Namecheap.com

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Matches Common Name or/and SAN
Expired: No (94 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 54.222.60.218
Reverse IP lookup: No records found
Nameserver: ns1.p31.dynect.net.
Nameserver: pdns3.ultradns.org.
Nameserver: ns2.p31.dynect.net.
Nameserver: pdns4.ultradns.org.
Nameserver: ns3.p31.dynect.net.
Nameserver: pdns2.ultradns.net.
Nameserver: pdns1.ultradns.net.
Nameserver: pdns6.ultradns.co.uk.
Nameserver: pdns5.ultradns.info.
Nameserver: ns4.p31.dynect.net.

General Information

Common Name: www.amazon.cn
SANs: DNS:wap.amazon.cnDNS:m.amazon.cnDNS:www.amazon.cnDNS:mobile.amazon.cnDNS:static.amazon.cnDNS:amazon.cnDNS:origin-www.amazon.cn Total number of SANs: 7
Signature Algorithm: sha256WithRSAEncryption
Key Type: RSA
Key size: 2048 bits
Serial Number: 162f86ad5cf242e7a538a188a0ff1c1
Not Before: Apr 08, 2021 00:00:00 GMT
Not After: Mar 10, 2022 23:59:59 GMT
Number of certs: 3
Revocation Status: good
OCSP Stapling: Supported
Server: Unable to check
HSTS: Unable to check
HPKP: Unable to check

Chain Information

Certificate # 1 - Common Name: www.amazon.cn

Decode this certificate for verbose information →
Subject Common Name www.amazon.cn
Issuer Common Name DigiCert Global CA G2
Issuer Organization DigiCert Inc
Not Before: Apr 08, 2021 00:00:00 GMT
Not After: Mar 10, 2022 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 162f86ad5cf242e7a538a188a0ff1c1
SHA1 Fingerprint: AA:98:D5:8E:F9:93:80:99:10:DA:60:59:8A:4A:9B:5C:F6:27:71:11
MD5 Fingerprint: E6:52:12:32:44:D9:0C:F2:23:FD:74:B0:23:E4:10:6C

Certificate # 2 - Common Name: DigiCert Global CA G2

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name DigiCert Global CA G2
Subject Organization DigiCert Inc
Issuer Common Name DigiCert Global Root G2
Issuer Organization DigiCert Inc
Not Before: Aug 01, 2013 12:00:00 GMT
Not After: Aug 01, 2028 12:00:00 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: c8ee0c90d6a89158804061ee241f9af
SHA1 Fingerprint: D6:AE:E3:16:31:F7:AB:C5:6B:9D:E8:AB:EC:CC:41:08:A6:26:B1:04
MD5 Fingerprint: 1D:9B:D3:FA:75:AE:41:A5:5E:5C:F6:A9:57:00:36:C6

Certificate # 3 - Common Name: DigiCert Global Root G2

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name DigiCert Global Root G2
Subject Organization DigiCert Inc
Issuer Common Name VeriSign Class 3 Public Primary Certification Authority - G5
Issuer Organization VeriSign, Inc.
Not Before: Nov 06, 2017 00:00:00 GMT
Not After: Nov 05, 2022 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 63180d38fb809778a9d035a31618f840
SHA1 Fingerprint: E9:95:EF:91:26:8D:E1:5C:A2:2C:0C:74:CB:E9:2E:B6:C8:31:48:7E
MD5 Fingerprint: 0C:8C:70:33:45:A0:C5:94:0E:A8:79:86:20:14:DF:78

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert Global CA G2
verify return:1
depth=0 CN = www.amazon.cn
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: 246E2B2DD06A925151256901AA9A47A689E74020
    Produced At: Dec  5 07:36:25 2021 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: A87E303106E4E88565CFE952598FA6DA7C00532F
      Issuer Key Hash: 246E2B2DD06A925151256901AA9A47A689E74020
      Serial Number: 0162F86AD5CF242E7A538A188A0FF1C1
    Cert Status: good
    This Update: Dec  5 07:21:00 2021 GMT
    Next Update: Dec 12 06:36:00 2021 GMT

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:d4:ea:d9:ad:a6:94:c6:ea:b0:ea:84:d1:e8:4e:33:54:
         f8:f5:60:cc:9a:c5:81:0d:af:b5:76:06:77:69:54:05:3f:e1:
         3c:8b:df:7d:b8:20:15:67:74:0e:c0:da:00:02:37:c3:6b:bb:
         7f:6b:bd:6b:32:51:cd:d5:14:15:aa:e0:ea:98:c5:1e:41:73:
         8a:f1:da:2b:55:56:8b:58:f9:5d:12:f6:3a:bb:8f:60:ef:ee:
         38:d1:9d:cf:cc:86:d9:e2:5a:f1:30:29:77:03:03:66:54:6b:
         3a:31:c6:41:d1:18:e8:c1:eb:67:25:80:c7:ec:fc:f7:86:8a:
         6b:fc:62:db:df:02:8f:9a:3a:ec:b6:bb:00:a3:13:87:c3:35:
         c6:1b:6d:51:40:95:18:26:58:e7:f2:ff:89:7e:96:d9:8a:12:
         7d:dd:5f:5f:17:59:fa:a4:70:f1:3f:98:63:6c:5f:bc:d7:a7:
         7b:3b:1a:5c:22:9f:ee:ac:bd:60:68:03:aa:67:bf:1e:0a:6c:
         14:65:f6:c8:9b:87:89:8f:06:86:97:36:a0:bb:3f:15:6e:02:
         03:95:2f:31:1f:cc:4e:c8:12:8c:6d:d6:be:f4:87:1d:a7:6f:
         1f:df:b9:6b:19:03:d4:48:4c:c1:8f:4d:b9:d9:57:ab:47:5b:
         9b:6c:ed:bb
======================================
---
Certificate chain
 0 s:/CN=www.amazon.cn
   i:/C=US/O=DigiCert Inc/CN=DigiCert Global CA G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:/C=US/O=DigiCert Inc/CN=DigiCert Global CA G2
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root G2
   i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/CN=www.amazon.cn
issuer=/C=US/O=DigiCert Inc/CN=DigiCert Global CA G2
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 5109 bytes and written 329 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 2C2FAE2E5E5076344E59B1C99B8DBA241E88B8E9BB0033C6DA594447A4DF808C
    Session-ID-ctx: 
    Master-Key: DF88AC1B01F77F5DF516F91CEFF6F1120CB2134FFB424820A3312342792618A9FF125DBE831E95902FDD439D6AF63909
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1638766328
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---
DONE