SSL Checker
Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.
Report
It's all good. We have not detected any issues.
Hostname: | done Matches Common Name or/and SAN |
Expired: | done No (17 days till expiration) |
Public Key: | done We were unable to find any issues in the public key of end-entity certificate |
Trusted: | done Yes, we were able to verify the certificate |
Self-Signed: | done No, the end-entity certificate is not self-signed |
Chain Issues: | done No, we were unable to detect any issues in the certificate chain sent by the server |
Weak signatures: | done No, certificates sent by the server were not signed utilizing a weak hash function |
OCSP Status: | done OCSP Responder returned "good" status for the end-entity certificate |
DNS Information
Resolves To: | 198.185.159.144 |
Reverse IP lookup: | No records found |
Nameserver: | ns-1063.awsdns-04.org. |
Nameserver: | ns-1724.awsdns-23.co.uk. |
Nameserver: | ns-3.awsdns-00.com. |
Nameserver: | ns-737.awsdns-28.net. |
General Information
Common Name: | burt.io |
SANs: | DNS:burt.io Total number of SANs: 1 |
Signature Algorithm: | sha256WithRSAEncryption |
Key Type: | RSA |
Key size: | 2048 bits |
Serial Number: | 4a4967448bf5c841f5385a066612f0b09e4 |
Not Before: | Feb 06, 2024 17:06:47 GMT |
Not After: | May 06, 2024 17:06:46 GMT |
Number of certs: | 3 |
Revocation Status: | good |
OCSP Stapling: | Supported |
Server: | Squarespace |
HSTS: | max-age=15552000 |
HPKP: | Not Supported |
Chain Information
Certificate # 1 - Common Name: burt.io
Decode this certificate for verbose information → launchSubject Common Name | burt.io |
Issuer Common Name | R3 |
Issuer Organization | Let's Encrypt |
Not Before: | Feb 06, 2024 17:06:47 GMT |
Not After: | May 06, 2024 17:06:46 GMT |
Signature Algorithm: | sha256WithRSAEncryption |
Serial Number: | 4a4967448bf5c841f5385a066612f0b09e4 |
SHA1 Fingerprint: | 8C:13:F7:2A:70:86:96:42:2C:C4:56:FF:04:4A:8F:80:54:42:AA:B0 |
MD5 Fingerprint: | 50:D1:09:F8:3E:7B:6C:3E:A9:52:FD:E2:F7:69:32:CB |
Certificate # 2 - Common Name: R3
Decode this certificate for verbose information → launchIn place? | Yes, this certificate directly certifies the preceding one |
Subject Common Name | R3 |
Subject Organization | Let's Encrypt |
Issuer Common Name | ISRG Root X1 |
Issuer Organization | Internet Security Research Group |
Not Before: | Sep 04, 2020 00:00:00 GMT |
Not After: | Sep 15, 2025 16:00:00 GMT |
Signature Algorithm: | sha256WithRSAEncryption |
Serial Number: | 912b084acf0c18a753f6d62e25a75f5a |
SHA1 Fingerprint: | A0:53:37:5B:FE:84:E8:B7:48:78:2C:7C:EE:15:82:7A:6A:F5:A4:05 |
MD5 Fingerprint: | E8:29:E6:5D:7C:43:07:D6:FB:C1:3C:17:9E:03:7A:36 |
Certificate # 3 - Common Name: ISRG Root X1
Decode this certificate for verbose information → launchIn place? | Yes, this certificate directly certifies the preceding one |
Subject Common Name | ISRG Root X1 |
Subject Organization | Internet Security Research Group |
Issuer Common Name | DST Root CA X3 |
Issuer Organization | Digital Signature Trust Co. |
Not Before: | Jan 20, 2021 19:14:03 GMT |
Not After: | Sep 30, 2024 18:14:03 GMT |
Signature Algorithm: | sha256WithRSAEncryption |
Serial Number: | 4001772137d4e942b8ee76aa3c640ab7 |
SHA1 Fingerprint: | 93:3C:6D:DE:E9:5C:9C:41:A4:0F:9F:50:49:3D:82:BE:03:AD:87:BF |
MD5 Fingerprint: | C1:E1:FF:07:F9:F6:88:49:82:74:D1:A1:80:53:EA:BF |
OpenSSL Handshake
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = R3 verify return:1 depth=0 CN = burt.io verify return:1 CONNECTED(00000003) OCSP response: ====================================== OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: C = US, O = Let's Encrypt, CN = R3 Produced At: Apr 18 17:43:00 2024 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 48DAC9A0FB2BD32D4FF0DE68D2F567B735F9B3C4 Issuer Key Hash: 142EB317B75856CBAE500940E61FAF9D8B14C2C6 Serial Number: 04A4967448BF5C841F5385A066612F0B09E4 Cert Status: good This Update: Apr 18 17:43:00 2024 GMT Next Update: Apr 25 17:42:58 2024 GMT Signature Algorithm: sha256WithRSAEncryption 61:ce:d9:de:a9:24:8f:ce:1f:af:49:c5:f0:18:fd:3c:d9:eb: 27:8f:aa:ef:05:be:c8:34:ad:0d:01:57:e1:d0:71:f5:34:cf: db:f1:c1:8f:fc:b2:e3:29:b1:36:84:df:8b:72:be:06:b4:5b: 81:9a:3d:54:09:ee:da:3e:e6:e9:93:ee:ed:82:35:66:4f:19: c9:ba:7b:90:59:5d:e1:5f:13:17:df:f3:c2:59:c8:96:9b:8f: 1f:36:8b:97:4b:e3:4f:aa:5d:53:17:d4:55:3c:ed:c7:ab:b1: 61:a6:8e:de:16:60:0e:ec:05:24:02:ff:f8:4d:66:e1:99:22: 82:2d:a9:8d:e6:78:fa:46:c7:ba:1a:c2:4d:15:45:87:3b:40: 45:0a:f0:d3:5a:f0:ca:9c:67:71:da:14:4f:59:47:80:69:59: 6b:e5:e5:1c:3a:4a:74:18:12:f2:6f:df:22:4b:f0:c8:c9:1d: 21:be:47:7c:93:ed:c7:20:ce:e7:a3:56:8b:43:30:0c:98:44: cf:78:9a:3c:d8:82:e1:86:88:90:00:3e:af:5f:02:f4:5d:3c: d2:e7:54:92:42:be:a6:29:f9:7e:0d:24:a7:bb:03:8e:b6:8f: 68:be:ad:b4:66:10:13:c3:6e:90:17:cf:36:74:af:82:96:1a: 6f:d5:80:8d ====================================== --- Certificate chain 0 s:CN = burt.io i:C = US, O = Let's Encrypt, CN = R3 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgISBKSWdEi/XIQfU4WgZmEvCwnkMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDYxNzA2NDdaFw0yNDA1MDYxNzA2NDZaMBIxEDAOBgNVBAMT B2J1cnQuaW8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoHIFCTT1I NTaVDfMwf5gx4koS+e91ynC5ODYXv97ylDib3dLGigmQg90zsHhObu/OhZT6Gvwz wnw2QoMFAv+4gAkmr/QAzmJYt7RAVcGpvx6rb35YpT0gApG6Qf+4DNO7KjJibcPE ZVwjnLAfQ3BPIYOUQb2JJFwgto0kuvAUR2JlVo8Cmb3ap+6b6HHK22WSAPLgTg46 a349vntiOxFmhH8hrcOQ/jlkLvqiNcax0ADigVqhncsK/N40+YyC7Kjr3tQjT83o WfFEwa5goKrtBJSLaII6vyX6i2cKsL01V9j3rLP/sYHCzP/Xpjma6FdvIEs8hIqj 3MVDq5XB7zGdAgMBAAGjggIIMIICBDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOY4 n9oQkdcAhI4P04gtGDGRlceFMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMBIGA1Ud EQQLMAmCB2J1cnQuaW8wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5 AgQCBIH0BIHxAO8AdQA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAA AY1/md+mAAAEAwBGMEQCIDdqO2oyHlNxu5aF3FVapKZfMXa/zL+MaPSIUOy/cO9f AiA87YhGqQc9pO4f1jox/TekRLhikbMlUO7yUcRvq0R7JAB2AHb/iD8KtvuVUcJh zPWHujS0pM27KdxoQgqf5mdMWjp0AAABjX+Z4AIAAAQDAEcwRQIgUHycQloj7o0R bDH1GA15mrxnf8i5QBCV7GjjtMDXzwECIQDQbhv929MhFqW0UfhIzmK72ls+PjJt ZajKCqHpmbNrdjANBgkqhkiG9w0BAQsFAAOCAQEAd4P8v/6koPx5HME94lh42Gb4 FdU7IAiMaARTBfqYkdcTVeLcNAToRHqvsiJE0Rhni0AQmkUHfh17oRVImGxftcuh np/pBkTpda5EIdk7NOaiKXngks4XHiLZFKlqJETl+u8kRvm/6n0SS+o5jW+kXELK ByZAE/S1rfzhQ10DXH0PY2QhLxYzg5+e5cT7GPQlmpN2nhygZmhFhD4vY4VwrH1S vgMQKWxiVt0Oxhm3v+qXPxuItlt13R5IaXUvUDcKuBNkHYu8EgwY4GgKNDI9pfKc VXozrWB9OPS1qesPSDPPFm2sfQ5mSB/Wz6k7NvqQvTgluLe8IHvRK9gnFj4qjA== -----END CERTIFICATE----- 1 s:C = US, O = Let's Encrypt, CN = R3 i:C = US, O = Internet Security Research Group, CN = ISRG Root X1 -----BEGIN CERTIFICATE----- MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG /kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4 avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2 yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+ HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX nLRbwHOoq7hHwg== -----END CERTIFICATE----- 2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1 i:O = Digital Signature Trust Co., CN = DST Root CA X3 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIQQAF3ITfU6UK47naqPGQKtzANBgkqhkiG9w0BAQsFADA/ MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT DkRTVCBSb290IENBIFgzMB4XDTIxMDEyMDE5MTQwM1oXDTI0MDkzMDE4MTQwM1ow TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQCt6CRz9BQ385ueK1coHIe+3LffOJCMbjzmV6B493XC ov71am72AE8o295ohmxEk7axY/0UEmu/H9LqMZshftEzPLpI9d1537O4/xLxIZpL wYqGcWlKZmZsj348cL+tKSIG8+TA5oCu4kuPt5l+lAOf00eXfJlII1PoOK5PCm+D LtFJV4yAdLbaL9A4jXsDcCEbdfIwPPqPrt3aY6vrFk/CjhFLfs8L6P+1dy70sntK 4EwSJQxwjQMpoOFTJOwT2e4ZvxCzSow/iaNhUd6shweU9GNx7C7ib1uYgeGJXDR5 bHbvO5BieebbpJovJsXQEOEO3tkQjhb7t/eo98flAgeYjzYIlefiN5YNNnWe+w5y sR2bvAP5SQXYgd0FtCrWQemsAXaVCg/Y39W9Eh81LygXbNKYwagJZHduRze6zqxZ Xmidf3LWicUGQSk+WT7dJvUkyRGnWqNMQB9GoZm1pzpRboY7nn1ypxIFeFntPlF4 FQsDj43QLwWyPntKHEtzBRL8xurgUBN8Q5N0s8p0544fAQjQMNRbcTa0B7rBMDBc SLeCO5imfWCKoqMpgsy6vYMEG6KDA0Gh1gXxG8K28Kh8hjtGqEgqiNx2mna/H2ql PRmP6zjzZN7IKw0KKP/32+IVQtQi0Cdd4Xn+GOdwiK1O5tmLOsbdJ1Fu/7xk9TND TwIDAQABo4IBRjCCAUIwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYw SwYIKwYBBQUHAQEEPzA9MDsGCCsGAQUFBzAChi9odHRwOi8vYXBwcy5pZGVudHJ1 c3QuY29tL3Jvb3RzL2RzdHJvb3RjYXgzLnA3YzAfBgNVHSMEGDAWgBTEp7Gkeyxx +tvhS5B1/8QVYIWJEDBUBgNVHSAETTBLMAgGBmeBDAECATA/BgsrBgEEAYLfEwEB ATAwMC4GCCsGAQUFBwIBFiJodHRwOi8vY3BzLnJvb3QteDEubGV0c2VuY3J5cHQu b3JnMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuaWRlbnRydXN0LmNvbS9E U1RST09UQ0FYM0NSTC5jcmwwHQYDVR0OBBYEFHm0WeZ7tuXkAXOACIjIGlj26Ztu MA0GCSqGSIb3DQEBCwUAA4IBAQAKcwBslm7/DlLQrt2M51oGrS+o44+/yQoDFVDC 5WxCu2+b9LRPwkSICHXM6webFGJueN7sJ7o5XPWioW5WlHAQU7G75K/QosMrAdSW 9MUgNTP52GE24HGNtLi1qoJFlcDyqSMo59ahy2cI2qBDLKobkx/J3vWraV0T9VuG WCLKTVXkcGdtwlfFRjlBz4pYg1htmf5X6DYO8A4jqv2Il9DjXA6USbW1FzXSLr9O he8Y4IWS6wY7bCkjCWDcRQJMEhg76fsO3txE+FiYruq9RUWhiF1myv4Q6W+CyBFC Dfvp7OOGAN6dEOM4+qR9sdjoSYKEBpsr6GtPAQw4dy753ec5 -----END CERTIFICATE----- --- Server certificate subject=CN = burt.io issuer=C = US, O = Let's Encrypt, CN = R3 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 4993 bytes and written 382 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- DONE --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_128_GCM_SHA256 Session-ID: 3A7351296B08A18AE55AC00D4B85E46CA90CFE98708F288E8561EF76244C8C88 Session-ID-ctx: Resumption PSK: EA9CC94AC6E237155B5FA902C3578BC975DE237AA72BA603042AC0713FDFEF40 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 604800 (seconds) TLS session ticket: 0000 - b9 e8 86 94 d7 11 58 4b-16 4d 51 50 6e b6 ba 6d ......XK.MQPn..m 0010 - bc 0e 34 84 b3 35 c1 1f-26 d4 75 49 4e ef 91 2e ..4..5..&.uIN... 0020 - 42 63 9d 43 44 0f b2 9d-47 0a 2e 6b 1e 3c a1 c2 Bc.CD...G..k.<.. 0030 - a1 3a 59 95 4a 97 95 69-e0 7b a1 68 ce 1c 34 fc .:Y.J..i.{.h..4. 0040 - 0c 1b f5 dc 8c 60 45 7f-c9 31 cd f3 64 52 47 03 .....`E..1..dRG. 0050 - 4c 52 1f 7e b5 53 91 5a-8e 11 f4 cd 5e bc 5e 8b LR.~.S.Z....^.^. 0060 - a6 f6 72 f8 26 c2 fa bd-35 ..r.&...5 Start Time: 1713488631 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no Max Early Data: 0 --- read R BLOCK