SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (89 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	195.54.164.39
Reverse IP lookup:	web.ber.ccc.de.
Nameserver:	s-dns.irz42.net.
Nameserver:	ns.ber.ccc.de.
Nameserver:	ns.ham.ccc.de.
Nameserver:	ns.vie.ccc.de.

General Information

Common Name:	ccc.de
SANs:	DNS:ccc.de Total number of SANs: 1
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	ECDSA (secp384r1)
Key size:	384 bits
Serial Number:	387c6db219e5cac5ef1a736e2106829d705
Not Before:	Apr 20, 2024 03:15:07 GMT
Not After:	Jul 19, 2024 03:15:06 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	nginx/1.24.0
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: ccc.de

Decode this certificate for verbose information →

Subject Common Name	ccc.de
Issuer Common Name	R3
Issuer Organization	Let's Encrypt
Not Before:	Apr 20, 2024 03:15:07 GMT
Not After:	Jul 19, 2024 03:15:06 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	387c6db219e5cac5ef1a736e2106829d705
SHA1 Fingerprint:	65:59:4C:14:F8:50:7E:49:28:90:1C:99:04:87:80:89:F7:CA:60:AB
MD5 Fingerprint:	87:E0:04:5A:0F:18:D5:E5:AF:5C:2C:10:E5:B8:EC:DA

Certificate # 2 - Common Name: R3

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	R3
Subject Organization	Let's Encrypt
Issuer Common Name	ISRG Root X1
Issuer Organization	Internet Security Research Group
Not Before:	Sep 04, 2020 00:00:00 GMT
Not After:	Sep 15, 2025 16:00:00 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	912b084acf0c18a753f6d62e25a75f5a
SHA1 Fingerprint:	A0:53:37:5B:FE:84:E8:B7:48:78:2C:7C:EE:15:82:7A:6A:F5:A4:05
MD5 Fingerprint:	E8:29:E6:5D:7C:43:07:D6:FB:C1:3C:17:9E:03:7A:36

OpenSSL Handshake

depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = ccc.de
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:CN = ccc.de
   i:C = US, O = Let's Encrypt, CN = R3
-----BEGIN CERTIFICATE-----
MIIEKjCCAxKgAwIBAgISA4fG2yGeXKxe8ac24hBoKdcFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MjAwMzE1MDdaFw0yNDA3MTkwMzE1MDZaMBExDzANBgNVBAMT
BmNjYy5kZTB2MBAGByqGSM49AgEGBSuBBAAiA2IABCbmpzlZk7DlSyBd40NA9pvb
gor/SkeIMLY6OIo5RIZih53M6bvrRpfdRNOtRrIET7eItrEvnQQuj4HWOt0T7UDF
jjUiUkdadfh97FdbG+sU83UOQlsE0JYX2d1Z7pdX+KOCAgcwggIDMA4GA1UdDwEB
/wQEAwIHgDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUd25K8N/Kdu9iPgEwh20BOaPnqzkwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wEQYDVR0RBAowCIIGY2NjLmRlMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUASLDja9qmRzQP5WoC+p0w6xxS
ActW3SyB2bu/qznYhHMAAAGO+bcPkwAABAMARjBEAiA6j+EZ/yrbVzIxrk7Eg34b
VVa3E1Bbp6dZCsFvXsBHNQIgPfzFSq2Y/Wo/Y4Md/006cp9Z13FTXrYR3IqgrP/F
ZSUAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY75tw/MAAAE
AwBHMEUCIQCKY9okv5TamalJVya4u3SjxixglcLkrskRTA+qpO0TUgIgefvg0Ww/
pLElGAEdw3Gi/YDm9pt+vr+SHYL0pe+Jfc0wDQYJKoZIhvcNAQELBQADggEBAJU+
BY2xWGxQCof3TMVBtqOe4UhXM/4Edo5XtdBCJXM2F/BfHncJ/ZpOiNUkaVdNB7tf
zdVrYC0sxcJHcADJr8jYS2T+qqz4Pj2w6wZc7DVrBXLULbWjYFg8joSfZiFPRFB3
8o99hmR7yojjVB7cHo/xC1e8uJ193YuP6z6n1Mp26CxYdyZ5zCMONonIUX2IsWUv
5EuBVi2GMkbF8+5ESFhIMEdW6aVN72FcG32NQ0DT0Syrp1I639M6R4aZLVbzQ2Sj
EddktNLCpykU/Y9GsGpfuJsXXPhONl/jzt9p3FgEZJQ8X2Xlxvk7OsuYdSKRHAN5
poScPkwuYPrQ13RW2AA=
-----END CERTIFICATE-----
 1 s:C = US, O = Let's Encrypt, CN = R3
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = ccc.de

issuer=C = US, O = Let's Encrypt, CN = R3

---
No client certificate CA names sent
Peer signing digest: SHA384
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 2787 bytes and written 397 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 384 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE