internet is 3,970,693,888 inbound smtp hosts are 13,427,404 iprev are 4,748,264 unique iprev are 4,737,722 no ssl are 3,988,657 wrong CN/SAN are 512,806 iprev CN/SAN are 246,801 valid chains are 167,034 0.34% of the public network listens on port 25/tcp - 13427404 out of 3970693888 35.36% of the smtp servers are full-circle reverse DNS - 4748264 out of 13427404 0.22% of those iprev hosts are multi-homed (round-robin) - 10542 out of 4748264 16.00% of full-circle hosts talk SSL/STARTTLS - 759607 out of 4748264 32.49% of SSL-enabled hosts advertise an iprev subject alternative name - 246801 out of 759607 67.68% of SAN hosts have a valid certificate chain - 167034 out of 246801 IPREV PTRs 4,737,722 Deferenced domains 976,781 MX records 632,793 Total results for enforce check 585,638 Unreachable MXen 104,381 No STARTTLS 132,386 Offers STARTTLS 334,501 Enforces STARTTLS 628 Trusted certificate chain 163,733 (ok) Cipher is (NONE) 123,388 (ok) From the future 28 (certificate is not yet valid) Expired 28,389 (certificate has expired) Self-signed 61,894 (self signed certificate) Self-signed CA 6,687 (self signed certificate in certificate chain) Untrusted certificate chain 478 (unable to get local issuer certificate) Invalid certificate 53,874 (unable to verify the first certificate) Wrong purpose certificate 499 (unsupported certificate purpose) TLSA records 1,746 Valid PKIX/DANE-EE 1,387 Valid PKIX/DANE-TA 103 64.00% of deferenced domains have an MX record 25.00% of MX certificates are valid 19.00% of MX end-points do not offer STARTTLS 4.00% of MX certificates are expired 9.00% of MX certificates are self-signed 0.00% of MX certificates are private 8.00% of MX certificates are invalid 0.00% of MX end-points have a DANE record 0.00% of MX end-points validating DANE (trusted, private and self-signed)