Namecheap.com

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Matches Common Name or/and SAN
Expired: No (78 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 54.222.60.218
Reverse IP lookup: No records found
Nameserver: ns2.amzndns-cn.net.
Nameserver: ns1.amzndns-cn.biz.
Nameserver: ns1.amzndns-cn.cn.
Nameserver: ns1.amzndns-cn.com.
Nameserver: ns1.amzndns-cn.net.
Nameserver: ns2.amzndns-cn.com.
Nameserver: ns2.amzndns-cn.cn.
Nameserver: ns2.amzndns-cn.biz.

General Information

Common Name: www.amazon.cn
SANs: DNS:wap.amazon.cnDNS:m.amazon.cnDNS:www.amazon.cnDNS:mobile.amazon.cnDNS:static.amazon.cnDNS:amazon.cnDNS:origin-www.amazon.cn Total number of SANs: 7
Signature Algorithm: sha256WithRSAEncryption
Key Type: RSA
Key size: 2048 bits
Serial Number: 80df79de6bc97e011c6df13061b1d0d
Not Before: Aug 07, 2023 00:00:00 GMT
Not After: Jun 15, 2024 23:59:59 GMT
Number of certs: 3
Revocation Status: good
OCSP Stapling: Supported
Server: Server
HSTS: Not Supported
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: www.amazon.cn

Decode this certificate for verbose information →
Subject Common Name www.amazon.cn
Issuer Common Name DigiCert Global CA G2
Issuer Organization DigiCert Inc
Not Before: Aug 07, 2023 00:00:00 GMT
Not After: Jun 15, 2024 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 80df79de6bc97e011c6df13061b1d0d
SHA1 Fingerprint: E0:59:9D:50:75:BE:D2:A4:50:CE:01:57:BB:CD:95:3C:1B:AB:1D:31
MD5 Fingerprint: AD:57:12:4A:E4:B6:C6:77:2F:4F:09:46:0F:AC:16:60

Certificate # 2 - Common Name: DigiCert Global CA G2

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name DigiCert Global CA G2
Subject Organization DigiCert Inc
Issuer Common Name DigiCert Global Root G2
Issuer Organization DigiCert Inc
Not Before: Aug 01, 2013 12:00:00 GMT
Not After: Aug 01, 2028 12:00:00 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: c8ee0c90d6a89158804061ee241f9af
SHA1 Fingerprint: D6:AE:E3:16:31:F7:AB:C5:6B:9D:E8:AB:EC:CC:41:08:A6:26:B1:04
MD5 Fingerprint: 1D:9B:D3:FA:75:AE:41:A5:5E:5C:F6:A9:57:00:36:C6

Certificate # 3 - Common Name: DigiCert Global Root G2

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name DigiCert Global Root G2
Subject Organization DigiCert Inc
Issuer Common Name VeriSign Class 3 Public Primary Certification Authority - G5
Issuer Organization VeriSign, Inc.
Not Before: Apr 03, 2018 00:00:00 GMT
Not After: Apr 02, 2028 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 4b2b0115cde5c7481b3cddfede11169e
SHA1 Fingerprint: 0E:E5:2A:5E:E8:6F:B9:49:FC:FC:00:BD:26:42:D8:FE:B4:35:D8:D4
MD5 Fingerprint: 9B:D7:03:A8:20:AC:54:20:70:53:F9:DC:E9:3D:39:D0

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert Global CA G2
verify return:1
depth=0 CN = www.amazon.cn
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: 246E2B2DD06A925151256901AA9A47A689E74020
    Produced At: Mar 28 17:13:06 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: A87E303106E4E88565CFE952598FA6DA7C00532F
      Issuer Key Hash: 246E2B2DD06A925151256901AA9A47A689E74020
      Serial Number: 080DF79DE6BC97E011C6DF13061B1D0D
    Cert Status: good
    This Update: Mar 28 16:57:01 2024 GMT
    Next Update: Apr  4 15:57:01 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
         c5:c3:38:02:e9:e4:14:a5:02:a4:8b:c7:3a:6c:2a:bd:4d:4c:
         7b:eb:00:be:cb:3e:e2:ec:94:8a:f0:c0:cb:f6:c6:42:bf:e0:
         96:3f:25:ac:d9:4e:dd:31:92:0e:cf:59:ba:e2:80:07:ed:83:
         8f:9c:db:ce:b8:59:99:f6:4b:ff:e6:69:f8:da:70:d4:c8:f0:
         a8:bc:52:3a:1e:63:87:ed:b5:2b:dc:a0:d0:c8:22:69:55:4c:
         77:54:95:cc:94:f9:18:47:de:a4:25:d8:77:00:2e:94:a8:e5:
         ed:3d:12:33:fc:99:90:17:bb:4e:34:e1:ba:fb:99:8a:ce:ce:
         94:c3:c0:78:b0:a4:b0:1a:ed:b1:c3:6b:b2:0a:1d:49:7e:20:
         fb:d0:4e:cb:54:c2:4a:af:b8:2a:f3:97:68:8f:6e:96:ec:89:
         b5:2f:d9:f7:c7:c8:02:35:eb:57:b7:b3:3d:68:be:c8:4d:b5:
         34:35:d2:1a:3b:1a:3a:da:ac:21:74:f3:5a:ff:2d:e2:ea:7f:
         39:3d:6a:20:85:6c:5e:e4:37:62:12:9d:16:66:30:ff:be:2d:
         c3:c2:d6:78:49:27:65:e4:96:cf:8d:21:85:a5:c0:5b:96:95:
         96:eb:01:38:b3:f7:21:77:eb:56:d9:9c:e8:9f:46:9b:09:c6:
         6b:b8:02:3e
======================================
---
Certificate chain
 0 s:CN = www.amazon.cn
   i:C = US, O = DigiCert Inc, CN = DigiCert Global CA G2
-----BEGIN CERTIFICATE-----
MIIGlTCCBX2gAwIBAgIQCA33nea8l+ARxt8TBhsdDTANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMjMwODA3MDAwMDAwWhcNMjQwNjE1MjM1
OTU5WjAYMRYwFAYDVQQDEw13d3cuYW1hem9uLmNuMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA7i+tZtI/rfirFiq0L2zPoTY0K8KqgGStJoholwmqaho+
K2hASn6DQ9Gug4NuKZ1/louiYVD0IDcYASo+WIoOk7x+w8p3VuCWfKAXTBoUUOt3
wYxYTcm3hFXvvuxQONg954PT8kuRgeXKe2CxKC0wE+uoDXn/RM1XJ5KAVE6wuz09
up6d9Ev232g4AwtTM29KL7wbaKkT638XhP3urIiPdBtZlxiepAyABfNdMFCa27th
zkyRGjil7oeEacSmwbBHeng98jmH6KAU11W7413ZmCLS45/Run171tpxnDu+jYTC
IM67nSoOz9EpS3PBi6o9l5RgRMLlnPyUW+wdIvYBywIDAQABo4IDrTCCA6kwHwYD
VR0jBBgwFoAUJG4rLdBqklFRJWkBqppHponnQCAwHQYDVR0OBBYEFKbBXb51hUw6
SNrFRw9LKLw+z2AlMHkGA1UdEQRyMHCCDXdhcC5hbWF6b24uY26CC20uYW1hem9u
LmNugg13d3cuYW1hem9uLmNughBtb2JpbGUuYW1hem9uLmNughBzdGF0aWMuYW1h
em9uLmNugglhbWF6b24uY26CFG9yaWdpbi13d3cuYW1hem9uLmNuMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdwYDVR0fBHAw
bjA1oDOgMYYvaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFs
Q0FHMi5jcmwwNaAzoDGGL2h0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy
dEdsb2JhbENBRzIuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUH
AgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB0BggrBgEFBQcBAQRoMGYw
JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA+BggrBgEFBQcw
AoYyaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FH
Mi5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcA
7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJzVYFMAAABAMASDBG
AiEAsAbAAt9tihVOoCWMPJLALllK6008HgKYX/k9RZM0locCIQCYXJlOHftjAACL
inDyHEtTQGUvukbBjXSTm2SYaU6JWQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0s
gdm7v6s52IRzAAABic1WBXAAAAQDAEcwRQIhAN/uCJAsbCM9qGGMZp8lp+/G0esz
btd33aLaGC89ykSEAiBfHF51aX6qtzdo+tKevHIi6pIxL2xZUp71ex00Vrya3QB1
ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABic1WBRoAAAQDAEYw
RAIgeluYvO6gxw5EJ50QsZPL85oa3AhgyeRMVutxQqSzdRoCICnmsrC2QlcYWjKT
dm0zTUJgYaE4Wt5SjbGwFlXvvPboMA0GCSqGSIb3DQEBCwUAA4IBAQAE712+vN6I
Mw3/rJDaTvmnEJ9behqucvBivGNto9yAs7p9vMJ3UKfaTyslKYv6/IVQCIi0uJDH
N2249o7E0gWq0kJx7dyKL7u+TEu/TOthGqN6ekrGKsu/Fkwnk720rb51VWUkhLlw
3P6EJQSQmAACMlEVPGEsGaHkpkPWFJ4WnKTaf3e3XRUuKQ+gDVGjVH5rrzGuzSvF
oP7OlhDgIHR0J0+rfqEll2IZdJWGnA06bd1jCX1E0gkydSo5nSL8AJMHiVWPjwlA
Rm+3hEb/GAeGp58p5lZDMgDx1i4LAqNjCud/NShtLMznJrkWfkDBUQhERsLNf9PK
Y4drz03I+s8V
-----END CERTIFICATE-----
 1 s:C = US, O = DigiCert Inc, CN = DigiCert Global CA G2
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
   i:C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006 VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public Primary Certification Authority - G5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = www.amazon.cn

issuer=C = US, O = DigiCert Inc, CN = DigiCert Global CA G2

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 5083 bytes and written 413 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 61CA7B84BCBAFC731BD0C200F36A27D173C3E9DF6EE789963F921C8C26CE81C7
    Session-ID-ctx: 
    Master-Key: 443F5C166AA639F2C4CDE58425D1C98C50C9FCDB5C6E2BDD908D20BA0E7C9FE2F78E7BE4FD154ED383CDAEF4E473D3D0
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1711722556
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---
DONE