Namecheap.com

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Doesn't match Common Name or/and SANs
Expired: Yes (expired 705 days ago)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function

DNS Information

Resolves To: 120.138.69.92
Reverse IP lookup: ptr.vng.vn.
Nameserver: ns2.sonthuy.com.vn.
Nameserver: ns4.vngdns.net.
Nameserver: ns3.vngdns.net.
Nameserver: ns1.sonthuy.com.vn.

General Information

Common Name: *.zaloapp.com
SANs: DNS:*.zaloapp.comDNS:zaloapp.comDNS:stc.oauth.zaloapp.comDNS:stc.credits.zaloapp.comDNS:stc.id.zaloapp.comDNS:telcos.credits.zaloapp.comDNS:atm.credits.zaloapp.comDNS:billing.credits.zaloapp.comDNS:dc.credits.zaloapp.comDNS:gw.credits.zaloapp.comDNS:zc.credits.zaloapp.comDNS:qr.id.zaloapp.comDNS:api.wpa.zaloapp.com Total number of SANs: 13
Organization: VNG CORPORATION
Locality: Ho Chi Minh
Signature Algorithm: sha256WithRSAEncryption
Key Type: RSA
Key size: 2048 bits
Serial Number: 1f07c82eb19b5d5abb3c2a5a3f37348
Not Before: Oct 03, 2016 00:00:00 GMT
Not After: Jan 01, 2020 12:00:00 GMT
Number of certs: 2
Revocation Status: This check is not applicable to expired certificates
OCSP Stapling: Not Supported
Server: nginx
HSTS: max-age=31536000;
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: *.zaloapp.com

Decode this certificate for verbose information →
Subject Common Name *.zaloapp.com
Subject Organization VNG CORPORATION
Issuer Common Name DigiCert SHA2 Secure Server CA
Issuer Organization DigiCert Inc
Not Before: Oct 03, 2016 00:00:00 GMT
Not After: Jan 01, 2020 12:00:00 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 1f07c82eb19b5d5abb3c2a5a3f37348
SHA1 Fingerprint: E3:4C:E6:D9:E9:46:79:F4:92:6A:55:6F:E8:77:37:E5:3A:8A:1E:3A
MD5 Fingerprint: FD:01:E4:AF:B1:06:43:4C:EC:71:85:D3:0F:28:7F:7A

Certificate # 2 - Common Name: DigiCert SHA2 Secure Server CA

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name DigiCert SHA2 Secure Server CA
Subject Organization DigiCert Inc
Issuer Common Name DigiCert Global Root CA
Issuer Organization DigiCert Inc
Not Before: Mar 08, 2013 12:00:00 GMT
Not After: Mar 08, 2023 12:00:00 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 1fda3eb6eca75c888438b724bcfbc91
SHA1 Fingerprint: 1F:B8:6B:11:68:EC:74:31:54:06:2E:8C:9C:C5:B1:71:A4:B7:CC:B4
MD5 Fingerprint: 34:5E:FF:15:B7:A4:9A:DD:45:1B:65:A7:F4:BD:C6:AE

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA
verify return:1
depth=0 C = VN, ST = Ho Chi Minh, L = Ho Chi Minh, O = VNG CORPORATION, CN = *.zaloapp.com
verify error:num=10:certificate has expired
notAfter=Jan  1 12:00:00 2020 GMT
verify return:1
depth=0 C = VN, ST = Ho Chi Minh, L = Ho Chi Minh, O = VNG CORPORATION, CN = *.zaloapp.com
notAfter=Jan  1 12:00:00 2020 GMT
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:/C=VN/ST=Ho Chi Minh/L=Ho Chi Minh/O=VNG CORPORATION/CN=*.zaloapp.com
   i:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
-----BEGIN CERTIFICATE-----
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
-----END CERTIFICATE-----
---
Server certificate
subject=/C=VN/ST=Ho Chi Minh/L=Ho Chi Minh/O=VNG CORPORATION/CN=*.zaloapp.com
issuer=/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3454 bytes and written 327 bytes
Verification error: certificate has expired
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 76EC9D8B80F7A4208C4631127AAFC231DBEB9C507C15191933148A7D82C9CEBE
    Session-ID-ctx: 
    Master-Key: 24014E80F1D1C27CA197E67436D1A277360E6507843A5422F375ECBF896ABBC637440430F0734DDF261319F461FB7534
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 600 (seconds)
    TLS session ticket:
    0000 - cd 1d 3c dd cf 53 dc b2-94 da 21 87 de e8 0d 3f   ..<..S....!....?
    0010 - 13 b6 9e ae d9 34 3f cd-c8 cf 66 e6 04 43 dc cf   .....4?...f..C..
    0020 - 17 7a f2 52 af 62 ff 37-1c 1f 25 16 4d 26 52 6a   .z.R.b.7..%.M&Rj
    0030 - 42 d4 ea a2 4a bb ed 40-cb 3e 84 67 5f 8c d0 0e   B...J..@.>.g_...
    0040 - 7f 8f b0 fc f5 f6 22 d1-4a ab db fb 28 9d ba e3   ......".J...(...
    0050 - d6 c3 c2 c8 97 81 71 77-90 45 61 d8 a6 57 ac c3   ......qw.Ea..W..
    0060 - 7f 86 db 02 8b 82 b4 09-f2 cc 51 20 94 e1 5e a6   ..........Q ..^.
    0070 - b4 be 2e 48 78 a0 5f f2-e8 e0 df a8 3f 5b 4e a3   ...Hx._.....?[N.
    0080 - 46 f5 09 da 0d 63 29 f0-19 b1 91 d7 39 db 76 f4   F....c).....9.v.
    0090 - 29 b5 e8 3a 92 63 10 0d-9f 73 fd 8f 87 6c 2b 48   )..:.c...s...l+H
    00a0 - 9f f1 de 5f 5b 58 8e 4b-de 37 8c 3f 28 68 34 45   ..._[X.K.7.?(h4E
    00b0 - 06 1f 62 fc 27 12 e2 93-b2 de a3 e7 3c c9 cd f4   ..b.'.......<...

    Start Time: 1638766472
    Timeout   : 7200 (sec)
    Verify return code: 10 (certificate has expired)
    Extended master secret: no
---
DONE