SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (141 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	200.1.116.6
Reverse IP lookup:	www.afip.gob.ar.
Nameserver:	ns2.afip.gov.ar.
Nameserver:	ns1.afip.gov.ar.

General Information

Common Name:	*.afip.gov.ar
SANs:	DNS:*.afip.gov.arDNS:afip.gov.ar Total number of SANs: 2
Organization:	ADMINISTRACION FEDERAL DE INGRESOS PUBLICOS
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	42eccd09be87ccd6d8e8ef5534a0c975
Not Before:	Aug 08, 2023 00:00:00 GMT
Not After:	Sep 07, 2024 23:59:59 GMT
Number of certs:	3
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	Not Provided
HSTS:	max-age=31536000; includeSubdomains
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.afip.gov.ar

Decode this certificate for verbose information →

Subject Common Name	*.afip.gov.ar
Subject Organization	ADMINISTRACION FEDERAL DE INGRESOS PUBLICOS
Issuer Common Name	Sectigo RSA Organization Validation Secure Server CA
Issuer Organization	Sectigo Limited
Not Before:	Aug 08, 2023 00:00:00 GMT
Not After:	Sep 07, 2024 23:59:59 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	42eccd09be87ccd6d8e8ef5534a0c975
SHA1 Fingerprint:	19:92:CC:25:37:B8:F3:50:11:09:16:DC:66:DC:DE:1C:BF:C5:66:E8
MD5 Fingerprint:	59:65:C5:BD:8B:71:8C:EE:00:3D:57:F0:63:D4:3A:64

Certificate # 2 - Common Name: Sectigo RSA Organization Validation Secure Server CA

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	Sectigo RSA Organization Validation Secure Server CA
Subject Organization	Sectigo Limited
Issuer Common Name	USERTrust RSA Certification Authority
Issuer Organization	The USERTRUST Network
Not Before:	Nov 02, 2018 00:00:00 GMT
Not After:	Dec 31, 2030 23:59:59 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	137d539caa7c31a9a433701968847a8d
SHA1 Fingerprint:	40:CE:F3:04:6C:91:6E:D7:AE:55:7F:60:E7:68:42:82:8B:51:DE:53
MD5 Fingerprint:	88:6E:A7:8B:53:0E:0F:D5:BD:A4:E1:25:27:AB:6A:2C

Certificate # 3 - Common Name: USERTrust RSA Certification Authority

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	USERTrust RSA Certification Authority
Subject Organization	The USERTRUST Network
Issuer Common Name	AAA Certificate Services
Issuer Organization	Comodo CA Limited
Not Before:	Mar 12, 2019 00:00:00 GMT
Not After:	Dec 31, 2028 23:59:59 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	3972443af922b751d7d36c10dd313595
SHA1 Fingerprint:	D8:9E:3B:D4:3D:5D:90:9B:47:A1:89:77:AA:9D:5C:E3:6C:EE:18:4C
MD5 Fingerprint:	28:5E:C9:09:C4:AB:0D:2D:57:F5:08:6B:22:57:99:AA

OpenSSL Handshake

depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Organization Validation Secure Server CA
verify return:1
depth=0 C = AR, ST = Ciudad Aut\C3\B3noma de Buenos Aires, O = ADMINISTRACION FEDERAL DE INGRESOS PUBLICOS, CN = *.afip.gov.ar
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:C = AR, ST = Ciudad Aut\C3\B3noma de Buenos Aires, O = ADMINISTRACION FEDERAL DE INGRESOS PUBLICOS, CN = *.afip.gov.ar
   i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Organization Validation Secure Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Organization Validation Secure Server CA
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----
MIIGGTCCBAGgAwIBAgIQE31TnKp8MamkM3AZaIR6jTANBgkqhkiG9w0BAQwFADCB
iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl
cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNV
BAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTgx
MTAyMDAwMDAwWhcNMzAxMjMxMjM1OTU5WjCBlTELMAkGA1UEBhMCR0IxGzAZBgNV
BAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UE
ChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQDEzRTZWN0aWdvIFJTQSBPcmdhbml6
YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENBMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAnJMCRkVKUkiS/FeN+S3qU76zLNXYqKXsW2kDwB0Q
9lkz3v4HSKjojHpnSvH1jcM3ZtAykffEnQRgxLVK4oOLp64m1F06XvjRFnG7ir1x
on3IzqJgJLBSoDpFUd54k2xiYPHkVpy3O/c8Vdjf1XoxfDV/ElFw4Sy+BKzL+k/h
fGVqwECn2XylY4QZ4ffK76q06Fha2ZnjJt+OErK43DOyNtoUHZZYQkBuCyKFHFEi
rsTIBkVtkuZntxkj5Ng2a4XQf8dS48+wdQHgibSov4o2TqPgbOuEQc6lL0giE5dQ
YkUeCaXMn2xXcEAG2yDoG9bzk4unMp63RBUJ16/9fAEc2wIDAQABo4IBbjCCAWow
HwYDVR0jBBgwFoAUU3m/WqorSs9UgOHYm8Cd8rIDZsswHQYDVR0OBBYEFBfZ1iUn
Z/kxwklD2TA2RIxsqU/rMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/
AgEAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAbBgNVHSAEFDASMAYG
BFUdIAAwCAYGZ4EMAQICMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNl
cnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNy
bDB2BggrBgEFBQcBAQRqMGgwPwYIKwYBBQUHMAKGM2h0dHA6Ly9jcnQudXNlcnRy
dXN0LmNvbS9VU0VSVHJ1c3RSU0FBZGRUcnVzdENBLmNydDAlBggrBgEFBQcwAYYZ
aHR0cDovL29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0BAQwFAAOCAgEAThNA
lsnD5m5bwOO69Bfhrgkfyb/LDCUW8nNTs3Yat6tIBtbNAHwgRUNFbBZaGxNh10m6
pAKkrOjOzi3JKnSj3N6uq9BoNviRrzwB93fVC8+Xq+uH5xWo+jBaYXEgscBDxLmP
bYox6xU2JPti1Qucj+lmveZhUZeTth2HvbC1bP6mESkGYTQxMD0gJ3NR0N6Fg9N3
OSBGltqnxloWJ4Wyz04PToxcvr44APhL+XJ71PJ616IphdAEutNCLFGIUi7RPSRn
R+xVzBv0yjTqJsHe3cQhifa6ezIejpZehEU4z4CqN2mLYBd0FUiRnG3wTqN3yhsc
SPr5z0noX0+FCuKPkBurcEya67emP7SsXaRfz+bYipaQ908mgWB2XQ8kd5GzKjGf
FlqyXYwcKapInI5v03hAcNt37N3j0VcFcC3mSZiIBYRiBXBWdoY5TtMibx3+bfEO
s2LEPMvAhblhHrrhFYBZlAyuBbuMf1a+HNJav5fyakywxnB2sJCNwQs2uRHY1ihc
6k/+JLcYCpsM0MF8XPtpvcyiTcaQvKZN8rG61ppnW5YCUtCC+cQKXA0o4D/I+pWV
idWkvklsQLI+qGu41SWyxP7x09fn1txDAXYw+zuLXfdKiXyaNb78yvBXAfCNP6CH
MntHWpdLgtJmwsQt6j8k9Kf5qLnjatkYYaA7jBU=
-----END CERTIFICATE-----
 2 s:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
   i:C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIQOXJEOvkit1HX02wQ3TE1lTANBgkqhkiG9w0BAQwFADB7
MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD
VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE
AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTE5MDMxMjAwMDAwMFoXDTI4
MTIzMTIzNTk1OVowgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5
MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBO
ZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0
aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sI
s9CsVw127c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnG
vDoZtF+mvX2do2NCtnbyqTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQ
Ijy8/hPwhxR79uQfjtTkUcYRZ0YIUcuGFFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfb
IWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy29lTdyOcSOk2uTIq3XJq0
tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnHa4xgk97E
xwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNV
icQNwZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5
D9kCnusSTJV882sFqV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJ
WBp/kjbmUZIO8yZ9HE0XvMnsQybQv0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ
5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV4clXhB4PY9bpYrrWX1Uu6lzG
KAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaOB8jCB7zAfBgNVHSMEGDAWgBSg
EQojPpbxB+zirynvgqV/0DCktDAdBgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rID
ZsswDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAG
BgRVHSAAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwuY29tb2RvY2EuY29t
L0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBDAUA
A4IBAQAYh1HcdCE9nIrgJ7cz0C7M7PDmy14R3iJvm3WOnnL+5Nb+qh+cli3vA0p+
rvSNb3I8QzvAP+u431yqqcau8vzY7qN7Q/aGNnwU4M309z/+3ri0ivCRlv79Q2R+
/czSAaF9ffgZGclCKxO/WIu6pKJmBHaIkU4MiRTOok3JMrO66BQavHHxW/BBC5gA
CiIDEOUMsfnNkjcZ7Tvx5Dq2+UUTJnWvu6rvP3t3O9LEApE9GQDTF1w52z97GA1F
zZOFli9d31kWTz9RvdVFGD/tSo7oBmF0Ixa1DVBzJ0RHfxBdiSprhTEUxOipakyA
vGp4z7h/jnZymQyd/teRCBaho1+V
-----END CERTIFICATE-----
---
Server certificate
subject=C = AR, ST = Ciudad Aut\C3\B3noma de Buenos Aires, O = ADMINISTRACION FEDERAL DE INGRESOS PUBLICOS, CN = *.afip.gov.ar

issuer=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Organization Validation Secure Server CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 5301 bytes and written 448 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 992533F7DC98168B604DA88426409F76BC8573E826608470E3726A48B590AF42
    Session-ID-ctx: 
    Master-Key: 9143FF1B59A6D7DD687FA0F6419BF97227233F50A03865C757A3FE61A4D26A01CCD9CD46547475ED2B7D7CE95B2ECD77
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1713496066
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---
DONE