SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (295 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	185.129.44.23
Reverse IP lookup:	vip-ac-lbfronta-wan2.wbd.tech.
Nameserver:	ns-103-c.gandi.net.
Nameserver:	ns-210-a.gandi.net.
Nameserver:	ns-205-b.gandi.net.

General Information

Common Name:	*.allocine.net
SANs:	DNS:*.allocine.netDNS:allocine.net Total number of SANs: 2
Signature Algorithm:	sha384WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	3da78064fc1bb4a5ef05296bca17755d
Not Before:	Feb 13, 2024 00:00:00 GMT
Not After:	Feb 13, 2025 23:59:59 GMT
Number of certs:	3
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	Not Provided
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.allocine.net

Decode this certificate for verbose information →

Subject Common Name	*.allocine.net
Issuer Common Name	Gandi RSA Domain Validation Secure Server CA 3
Issuer Organization	Gandi
Not Before:	Feb 13, 2024 00:00:00 GMT
Not After:	Feb 13, 2025 23:59:59 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	3da78064fc1bb4a5ef05296bca17755d
SHA1 Fingerprint:	04:C3:84:2E:A7:3B:BE:73:A6:70:98:DD:89:01:06:3F:0D:0D:17:5B
MD5 Fingerprint:	0A:99:22:66:85:80:64:71:2F:FA:38:44:44:2C:79:F8

Certificate # 2 - Common Name: Gandi RSA Domain Validation Secure Server CA 3

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	Gandi RSA Domain Validation Secure Server CA 3
Subject Organization	Gandi
Issuer Common Name	USERTrust RSA Certification Authority
Issuer Organization	The USERTRUST Network
Not Before:	Aug 02, 2023 00:00:00 GMT
Not After:	Aug 01, 2033 23:59:59 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	e907e5ff8075224109907d6728ca0010
SHA1 Fingerprint:	A5:E9:A8:A4:2B:69:1C:08:BD:9E:E5:D6:86:DD:69:C3:71:44:98:DD
MD5 Fingerprint:	EB:10:9B:33:EC:37:12:FC:01:20:72:A6:83:6B:F3:4F

Certificate # 3 - Common Name: USERTrust RSA Certification Authority

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	USERTrust RSA Certification Authority
Subject Organization	The USERTRUST Network
Issuer Common Name	AAA Certificate Services
Issuer Organization	Comodo CA Limited
Not Before:	Mar 12, 2019 00:00:00 GMT
Not After:	Dec 31, 2028 23:59:59 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	3972443af922b751d7d36c10dd313595
SHA1 Fingerprint:	D8:9E:3B:D4:3D:5D:90:9B:47:A1:89:77:AA:9D:5C:E3:6C:EE:18:4C
MD5 Fingerprint:	28:5E:C9:09:C4:AB:0D:2D:57:F5:08:6B:22:57:99:AA

OpenSSL Handshake

depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
verify return:1
depth=0 CN = *.allocine.net
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:CN = *.allocine.net
   i:C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
-----BEGIN CERTIFICATE-----
MIIGejCCBOKgAwIBAgIQPaeAZPwbtKXvBSlryhd1XTANBgkqhkiG9w0BAQwFADBW
MQswCQYDVQQGEwJGUjEOMAwGA1UEChMFR2FuZGkxNzA1BgNVBAMTLkdhbmRpIFJT
QSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENBIDMwHhcNMjQwMjEz
MDAwMDAwWhcNMjUwMjEzMjM1OTU5WjAZMRcwFQYDVQQDDA4qLmFsbG9jaW5lLm5l
dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMvD7m15+3n+P6/3t6Oy
PYyj9UV6a9cp9UeU0MBsIN5OMPzbDlIOKLA5B7jl0m/RrM1yuj7RgH1SgSHNpf7T
8CQwFuPSVGd9ATWvOf7TH5cgyo4OGiJTfBITsDpewHGhHeitx4ja+K8X35q14wrE
cgWpcpT16DTVHTp9tVuNP3+KuBMfDcU4RDvJfAn+0SUSi+idvpCvj8OqR4atpsdc
yEYVWX6pEZt7c1kWZ2Bk829QTeyWG0G99WWEYf6v742zrekFPr9cYxpPVb7jLJS8
Fn1va1A8WrPJwpi3ToovGDiOu4D/fdavwkyAYQ0CvdeJ/WsU/UoNivdzdzruG6Cj
vH8CAwEAAaOCAv8wggL7MB8GA1UdIwQYMBaAFIERkt5mMqWwWzM9ZUOF/NQELfGu
MB0GA1UdDgQWBBSRcm6g1nQRU7nASD/E09H9LDNydTAOBgNVHQ8BAf8EBAMCBaAw
DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYD
VR0gBEIwQDA0BgsrBgEEAbIxAQICGjAlMCMGCCsGAQUFBwIBFhdodHRwczovL3Nl
Y3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYMGCCsGAQUFBwEBBHcwdTBOBggrBgEF
BQcwAoZCaHR0cDovL2NydC5zZWN0aWdvLmNvbS9HYW5kaVJTQURvbWFpblZhbGlk
YXRpb25TZWN1cmVTZXJ2ZXJDQTMuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2Nz
cC5zZWN0aWdvLmNvbTAnBgNVHREEIDAegg4qLmFsbG9jaW5lLm5ldIIMYWxsb2Np
bmUubmV0MIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwDPEVbu1S58r/OHW9lp
LpvpGnFnSrAX7KwB0lt3zsw7CAAAAY2jEm3kAAAEAwBIMEYCIQCln5zusC/PeER2
Q+xUn97iuD+eWiScdI5Jf5Tg7aByqwIhANoud0x1VlZ2tjdxy0d8F3BTrEDY5KP3
0mg78I9y0Fj1AHYAouMK5EXvva2bfjjtR2d3U9eCW4SU1yteGyzEuVCkR+cAAAGN
oxJwsQAABAMARzBFAiACKdLSBgF2kNsjpfDQicRWbpq7M1c6MqFkFxA6Idb5ewIh
AOiP31nY/HQWyghDGhoWGsip1PwbSflPKFWDc28Oq1cDAHcATnWjJ1yaEMM4W2zU
3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGNoxJucgAABAMASDBGAiEAiOAdqXJLDuNl
BiFnOEmLEThrSD7/i6Jf+hwIEUDAiSkCIQDiBgPTdX1iWMGcirYa/7oz6/VPOU3s
9/2Q6BC0AGZM9jANBgkqhkiG9w0BAQwFAAOCAYEAoivstMqIE0zeBtamvQlGdsd7
xoy/OFoM/sYEd3tYDNc31tMFu5DtvevrD8LUtHZhbkf9GMq/jSXlDroAmqx2UR1J
9CmC3i0GQIWcG83YzVvH2SSzf9pSlfKjnYV/Fax0Slu1X1SpcRhKvVqtBLbbQbOn
RTvS/yn+g+26oqXpOnMEw1qZm8LW4FGR51daWeblBVBkfUw0NCZGENYVOAujYPHu
dadzmnvdtfBjIxCELScuyQKe9bAOMsC1rs1lbdinbmlM4L9zcnQFc26gPVXmYzg9
moSz9HqEURiY++WLsy68eYHccFExPFLeSlHGAhXf1i2VozAnS8guRjGwuOdaHCj0
mVFLyFEyp1+CN0OjYZvXrzJLXpcn9SYSA5UaqAN/sN9eAks7x0mkw5O8XkPduOcF
wast7lF9U7q08rWZDdEuBH+DVfy4v2Ph1+9IZTyZkbb711M/8TN/TYUb1tzxLy+I
fsmTuJLT3W9Tc/NfdLTYV8QZdBe5v+E2nL1Awd+l
-----END CERTIFICATE-----
 1 s:C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
   i:C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIQOXJEOvkit1HX02wQ3TE1lTANBgkqhkiG9w0BAQwFADB7
MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD
VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE
AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTE5MDMxMjAwMDAwMFoXDTI4
MTIzMTIzNTk1OVowgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5
MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBO
ZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0
aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sI
s9CsVw127c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnG
vDoZtF+mvX2do2NCtnbyqTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQ
Ijy8/hPwhxR79uQfjtTkUcYRZ0YIUcuGFFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfb
IWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy29lTdyOcSOk2uTIq3XJq0
tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnHa4xgk97E
xwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNV
icQNwZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5
D9kCnusSTJV882sFqV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJ
WBp/kjbmUZIO8yZ9HE0XvMnsQybQv0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ
5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV4clXhB4PY9bpYrrWX1Uu6lzG
KAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaOB8jCB7zAfBgNVHSMEGDAWgBSg
EQojPpbxB+zirynvgqV/0DCktDAdBgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rID
ZsswDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAG
BgRVHSAAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwuY29tb2RvY2EuY29t
L0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBDAUA
A4IBAQAYh1HcdCE9nIrgJ7cz0C7M7PDmy14R3iJvm3WOnnL+5Nb+qh+cli3vA0p+
rvSNb3I8QzvAP+u431yqqcau8vzY7qN7Q/aGNnwU4M309z/+3ri0ivCRlv79Q2R+
/czSAaF9ffgZGclCKxO/WIu6pKJmBHaIkU4MiRTOok3JMrO66BQavHHxW/BBC5gA
CiIDEOUMsfnNkjcZ7Tvx5Dq2+UUTJnWvu6rvP3t3O9LEApE9GQDTF1w52z97GA1F
zZOFli9d31kWTz9RvdVFGD/tSo7oBmF0Ixa1DVBzJ0RHfxBdiSprhTEUxOipakyA
vGp4z7h/jnZymQyd/teRCBaho1+V
-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.allocine.net

issuer=C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 3

---
No client certificate CA names sent
Peer signing digest: SHA512
Peer signature type: RSA
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 5224 bytes and written 449 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 19B0BFA22CD16527FBCB18ADCCD4C938D12050C9AC959DE2211E61537BB9BE1E
    Session-ID-ctx: 
    Master-Key: 377CF450465EE303ED86A7B97F57D27CA25887DD04F14147E5B5F7D2E3B5580917EA50D2408BF03F996E261FB4AC1AAA
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1713978018
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---
DONE