866AC3FA669054E23C17BC7A95BD023419 2DC635D0,3 0 1 A4D7D86BFBD0B3538F2850BA49A3408D4FC7D0396E67423AEAC397DF BC92B939,3 1 1 33086ACB8B20F6F057EC3868E422E4DF0C5E7739D210F843EE1750DC 28D96A56</TLSA>
</DNS_LOOKUPS>
<Answer>100</Answer>
<Connect>100</Connect>
<HELO>100</HELO>
<TLS>100</TLS>
<Secure>100</Secure>
<Cert>100</Cert>
<From>100</From>
<To>100</To>
<Data>100</Data>
<Email>100</Email>
<MTASTS>100</MTASTS>
<DANE>100</DANE>
<FCRDNS>100</FCRDNS>
<MXCount>1</MXCount>
<MXAddrCount>1</MXAddrCount>
<MX name="mail14.CheckTLS.com" address="20.75.92.112" port="25" preference="10" testtime="2026-07-24T21:42:00.843131Z">
<Answer>0.016818</Answer>
<Connect code="220" text="www14-azure.checktls.com ESMTP Sendmail 8.16.1/8.16.1; Fri, 24 Jul 2026 17:42:00 -0400">0.079094</Connect>
<HELO>0.091207</HELO>
<TLS>0.103404</TLS>
<Secure>0.203391</Secure>
<Cert>1.830412</Cert>
<From>1.917924</From>
<To>1.947152</To>
<Data>1.959314</Data>
<Email>1.987335</Email>
<MXStep name="Email">9</MXStep>
<SSL>
<SSLVersion>TLSv1_3</SSLVersion>
<SSLDeprecated>0</SSLDeprecated>
<Cipher>TLS_AES_256_GCM_SHA384</Cipher>
<PerfectForwardSecrecy>yes</PerfectForwardSecrecy>
<KeyExchangeAlgorithm nid="408" bits="256">P-256</KeyExchangeAlgorithm>
<KeyExchangeQuality>good</KeyExchangeQuality>
</SSL>
<MTASTS>
<Result>pass</Result>
</MTASTS>
<Certs count="3">
<Cert number="1">
<Source>sent by MX</Source>
<Valid>1</Valid>
<SSLVerifyHostNameError />
<ValidateError>0</ValidateError>
<ValidateString>ok</ValidateString>
<RevokedByOCSP />
<OCSPEntry />
<NotValidBefore>Oct 7 21:13:25 2025 GMT</NotValidBefore>
<NotValidAfter>Nov 8 21:13:25 2026 GMT</NotValidAfter>
<SecondsUntilExpired>9243082</SecondsUntilExpired>
<Expired />
<Subject>
<commonName>*.checktls.com</commonName>
</Subject>
<Issuer>
<countryName>US</countryName>
<stateOrProvinceName>Arizona</stateOrProvinceName>
<localityName>Scottsdale</localityName>
<organizationName>GoDaddy.com, Inc.</organizationName>
<organizationalUnitName>http://certs.godaddy.com/repository/</organizationalUnitName>
<commonName>Go Daddy Secure Certificate Authority - G2</commonName>
</Issuer>
<SerialNumber>aa:2a:05:43:36:28:ee:dd</SerialNumber>
<CRL_URI>http://crl.godaddy.com/gdig2s1-64703.crl</CRL_URI>
<OCSP_URI>http://ocsp.godaddy.com/</OCSP_URI>
<Version>3</Version>
<SignedBy>2</SignedBy>
<PublicKeyAlgorithm>rsaEncryption</PublicKeyAlgorithm>
<PublicKeyBits>2048</PublicKeyBits>
<PublicKeyModulus>9537BBF60BC857DBD75D200291AA585D8B3F02EF535598468516B1D0212350C227D4C7ABD7E25F3526D31C280F73C9B3D8E221D53D1079960FFC86218603473CDC3A716605DFD3B7BDF410DAA0715E767E9E161E7EC47FF03EBE7AB895F8799CF1E56D823C0BF62197018B943021DE879456408680DA860AB191E33587C16510971B34E01339BABD82FDD3F0C27BE22C17EBDA9B67A0579189A3E935D61664EC0F8371D7CD7989F4A3E4CE2EB7BB2A6D6B47101AC7631CC43CDD45FA1B703C9BA9CECE287934280F5FB7B1F014A999772A949777FFCE4F7BF6E4774D3F0C196FD16CE07139A46EB46812F2C6E263A89262A6A180AF80DE462EEE1AD96C92C19B</PublicKeyModulus>
<PublicKeyExponent>65537</PublicKeyExponent>
<PublicKey>-----BEGIN RSA PUBLIC KEY-----
MIIBCgKCAQEAlTe79gvIV9vXXSACkapYXYs/Au9TVZhGhRax0CEjUMIn1Mer1+Jf
NSbTHCgPc8mz2OIh1T0QeZYP/IYhhgNHPNw6cWYF39O3vfQQ2qBxXnZ+nhYefsR/
8D6+eriV+Hmc8eVtgjwL9iGXAYuUMCHeh5RWQIaA2oYKsZHjNYfBZRCXGzTgEzm6
vYL90/DCe+IsF+vam2egV5GJo+k11hZk7A+DcdfNeYn0o+TOLre7Km1rRxAax2Mc
xDzdRfobcDybqc7OKHk0KA9ft7HwFKmZdyqUl3f/zk979uR3TT8MGW/RbOBxOaRu
tGgS8sbiY6iSYqahgK+A3kYu7hrZbJLBmwIDAQAB
-----END RSA PUBLIC KEY-----</PublicKey>
<X509v3SubjectAlternativeName>
<DNS>*.checktls.com</DNS>
<DNS>checktls.com</DNS>
<DNS>*.emailsentry.com</DNS>
<DNS>emailsentry.com</DNS>
<DNS>*.email-test.com</DNS>
<DNS>email-test.com</DNS>
<DNS>*.informationsecuritytest.com</DNS>
<DNS>informationsecuritytest.com</DNS>
<DNS>*.informationsecuritytesting.com</DNS>
<DNS>informationsecuritytesting.com</DNS>
<DNS>*.sniffynet.com</DNS>
<DNS>sniffynet.com</DNS>
<DNS>*.sniffinet.com</DNS>
<DNS>sniffinet.com</DNS>
<DNS>*.infosectesting.com</DNS>
<DNS>infosectesting.com</DNS>
</X509v3SubjectAlternativeName>
<X509v3Extensions>
<X509v3Extension>
<critical>1</critical>
<sn>basicConstraints</sn>
<nid>87</nid>
<oid>X509v3 Basic Constraints</oid>
<data>CA:FALSE</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>extendedKeyUsage</sn>
<nid>126</nid>
<oid>X509v3 Extended Key Usage</oid>
<data>TLS Web Server Authentication, TLS Web Client Authentication</data>
</X509v3Extension>
<X509v3Extension>
<critical>1</critical>
<sn>keyUsage</sn>
<nid>83</nid>
<oid>X509v3 Key Usage</oid>
<data>Digital Signature, Key Encipherment</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>crlDistributionPoints</sn>
<nid>103</nid>
<oid>X509v3 CRL Distribution Points</oid>
<data>Full Name:
URI:http://crl.godaddy.com/gdig2s1-64703.crl</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>certificatePolicies</sn>
<nid>89</nid>
<oid>X509v3 Certificate Policies</oid>
<data>Policy: 2.23.140.1.2.1
Policy: 2.16.840.1.114413.1.7.23.1
CPS: http://certificates.godaddy.com/repository/</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>authorityInfoAccess</sn>
<nid>177</nid>
<oid>Authority Information Access</oid>
<data>OCSP - URI:http://ocsp.godaddy.com/
CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>authorityKeyIdentifier</sn>
<nid>90</nid>
<oid>X509v3 Authority Key Identifier</oid>
<data>keyid:40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>subjectAltName</sn>
<nid>85</nid>
<oid>X509v3 Subject Alternative Name</oid>
<data>DNS:*.checktls.com, DNS:checktls.com, DNS:*.emailsentry.com, DNS:emailsentry.com, DNS:*.email-test.com, DNS:email-test.com, DNS:*.informationsecuritytest.com, DNS:informationsecuritytest.com, DNS:*.informationsecuritytesting.com, DNS:informationsecuritytesting.com, DNS:*.sniffynet.com, DNS:sniffynet.com, DNS:*.sniffinet.com, DNS:sniffinet.com, DNS:*.infosectesting.com, DNS:infosectesting.com</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>subjectKeyIdentifier</sn>
<nid>82</nid>
<oid>X509v3 Subject Key Identifier</oid>
<data>38:9F:55:E1:59:28:FE:A2:BE:3D:42:B8:BF:E9:12:80:86:9E:16:7F</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>ct_precert_scts</sn>
<nid>951</nid>
<oid>CT Precertificate SCTs</oid>
<data>Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:
82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77
Timestamp : Oct 7 21:13:26.133 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:63:3D:13:D7:95:F4:C3:49:61:02:37:C9:
B3:AE:4E:B8:A2:39:71:CA:A7:2C:B9:C4:CD:A4:F2:00:
C8:DE:84:33:02:21:00:FD:62:E4:9F:C5:5F:8E:12:6E:
BD:6C:DB:CB:4E:F3:31:38:2C:DE:E4:0D:8D:9C:07:BC:
DC:1F:39:5F:06:0E:70
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11:
1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3
Timestamp : Oct 7 21:13:26.925 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:1A:50:62:D6:4B:70:78:2B:8F:49:03:1B:
BF:B1:B0:03:7E:59:1E:81:71:57:4D:26:A9:9B:D9:87:
7A:52:BF:D2:02:20:60:A7:5C:23:A7:D5:98:B1:3C:28:
2E:36:96:E8:A5:D1:C4:8A:33:74:DA:5B:F4:1B:8C:2B:
64:5D:7B:19:07:EB
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:
C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD
Timestamp : Oct 7 21:13:27.096 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:C6:74:C2:49:3D:DC:3F:1A:4A:DD:6F:
31:5B:10:49:9C:68:29:44:0A:D7:D8:10:58:42:F4:75:
CC:51:B5:27:B8:02:20:1C:0B:65:85:E9:46:B6:6C:2F:
1E:5C:2A:EB:54:50:66:9C:AA:03:F2:88:A0:5B:EA:A4:
78:1D:DB:F0:78:5C:17</data>
</X509v3Extension>
</X509v3Extensions>
<Digest>a4d7d86bfbd0b3538f2850ba49a3408d4fc7d0396e67423aeac397dfbc92b939</Digest>
<SignatureAlgorithm>sha256WithRSAEncryption</SignatureAlgorithm>
<Signature>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</Signature>
<Fingerprints>
<all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all>
<pub>30820122300D06092A864886F70D01010105000382010F003082010A02820101009537BBF60BC857DBD75D200291AA585D8B3F02EF535598468516B1D0212350C227D4C7ABD7E25F3526D31C280F73C9B3D8E221D53D1079960FFC86218603473CDC3A716605DFD3B7BDF410DAA0715E767E9E161E7EC47FF03EBE7AB895F8799CF1E56D823C0BF62197018B943021DE879456408680DA860AB191E33587C16510971B34E01339BABD82FDD3F0C27BE22C17EBDA9B67A0579189A3E935D61664EC0F8371D7CD7989F4A3E4CE2EB7BB2A6D6B47101AC7631CC43CDD45FA1B703C9BA9CECE287934280F5FB7B1F014A999772A949777FFCE4F7BF6E4774D3F0C196FD16CE07139A46EB46812F2C6E263A89262A6A180AF80DE462EEE1AD96C92C19B0203010001</pub>
<sha256>sha256$a4d7d86bfbd0b3538f2850ba49a3408d4fc7d0396e67423aeac397dfbc92b939</sha256>
<sha256_pub>sha256$pub$33086acb8b20f6f057ec3868e422e4df0c5e7739d210f843ee1750dc28d96a56</sha256_pub>
<sha512>sha512$4afb3a1d342e940874d3d7771f9f712ad8bbc31cfe842801ae4b7d7c773982ec9a383f5518699fb2b307b705caa7366d2f0234205ba32aff3ceba4be89330c40</sha512>
<sha512_pub>sha512$pub$5bab91b8fc4565f1ba26ada257cde59e14a331e98030864cc282739bec3fcc60b468e2ce64e71242b15caff1791b59a194e2e077e6232ebffb779cf84bdec919</sha512_pub>
</Fingerprints>
<Certificate>-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----</Certificate>
</Cert>
<Cert number="2">
<Source>sent by MX</Source>
<Valid>1</Valid>
<SSLVerifyHostNameError />
<ValidateError>0</ValidateError>
<ValidateString>ok</ValidateString>
<RevokedByOCSP />
<OCSPEntry />
<NotValidBefore>May 3 07:00:00 2011 GMT</NotValidBefore>
<NotValidAfter>May 3 07:00:00 2031 GMT</NotValidAfter>
<SecondsUntilExpired>150628677</SecondsUntilExpired>
<Expired />
<Subject>
<countryName>US</countryName>
<stateOrProvinceName>Arizona</stateOrProvinceName>
<localityName>Scottsdale</localityName>
<organizationName>GoDaddy.com, Inc.</organizationName>
<organizationalUnitName>http://certs.godaddy.com/repository/</organizationalUnitName>
<commonName>Go Daddy Secure Certificate Authority - G2</commonName>
</Subject>
<Issuer>
<countryName>US</countryName>
<stateOrProvinceName>Arizona</stateOrProvinceName>
<localityName>Scottsdale</localityName>
<organizationName>GoDaddy.com, Inc.</organizationName>
<commonName>Go Daddy Root Certificate Authority - G2</commonName>
</Issuer>
<SerialNumber>07</SerialNumber>
<CRL_URI>http://crl.godaddy.com/gdroot-g2.crl</CRL_URI>
<OCSP_URI>http://ocsp.godaddy.com/</OCSP_URI>
<Version>3</Version>
<SignedBy>3</SignedBy>
<PublicKeyAlgorithm>rsaEncryption</PublicKeyAlgorithm>
<PublicKeyBits>2048</PublicKeyBits>
<PublicKeyModulus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ublicKeyModulus>
<PublicKeyExponent>65537</PublicKeyExponent>
<PublicKey>-----BEGIN RSA PUBLIC KEY-----
MIIBCgKCAQEAueDLENSvdr3Uk2LrMGS4gQhswwTZYheOL/8+Zc+PzmLmPFIc2hZF
S1WreGtjg2KQzg9pbJnIGhSLTMxFM+qI3J6jryv+gGGdeVfEzy70PzA8XUf8mha8
wzeWQVGOEUtU+Ci+0Iy+8DA4HvOwJvhmR2Nt3nEmR484R1PRRh2049wA6kWsvbxx
2apvANvbzTA6eU9fTEf4He9bwsSdYDuxskOR2KQzTuqz1idPrSWKpcb01dCmrnQF
ZFeItURV1C0qOj74uL3pMgoClGTEFjpQ8Uqu53kzrwwgB3/o3wQ5wmkCbGNS+nfB
G8h0h8i5kxhQVDVLaU68O9NJLh/cwdJS+wIDAQAB
-----END RSA PUBLIC KEY-----</PublicKey>
<X509v3Extensions>
<X509v3Extension>
<critical>1</critical>
<sn>basicConstraints</sn>
<nid>87</nid>
<oid>X509v3 Basic Constraints</oid>
<data>CA:TRUE</data>
</X509v3Extension>
<X509v3Extension>
<critical>1</critical>
<sn>keyUsage</sn>
<nid>83</nid>
<oid>X509v3 Key Usage</oid>
<data>Certificate Sign, CRL Sign</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>subjectKeyIdentifier</sn>
<nid>82</nid>
<oid>X509v3 Subject Key Identifier</oid>
<data>40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>authorityKeyIdentifier</sn>
<nid>90</nid>
<oid>X509v3 Authority Key Identifier</oid>
<data>keyid:3A:9A:85:07:10:67:28:B6:EF:F6:BD:05:41:6E:20:C1:94:DA:0F:DE</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>authorityInfoAccess</sn>
<nid>177</nid>
<oid>Authority Information Access</oid>
<data>OCSP - URI:http://ocsp.godaddy.com/</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>crlDistributionPoints</sn>
<nid>103</nid>
<oid>X509v3 CRL Distribution Points</oid>
<data>Full Name:
URI:http://crl.godaddy.com/gdroot-g2.crl</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>certificatePolicies</sn>
<nid>89</nid>
<oid>X509v3 Certificate Policies</oid>
<data>Policy: X509v3 Any Policy
CPS: https://certs.godaddy.com/repository/</data>
</X509v3Extension>
</X509v3Extensions>
<Digest>973a41276ffd01e027a2aad49e34c37846d3e976ff6a620b6712e33832041aa6</Digest>
<SignatureAlgorithm>sha256WithRSAEncryption</SignatureAlgorithm>
<Signature>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</Signature>
<Fingerprints>
<all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all>
<pub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pub>
<sha256>sha256$973a41276ffd01e027a2aad49e34c37846d3e976ff6a620b6712e33832041aa6</sha256>
<sha256_pub>sha256$pub$f11c3dd048f74edb7c45192b83e5980d2f67ec84b4ddb9396e33ff5173ed698f</sha256_pub>
<sha512>sha512$42c5b22334cd08c727fdec4aca8df6ec645afa8dd7fc278d26a2c800c81d7cff86fc107e6d7f28f1a8e4faf0216fd4d2a9af22d69714ca9099e457d1b2d5188a</sha512>
<sha512_pub>sha512$pub$fb48c4f85ae0b07f8ef93d1915e32b161dade3bd070a39df508570fd64e7298703f90bffa17fd636c29b8f4a69e8b7b14f0fd6f2525206f9f47331af89ef79db</sha512_pub>
</Fingerprints>
<Certificate>-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----</Certificate>
</Cert>
<Cert number="3">
<Source>sent by MX, also in CA Root Store</Source>
<Valid>1</Valid>
<SSLVerifyHostNameError />
<ValidateError>0</ValidateError>
<ValidateString>ok</ValidateString>
<RevokedByOCSP />
<OCSPEntry />
<NotValidBefore>Sep 1 00:00:00 2009 GMT</NotValidBefore>
<NotValidAfter>Dec 31 23:59:59 2037 GMT</NotValidAfter>
<SecondsUntilExpired>360987476</SecondsUntilExpired>
<Expired />
<Subject>
<countryName>US</countryName>
<stateOrProvinceName>Arizona</stateOrProvinceName>
<localityName>Scottsdale</localityName>
<organizationName>GoDaddy.com, Inc.</organizationName>
<commonName>Go Daddy Root Certificate Authority - G2</commonName>
</Subject>
<Issuer>
<countryName>US</countryName>
<stateOrProvinceName>Arizona</stateOrProvinceName>
<localityName>Scottsdale</localityName>
<organizationName>GoDaddy.com, Inc.</organizationName>
<commonName>Go Daddy Root Certificate Authority - G2</commonName>
</Issuer>
<SerialNumber>00</SerialNumber>
<CRL_URI />
<OCSP_URI />
<Version>3</Version>
<SignedBy>3</SignedBy>
<PublicKeyAlgorithm>rsaEncryption</PublicKeyAlgorithm>
<PublicKeyBits>2048</PublicKeyBits>
<PublicKeyModulus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ublicKeyModulus>
<PublicKeyExponent>65537</PublicKeyExponent>
<PublicKey>-----BEGIN RSA PUBLIC KEY-----
MIIBCgKCAQEAv3FiCPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtO
oLTbcJjHMgGxBT4HTu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPk
tj+pA4P6or6KFWp/3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0
OPoCjM7T3UYH3go+6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp
6V0etp6eMAo5zvGIgPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21g
nb8s51iruF9G/M7EGwM8CetJMVxpRrPgRwIDAQAB
-----END RSA PUBLIC KEY-----</PublicKey>
<X509v3Extensions>
<X509v3Extension>
<critical>1</critical>
<sn>basicConstraints</sn>
<nid>87</nid>
<oid>X509v3 Basic Constraints</oid>
<data>CA:TRUE</data>
</X509v3Extension>
<X509v3Extension>
<critical>1</critical>
<sn>keyUsage</sn>
<nid>83</nid>
<oid>X509v3 Key Usage</oid>
<data>Certificate Sign, CRL Sign</data>
</X509v3Extension>
<X509v3Extension>
<critical>0</critical>
<sn>subjectKeyIdentifier</sn>
<nid>82</nid>
<oid>X509v3 Subject Key Identifier</oid>
<data>3A:9A:85:07:10:67:28:B6:EF:F6:BD:05:41:6E:20:C1:94:DA:0F:DE</data>
</X509v3Extension>
</X509v3Extensions>
<Digest>45140b3247eb9cc8c5b4f0d7b53091f73292089e6e5a63e2749dd3aca9198eda</Digest>
<SignatureAlgorithm>sha256WithRSAEncryption</SignatureAlgorithm>
<Signature>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</Signature>
<Fingerprints>
<all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all>
<pub>30820122300D06092A864886F70D01010105000382010F003082010A0282010100BF716208F1FA5934F71BC918A3F7804958E9228313A6C52043013B84F1E685499F27EAF6841B4EA0B4DB7098C73201B1053E074EEEF4FA4F2F593022E7AB19566BE28007FCF316758039517BE5F935B6744EA98D8213E4B63FA90383FAA2BE8A156A7FDE0BC3B6191405CAEAC3A804943B467C320DF3006622C88D696D368C1118B7D3B21C60B438FA028CCED3DD4607DE0A3EEB5D7CC87CFBB02B53A4926269512505611A44818C2CA9439623DFAC3A819A0E29C51CA9E95D1EB69E9E300A39CEF18880FB4B5DCC32EC85624325340256270191B43B702A3F6EB1E89C88017D9FD4F9DB536D609DBF2CE758ABB85F46FCCEC41B033C09EB49315C6946B3E0470203010001</pub>
<sha256>sha256$45140b3247eb9cc8c5b4f0d7b53091f73292089e6e5a63e2749dd3aca9198eda</sha256>
<sha256_pub>sha256$pub$2a8f2d8af0eb123898f74c866ac3fa669054e23c17bc7a95bd0234192dc635d0</sha256_pub>
<sha512>sha512$c509cd5452659ae94c673a47b68e2c0aa8ad177804c8ae2949306e9232b70ab5b5334d1abe53a25ecaf0c609871b33849773b4edf277dd346069038f695d76fb</sha512>
<sha512_pub>sha512$pub$cb17d366514f38cd029146ff26bc2b054ee12f66cf976f405920db7f382f4d867996e616da60eac4cb0043edf95c06926a3f57d074d5a66e5372ef556bd75fd7</sha512_pub>
</Fingerprints>
<Certificate>-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----</Certificate>
</Cert>
</Certs>
<DANE>
<TLSAMatches count="1">
<RecordNumber>1</RecordNumber>
</TLSAMatches>
<Result>pass</Result>
</DANE>
<Size>none</Size>
<Score>123.00</Score>
</MX>
<EMAILSENT>
<![CDATA[
From: ReturnAddress@TestThru.CheckTLS.com
To: TestThru-Reply@CheckTLS.com
Date: Fri, 24 Jul 2026 17:41:56 -0400
Subject: CheckTLS TestThru (G_2_2_20260724174156_1)
This is a test message from CheckTLS. Your email system should be configured to automatically forward it to ReplyAddress@TestThru.CheckTLS.com.
TLS
Headers
SSLVERSION
SSLCIPHER
SPF
DKIM
DMARC
FCRDNS
BIMI
DNS
DNSSEC
SMTP
FileXML
]]>
</EMAILSENT>
</CheckTLS>
</TestReceiver>
<TestSender>
<CheckTLS test="TestSender" version="V01.75.07"><ConfidenceFactor available="132" max="132" percent="93.94">124</ConfidenceFactor>
<Status>SUCCESS</Status>
<RECEIVER>
<Connection>
<From>104.131.168.30</From>
</Connection>
<DNS>
<_104.131.168.30>
<PTR>mailbox1-do.checktls.com <span class="success">+FCrDNS</span></PTR>
</_104.131.168.30>
<mailbox1-do.checktls.com>
<A><span class="success">+DNSSEC</span> 104.131.168.30 <span class="success">+FCrDNS</span></A>
</mailbox1-do.checktls.com>
</DNS>
</RECEIVER>
<SENDER>
<Header>
<To>TestThru-Reply@CheckTLS.com</To>
<From>ReturnAddress@TestThru.CheckTLS.com</From>
<Date>Fri, 24 Jul 2026 17:41:56 -0400</Date>
<Subject>CheckTLS TestThru (G_2_2_20260724174156_1)</Subject>
</Header>
</SENDER>
<TLS>
<info>
<SSLVersion>TLSv1_3</SSLVersion>
<SSLCipher>TLS_AES_256_GCM_SHA384</SSLCipher>
</info>
<result>Successful</result>
</TLS>
<SPF>
<DNS>
<mailbox1-do.checktls.com>
<TXT><span class="success">+DNSSEC</span> "v=spf1 a -all"</TXT>
<A><span class="success">+DNSSEC</span> 104.131.168.30</A>
</mailbox1-do.checktls.com>
<mail11-do.checktls.com>
<A><span class="success">+DNSSEC</span> 134.209.47.28</A>
</mail11-do.checktls.com>
<mail12-do.checktls.com>
<A><span class="success">+DNSSEC</span> 104.131.118.193</A>
</mail12-do.checktls.com>
<checktls.com>
<MX><span class="success">+DNSSEC</span> 20 mail12.checktls.com.,10 mail14.checktls.com.,20 mail11.checktls.com.</MX>
<A><span class="success">+DNSSEC</span> 167.71.160.115,142.93.73.156,20.75.92.112</A>
<TXT><span class="success">+DNSSEC</span> "v=spf1 a mx a:whitelist.checktls.com a:spf.checktls.com -all"</TXT>
</checktls.com>
<mail11.checktls.com>
<CNAME><span class="success">+DNSSEC</span> mail11-do.checktls.com.</CNAME>
</mail11.checktls.com>
<mail14.checktls.com>
<CNAME><span class="success">+DNSSEC</span> www14-azure.checktls.com.</CNAME>
</mail14.checktls.com>
<www14-azure.checktls.com>
<A><span class="success">+DNSSEC</span> 20.75.92.112</A>
</www14-azure.checktls.com>
<whitelist.checktls.com>
<A><span class="success">+DNSSEC</span> 20.75.92.113,20.75.92.116,20.75.92.115,167.71.160.115,20.75.92.114,20.75.92.112,134.209.169.224,142.93.73.156,134.209.47.28,104.131.168.30,20.75.92.117,20.75.92.118,104.131.118.193,165.227.190.238</A>
</whitelist.checktls.com>
<mail12.checktls.com>
<CNAME><span class="success">+DNSSEC</span> mail12-do.checktls.com.</CNAME>
</mail12.checktls.com>
</DNS>
<mfrom>
<identity>test@checktls.com</identity>
<ip_address>104.131.168.30</ip_address>
<sent>104.131.168.30</sent>
<record>v=spf1 a mx a:whitelist.checktls.com a:spf.checktls.com -all</record>
<text>pass (Mechanism 'a:whitelist.checktls.com' matched)</text>
<local>checktls.com: 104.131.168.30 is authorized to use 'test@checktls.com' in 'mfrom' identity (mechanism 'a:whitelist.checktls.com' matched)</local>
<header>Received-SPF: pass (checktls.com: 104.131.168.30 is authorized to use 'test@checktls.com' in 'mfrom' identity (mechanism 'a:whitelist.checktls.com' matched)) receiver=ts11-do.checktls.com; identity=mailfrom; envelope-from="test@checktls.com"; helo=ts11-do.checktls.com; client-ip=104.131.168.30</header>
<result>pass</result>
</mfrom>
<helo>
<identity>mailbox1-do.checktls.com</identity>
<ip_address>104.131.168.30</ip_address>
<sent>mailbox1-do.checktls.com</sent>
<record>v=spf1 a -all</record>
<text>pass (Mechanism 'a' matched)</text>
<local>mailbox1-do.checktls.com: 104.131.168.30 is authorized to use 'mailbox1-do.checktls.com' in 'helo' identity (mechanism 'a' matched)</local>
<header>Received-SPF: pass (mailbox1-do.checktls.com: 104.131.168.30 is authorized to use 'mailbox1-do.checktls.com' in 'helo' identity (mechanism 'a' matched)) receiver=ts11-do.checktls.com; identity=helo; helo=mailbox1-do.checktls.com; client-ip=104.131.168.30</header>
<result>pass</result>
</helo>
</SPF>
<DKIM>
<result>none</result>
</DKIM>
<DMARC>
<mfrom>
<domain>checktls.com</domain>
</mfrom>
<helo>
<domain>mailbox1-do.checktls.com</domain>
</helo>
<DNS>
<testthru.checktls.com>
<MX><span class="success">+DNSSEC</span> 20 ts11-do.checktls.com.</MX>
</testthru.checktls.com>
<_dmarc.checktls.com>
<TXT><span class="success">+DNSSEC</span> "v=DMARC1; p=quarantine"</TXT>
</_dmarc.checktls.com>
</DNS>
<published>
<p>quarantine</p>
<v>DMARC1</v>
<domain>checktls.com</domain>
</published>
<spf_align>relaxed</spf_align>
<disposition>none</disposition>
<spf>pass</spf>
<dkim>fail</dkim>
<result>pass</result>
</DMARC>
<BIMI><domain>TestThru.CheckTLS.com</domain><header>not present</header>result</BIMI>
<SMTP>
<![CDATA[
<-- 220 ts11-do.checktls.com ESMTP TestSender(V01.75.07) Fri, 24 Jul 2026 17:43:03 -0400
--> EHLO mailbox1-do.checktls.com
<-- 250-ts11-do.checktls.com Hello mailbox1-do.checktls.com [104.131.168.30], pleased to meet you
<-- 250-ENHANCEDSTATUSCODES
<-- 250-8BITMIME
<-- 250-STARTTLS
<-- 250 HELP
--> STARTTLS
<-- 220 Ready to start TLS
=== TLS started with cipher TLSv1_3:TLS_AES_256_GCM_SHA384
=== TLS client cert:
Subject Name: /CN=*.checktls.com
Issuer Name: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
~~> EHLO mailbox1-do.checktls.com
<~~ 250-ts11-do.checktls.com Hello mailbox1-do.checktls.com [104.131.168.30], pleased to meet you
<~~ 250-ENHANCEDSTATUSCODES
<~~ 250-8BITMIME
<~~ 250 HELP
~~> MAIL From:<test@checktls.com>
<~~ 250 Ok - mail from test@checktls.com
~~> RCPT To:<ReplyAddress@TestThru.CheckTLS.com>
<~~ 250 Ok - recipient ReplyAddress@TestThru.CheckTLS.com
~~> DATA
<~~ 354 Send data. End with CRLF.CRLF
~~> Received: from www14-azure.checktls.com (www14-azure.checktls.com [IPv6:2603:1030:408:4::200])
~~> by mailbox1-do.checktls.com (8.15.2/8.15.2) with ESMTPS id 66OLg2rB1665036
~~> (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=OK)
~~> for <TestThru-Reply@mailbox1-do.checktls.com>; Fri, 24 Jul 2026 17:42:03 -0400
~~> DKIM-Filter: OpenDKIM Filter v2.11.0 mailbox1-do.checktls.com 66OLg2rB1665036
~~> Received: from www2-do.checktls.com (www2-do.checktls.com [157.245.11.48])
~~> by www14-azure.checktls.com (8.16.1/8.16.1) with ESMTPS id 66OLg0UY3901891
~~> (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO)
~~> for <TestThru-Reply@CheckTLS.com>; Fri, 24 Jul 2026 17:42:02 -0400
~~> Message-Id: <202607242142.66OLg0UY3901891@www14-azure.checktls.com>
~~> From: ReturnAddress@TestThru.CheckTLS.com
~~> To: TestThru-Reply@CheckTLS.com
~~> Date: Fri, 24 Jul 2026 17:41:56 -0400
~~> Subject: CheckTLS TestThru (G_2_2_20260724174156_1)
~~>
~~> This is a test message from CheckTLS. Your email system should be configured to automatically forward it to ReplyAddress@TestThru.CheckTLS.com.
~~>
~~>
~~> TLS
~~> Headers
~~> SSLVERSION
~~> SSLCIPHER
~~> SPF
~~> DKIM
~~> DMARC
~~> FCRDNS
~~> BIMI
~~> DNS
~~> DNSSEC
~~> SMTP
~~> FileXML
~~> .
<~~ 250 Ok
~~> QUIT
<~~ 221 ts11-do.checktls.com closing connection
]]>
</SMTP>
</CheckTLS>
</TestSender>
</Result>
</Results>
</CheckTLS>