SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (109 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	23.203.239.151
Reverse IP lookup:	a23-203-239-151.deploy.static.akamaitechnologies.com.
Nameserver:	a10-67.akam.net.
Nameserver:	a28-66.akam.net.
Nameserver:	a11-64.akam.net.
Nameserver:	a1-212.akam.net.
Nameserver:	a24-65.akam.net.
Nameserver:	a9-67.akam.net.

General Information

Common Name:	ap.org
SANs:	DNS:ap.orgDNS:ai.ap.orgDNS:aparchive.comDNS:aphelp.ap.orgDNS:apimages.ap.orgDNS:apimages.comDNS:applanner.comDNS:aptop25.comDNS:apvc.ap.orgDNS:apvc2.ap.orgDNS:apvideohub.ap.orgDNS:apvotecount.ap.orgDNS:apvotecount2.ap.orgDNS:backup.ap.orgDNS:bigstory.ap.orgDNS:binaryapi.ap.orgDNS:blog.ap.orgDNS:brand.ap.orgDNS:careers.ap.orgDNS:classic.apimages.comDNS:collegebasketball.ap.orgDNS:collegebasketballdev.ap.orgDNS:collegebasketballqa.ap.orgDNS:collegefootball.ap.orgDNS:customersupport.ap.orgDNS:cvpa10.ap.orgDNS:cvpa20.ap.orgDNS:digitalservices.ap.orgDNS:digitalservicesdev.ap.orgDNS:digitalservicesqa.ap.orgDNS:dne.ap.orgDNS:download.apassignments.comDNS:download.apmultimedianewsroom.comDNS:elections.ap.orgDNS:electionsdev.ap.orgDNS:electionsstage.ap.orgDNS:hosted.ap.orgDNS:hostedqa.ap.orgDNS:inside.ap.orgDNS:insights.ap.orgDNS:interactives-dev.ap.orgDNS:interactives-qa.ap.orgDNS:interactives-staging.ap.orgDNS:interactives.ap.orgDNS:interactives.aptechdevlab.comDNS:interactives.aptechlab.comDNS:interactives.associatedpress.comDNS:interactivesqa.ap.orgDNS:interactivesqa1.ap.orgDNS:leads.ap.orgDNS:login.ap.orgDNS:mail-ctc.ap.orgDNS:mail-lon.ap.orgDNS:newsroom.ap.orgDNS:openings.ap.orgDNS:poll.ap.orgDNS:polls.ap.orgDNS:preview.apvideohub.ap.orgDNS:preview.newsroom.ap.orgDNS:pro32.ap.orgDNS:pro32qa.ap.orgDNS:pronto.ap.orgDNS:racing.ap.orgDNS:roam.ap.orgDNS:securedrop.ap.orgDNS:summergames.ap.orgDNS:syndication.ap.orgDNS:videoproduction.ap.orgDNS:webfeeds.ap.orgDNS:webmail.ap.orgDNS:wfm.ap.orgDNS:wfpreview.ap.orgDNS:wintergames.ap.orgDNS:www.aparchive.comDNS:www.apexchange.comDNS:www.apimages.comDNS:www.applanner.comDNS:www.aptop25.comDNS:www.apvideous.comDNS:www.collegebasketball.ap.orgDNS:www.collegefootball.ap.orgDNS:www.elections.ap.orgDNS:www.pro32.ap.orgDNS:www.racing.ap.orgDNS:www.wintergames.ap.org Total number of SANs: 85
Organization:	The Associated Press
Locality:	New York
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	1c02b2b5ed366abecf65ccd8179236c
Not Before:	Aug 04, 2023 00:00:00 GMT
Not After:	Aug 06, 2024 23:59:59 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Supported
Server:	AkamaiGHost
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: ap.org

Decode this certificate for verbose information →

Subject Common Name	ap.org
Subject Organization	The Associated Press
Issuer Common Name	GeoTrust RSA CA 2018
Issuer Organization	DigiCert Inc
Not Before:	Aug 04, 2023 00:00:00 GMT
Not After:	Aug 06, 2024 23:59:59 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	1c02b2b5ed366abecf65ccd8179236c
SHA1 Fingerprint:	63:DA:6D:3E:60:72:4A:C6:2D:81:3A:99:4D:F2:BA:7C:33:A6:8B:5A
MD5 Fingerprint:	9D:9A:C8:AC:FA:EA:BD:44:EE:A5:37:E4:69:3C:91:D8

Certificate # 2 - Common Name: GeoTrust RSA CA 2018

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GeoTrust RSA CA 2018
Subject Organization	DigiCert Inc
Issuer Common Name	DigiCert Global Root CA
Issuer Organization	DigiCert Inc
Not Before:	Nov 06, 2017 12:23:45 GMT
Not After:	Nov 06, 2027 12:23:45 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	546fe1823f7e1941da39fce14c46173
SHA1 Fingerprint:	7C:CC:2A:87:E3:94:9F:20:57:2B:18:48:29:80:50:5F:A9:0C:AC:3B
MD5 Fingerprint:	A9:5D:7F:13:A6:4A:5E:BE:00:36:4D:8B:E6:7D:EC:ED

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018
verify return:1
depth=0 C = US, ST = New York, L = New York, O = The Associated Press, CN = ap.org
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: 9058FFB09C75A8515477B1EDF2A34316389E6CC5
    Produced At: Apr 16 07:12:15 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 777A7BA877D6F10F1CE9202196FB6B1A6E37F5ED
      Issuer Key Hash: 9058FFB09C75A8515477B1EDF2A34316389E6CC5
      Serial Number: 01C02B2B5ED366ABECF65CCD8179236C
    Cert Status: good
    This Update: Apr 16 06:57:01 2024 GMT
    Next Update: Apr 23 05:57:01 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
         9f:7f:a9:81:33:26:6f:a1:4e:b5:9a:6d:52:39:a1:47:ff:17:
         1b:3f:fd:8b:d5:0a:b1:19:f3:f7:d0:5a:7c:e1:b7:48:bc:b4:
         b5:a3:d7:7a:00:ac:47:99:77:db:8c:95:87:99:e1:90:9e:d3:
         3e:62:cb:e2:24:14:8a:6c:c3:53:84:66:2a:48:21:d4:e5:6c:
         96:eb:31:12:5d:10:5a:0a:c9:56:49:2a:c7:cc:1b:e5:c1:d9:
         72:80:73:bc:1e:ea:87:f5:a4:3a:fc:02:79:6f:89:a2:ed:f2:
         94:ba:de:c0:15:56:9f:3b:e4:03:3b:5d:8a:fb:7f:73:47:73:
         89:1e:99:7a:38:70:49:ab:f7:9d:13:5f:54:91:b0:34:60:87:
         47:f4:c6:90:15:6d:32:f9:b3:49:83:05:59:42:05:ca:1a:e4:
         54:04:45:b1:8c:56:4c:bf:e2:8d:78:ff:82:92:e8:54:e1:7a:
         93:f5:4d:d4:18:90:16:7d:73:02:80:79:eb:d0:f8:1c:ec:e0:
         d9:de:a0:0a:c0:18:b3:4e:1f:7c:75:90:c7:9d:1f:e1:71:70:
         a1:d1:c5:d9:c1:58:45:cb:80:44:f8:73:f6:93:a7:af:87:a7:
         bb:2e:65:77:c8:79:9d:af:19:67:e7:4d:cc:eb:fd:be:b4:93:
         a6:9c:6e:1a
======================================
---
Certificate chain
 0 s:C = US, ST = New York, L = New York, O = The Associated Press, CN = ap.org
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=C = US, ST = New York, L = New York, O = The Associated Press, CN = ap.org

issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 5502 bytes and written 397 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE