SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (63 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	172.67.197.83
Reverse IP lookup:	No records found
Nameserver:	opal.ns.cloudflare.com.
Nameserver:	walt.ns.cloudflare.com.

General Information

Common Name:	girod.fi
SANs:	DNS:girod.fiDNS:*.girod.fi Total number of SANs: 2
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	c9724b3592de50420eb1b57005079eb2
Not Before:	May 03, 2023 08:43:17 GMT
Not After:	Aug 01, 2023 08:43:16 GMT
Number of certs:	3
Revocation Status:	good
OCSP Stapling:	Supported
Server:	cloudflare
HSTS:	max-age=63072000
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: girod.fi

Decode this certificate for verbose information →

Subject Common Name	girod.fi
Issuer Common Name	GTS CA 1P5
Issuer Organization	Google Trust Services LLC
Not Before:	May 03, 2023 08:43:17 GMT
Not After:	Aug 01, 2023 08:43:16 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	c9724b3592de50420eb1b57005079eb2
SHA1 Fingerprint:	B4:C1:F8:FB:56:4C:81:F6:22:77:23:00:89:FA:6A:4A:8A:CB:94:51
MD5 Fingerprint:	70:41:52:10:54:9C:02:DD:F4:89:A1:AF:31:D7:F5:4C

Certificate # 2 - Common Name: GTS CA 1P5

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GTS CA 1P5
Subject Organization	Google Trust Services LLC
Issuer Common Name	GTS Root R1
Issuer Organization	Google Trust Services LLC
Not Before:	Aug 13, 2020 00:00:42 GMT
Not After:	Sep 30, 2027 00:00:42 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	203bc50a32753f0918022edf1
SHA1 Fingerprint:	9C:0B:25:2A:67:8A:08:7F:BE:E4:96:A4:43:77:F7:55:6A:C6:05:E7
MD5 Fingerprint:	40:BB:51:1C:4F:B0:F5:5C:73:46:FF:54:B5:D5:8E:62

Certificate # 3 - Common Name: GTS Root R1

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GTS Root R1
Subject Organization	Google Trust Services LLC
Issuer Common Name	GlobalSign Root CA
Issuer Organization	GlobalSign nv-sa
Not Before:	Jun 19, 2020 00:00:42 GMT
Not After:	Jan 28, 2028 00:00:42 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	77bd0d6cdb36f91aea210fc4f058d30d
SHA1 Fingerprint:	08:74:54:87:E8:91:C1:9E:30:78:C1:F2:A0:7E:45:29:50:EF:36:F6
MD5 Fingerprint:	36:82:B6:C0:EB:81:95:9E:4B:44:58:DF:BB:65:D4:F7

OpenSSL Handshake

depth=3 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
verify return:1
depth=2 C = US, O = Google Trust Services LLC, CN = GTS Root R1
verify return:1
depth=1 C = US, O = Google Trust Services LLC, CN = GTS CA 1P5
verify return:1
depth=0 CN = girod.fi
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: D5FC9E0DDF1ECADD0897976E2BC55FC52BF5ECB8
    Produced At: May 28 11:54:19 2023 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: EC4A2797F8915935139678B3E8C8A21D097B312E
      Issuer Key Hash: D5FC9E0DDF1ECADD0897976E2BC55FC52BF5ECB8
      Serial Number: C9724B3592DE50420EB1B57005079EB2
    Cert Status: good
    This Update: May 28 11:54:19 2023 GMT
    Next Update: Jun  4 10:54:18 2023 GMT

    Signature Algorithm: sha256WithRSAEncryption
         3a:cd:c1:8b:ef:52:59:3a:90:e2:7c:18:b1:74:91:7d:6d:32:
         1e:69:58:c2:e6:15:8f:82:3b:7f:94:47:0c:b1:08:c2:ff:ca:
         51:ea:d2:ba:d2:f1:d1:84:72:78:8a:e8:b9:2d:e8:66:16:f8:
         6e:f3:d0:51:83:62:21:67:75:20:77:54:e2:d0:b3:12:74:85:
         a1:fe:31:5d:04:e1:c0:38:0c:af:cb:5d:e8:76:c1:c5:ea:93:
         a9:c6:b8:f7:54:fc:fe:fc:c0:4c:7a:5e:a5:95:27:21:73:e7:
         57:3a:35:fa:86:36:c9:88:3e:bc:00:83:57:31:32:59:1b:65:
         fb:5a:f1:f2:d4:6d:c1:9d:f5:d6:25:6d:10:5c:36:57:1a:4c:
         0a:c0:4d:c2:73:25:45:8b:19:ce:a9:ed:8f:62:39:77:e2:d2:
         b7:d2:38:23:46:ee:f2:47:da:bb:55:a4:cd:3a:9c:fa:20:da:
         57:3a:23:65:2b:86:99:dc:a1:94:f3:1c:de:12:f8:2c:b9:f8:
         3a:1c:7f:08:20:e8:4c:c4:75:5c:c1:e0:38:c7:81:eb:d1:4f:
         80:e8:77:7c:d7:c3:44:32:94:68:92:81:56:c2:3f:eb:5b:70:
         b3:ae:ec:2e:7e:50:66:e5:1f:1a:6a:01:59:ef:e4:0e:f6:93:
         d1:f0:f4:42
======================================
---
Certificate chain
 0 s:CN = girod.fi
   i:C = US, O = Google Trust Services LLC, CN = GTS CA 1P5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = Google Trust Services LLC, CN = GTS CA 1P5
   i:C = US, O = Google Trust Services LLC, CN = GTS Root R1
-----BEGIN CERTIFICATE-----
MIIFjDCCA3SgAwIBAgINAgO8UKMnU/CRgCLt8TANBgkqhkiG9w0BAQsFADBHMQsw
CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU
MBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjAwODEzMDAwMDQyWhcNMjcwOTMwMDAw
MDQyWjBGMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp
Y2VzIExMQzETMBEGA1UEAxMKR1RTIENBIDFQNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALOC8CSMvy2Hr7LZp676yrpE1ls+/rL3smUW3N4Q6E8tEFha
KIaHoe5qs6DZdU9/oVIBi1WoSlsGSMg2EiWrifnyI1+dYGX5XNq+OuhcbX2c0IQY
hTDNTpvsPNiz4ZbU88ULZduPsHTL9h7zePGslcXdc8MxiIGvdKpv/QzjBZXwxRBP
ZWP6oK/GGD3Fod+XedcFibMwsHSuPZIQa4wVd90LBFf7gQPd6iI01eVWsvDEjUGx
wwLbYuyA0P921IbkBBq2tgwrYnF92a/Z8V76wB7KoBlcVfCA0SoMB4aQnzXjKCtb
7yPIox2kozru/oPcgkwlsE3FUa2em9NbhMIaWukCAwEAAaOCAXYwggFyMA4GA1Ud
DwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0T
AQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU1fyeDd8eyt0Il5duK8VfxSv17LgwHwYD
VR0jBBgwFoAU5K8rJnEaK0gnhS9SZizv8IkTcT4waAYIKwYBBQUHAQEEXDBaMCYG
CCsGAQUFBzABhhpodHRwOi8vb2NzcC5wa2kuZ29vZy9ndHNyMTAwBggrBgEFBQcw
AoYkaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzcjEuZGVyMDQGA1UdHwQt
MCswKaAnoCWGI2h0dHA6Ly9jcmwucGtpLmdvb2cvZ3RzcjEvZ3RzcjEuY3JsME0G
A1UdIARGMEQwOAYKKwYBBAHWeQIFAzAqMCgGCCsGAQUFBwIBFhxodHRwczovL3Br
aS5nb29nL3JlcG9zaXRvcnkvMAgGBmeBDAECATANBgkqhkiG9w0BAQsFAAOCAgEA
bGMn7iPf5VJoTYFmkYXffWXlWzcxCCayB12avrHKAbmtv5139lEd15jFC0mhe6HX
02jlRA+LujbdQoJ30o3d9T/768gHmJPuWtC1Pd5LHC2MTex+jHv+TkD98LSzWQIQ
UVzjwCv9twZIUX4JXj8P3Kf+l+d5xQ5EiXjFaVkpoJo6SDYpppSTVS24R7XplrWf
B82mqz4yisCGg8XBQcifLzWODcAHeuGsyWW1y4qn3XHYYWU5hKwyPvd6NvFWn1ep
QW1akKfbOup1gAxjC2l0bwdMFfM3KKUZpG719iDNY7J+xCsJdYna0Twuck82GqGe
RNDNm6YjCD+XoaeeWqX3CZStXXZdKFbRGmZRUQd73j2wyO8weiQtvrizhvZL9/C1
T//Oxvn2PyonCA8JPiNax+NCLXo25D2YlmA5mOrR22Mq63gJsU4hs463zj6S8ZVc
pDnQwCvIUxX10i+CzQZ0Z5mQdzcKly3FHB700FvpFePqAgnIE9cTcGW/+4ibWiW+
dwnhp2pOEXW5Hk3xABtqZnmOw27YbaIiom0F+yzy8VDloNHYnzV9/HCrWSoC8b6w
0/H4zRK5aiWQW+OFIOb12stAHBk0IANhd7p/SA9JCynr52Fkx2PRR+sc4e6URu85
c8zuTyuN3PtYp7NlIJmVuftVb9eWbpQ99HqSjmMd320=
-----END CERTIFICATE-----
 2 s:C = US, O = Google Trust Services LLC, CN = GTS Root R1
   i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = girod.fi

issuer=C = US, O = Google Trust Services LLC, CN = GTS CA 1P5

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 5172 bytes and written 408 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE