Details about the encryption and TLS certificates used by libre.moe

Services

Services with public endpoints are set-up with valid TLS certificates whereever possible.

Service	Port	Certificate Information
All traffic over HTTPS	443	Uses trusted TLS certificates
Git over SSH	22	TLS not applicable, uses self-generated SSH keys. To validate the authenticity of the server, please verify the provided fingerprint against https://lab.libre.moe/help/instance_configuration
Mumble Voip	64738	Uses trusted TLS certificates
E-Mail (SMTP/IMAP)	465, 993	Uses trusted TLS certificates

Certificate Authorities

Let's Encrypt is used as the primary CA for any TLS certificates in use on libre.moe.

Previously, ZeroSSL was used for wildcard certificates under *.sites.libre.moe, but is no longer actively in-use for any service under libre.moe as of 09.06.2026.