SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname:	Doesn't match Common Name or/and SANs
Expired:	No (35 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	We were unable to verify this certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	103.216.122.86
Reverse IP lookup:	No records found
Nameserver:	igor.ns.cloudflare.com.
Nameserver:	nicole.ns.cloudflare.com.

General Information

Common Name:	*.cliptv.vn
SANs:	DNS:*.cliptv.vnDNS:cliptv.vn Total number of SANs: 2
Organization:	MOBIFONE CORPORATION
Locality:	Ha Noi
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	4208615cac8e0222f4e01777
Not Before:	Apr 24, 2023 03:36:16 GMT
Not After:	May 25, 2024 03:36:15 GMT
Number of certs:	3
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	Not Provided
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.cliptv.vn

Decode this certificate for verbose information →

Subject Common Name	*.cliptv.vn
Subject Organization	MOBIFONE CORPORATION
Issuer Common Name	GlobalSign RSA OV SSL CA 2018
Issuer Organization	GlobalSign nv-sa
Not Before:	Apr 24, 2023 03:36:16 GMT
Not After:	May 25, 2024 03:36:15 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	4208615cac8e0222f4e01777
SHA1 Fingerprint:	B0:16:55:6E:4E:BD:95:2B:0B:D1:0A:03:88:EC:40:FE:9E:B7:94:5A
MD5 Fingerprint:	11:2F:B7:72:91:CE:E7:AA:03:A9:29:0B:E2:08:6A:45

Certificate # 2 - Common Name: GlobalSign RSA OV SSL CA 2018

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GlobalSign RSA OV SSL CA 2018
Subject Organization	GlobalSign nv-sa
Issuer Common Name	GlobalSign
Issuer Organization	GlobalSign
Not Before:	Nov 21, 2018 00:00:00 GMT
Not After:	Nov 21, 2028 00:00:00 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	1ee5f221dfc623bd4333a8557
SHA1 Fingerprint:	DF:E8:30:23:06:2B:99:76:82:70:8B:4E:AB:8E:81:9A:FF:5D:97:75
MD5 Fingerprint:	A7:5D:8B:21:09:11:EE:17:3E:FD:25:E1:E0:0E:D6:FD

Certificate # 3 - Common Name: GlobalSign

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GlobalSign
Subject Organization	GlobalSign
Issuer Common Name	GlobalSign
Issuer Organization	GlobalSign
Not Before:	Mar 18, 2009 10:00:00 GMT
Not After:	Mar 18, 2029 10:00:00 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	4000000000121585308a2
SHA1 Fingerprint:	D6:9B:56:11:48:F0:1C:77:C5:45:78:C1:09:26:DF:5B:85:69:76:AD
MD5 Fingerprint:	C5:DF:B8:49:CA:05:13:55:EE:2D:BA:1A:C3:3E:B0:28

OpenSSL Handshake

depth=2 OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
verify error:num=19:self signed certificate in certificate chain
verify return:1
depth=2 OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign RSA OV SSL CA 2018
verify return:1
depth=0 C = VN, ST = Ha Noi, L = Ha Noi, O = MOBIFONE CORPORATION, CN = *.cliptv.vn
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:C = VN, ST = Ha Noi, L = Ha Noi, O = MOBIFONE CORPORATION, CN = *.cliptv.vn
   i:C = BE, O = GlobalSign nv-sa, CN = GlobalSign RSA OV SSL CA 2018
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = BE, O = GlobalSign nv-sa, CN = GlobalSign RSA OV SSL CA 2018
   i:OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
-----BEGIN CERTIFICATE-----
MIIETjCCAzagAwIBAgINAe5fIh38YjvUMzqFVzANBgkqhkiG9w0BAQsFADBMMSAw
HgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xvYmFs
U2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0xODExMjEwMDAwMDBaFw0yODEx
MjEwMDAwMDBaMFAxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52
LXNhMSYwJAYDVQQDEx1HbG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKdaydUMGCEAI9WXD+uu3Vxoa2uP
UGATeoHLl+6OimGUSyZ59gSnKvuk2la77qCk8HuKf1UfR5NhDW5xUTolJAgvjOH3
idaSz6+zpz8w7bXfIa7+9UQX/dhj2S/TgVprX9NHsKzyqzskeU8fxy7quRU6fBhM
abO1IFkJXinDY+YuRluqlJBJDrnw9UqhCS98NE3QvADFBlV5Bs6i0BDxSEPouVq1
lVW9MdIbPYa+oewNEtssmSStR8JvA+Z6cLVwzM0nLKWMjsIYPJLJLnNvBhBWk0Cq
o8VS++XFBdZpaFwGue5RieGKDkFNm5KQConpFmvv73W+eka440eKHRwup08CAwEA
AaOCASkwggElMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0G
A1UdDgQWBBT473/yzXhnqN5vjySNiPGHAwKz6zAfBgNVHSMEGDAWgBSP8Et/qC5F
JK5NUPpjmove4t0bvDA+BggrBgEFBQcBAQQyMDAwLgYIKwYBBQUHMAGGImh0dHA6
Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9yb290cjMwNgYDVR0fBC8wLTAroCmgJ4Yl
aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9yb290LXIzLmNybDBHBgNVHSAEQDA+
MDwGBFUdIAAwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5j
b20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAJmQyC1fQorUC2bbmANz
EdSIhlIoU4r7rd/9c446ZwTbw1MUcBQJfMPg+NccmBqixD7b6QDjynCy8SIwIVbb
0615XoFYC20UgDX1b10d65pHBf9ZjQCxQNqQmJYaumxtf4z1s4DfjGRzNpZ5eWl0
6r/4ngGPoJVpjemEuunl1Ig423g7mNA2eymw0lIYkN5SQwCuaifIFJ6GlazhgDEw
fpolu4usBCOmmQDo8dIm7A9+O4orkjgTHY+GzYZSR+Y0fFukAj6KYXwidlNalFMz
hriSqHKvoflShx8xpfywgVcvzfTO3PYkz6fiNJBonf6q8amaEsybwMbDqKWwIX7e
SPY=
-----END CERTIFICATE-----
 2 s:OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
   i:OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
-----BEGIN CERTIFICATE-----
MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4G
A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNp
Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4
MTAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEG
A1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMwldpB5BngiFvXAg7aEyiie/QV2EcWtiHL8
RgJDx7KKnQRfJMsuS+FggkbhUqsMgUdwbN1k0ev1LKMPgj0MK66X17YUhhB5uzsT
gHeMCOFJ0mpiLx9e+pZo34knlTifBtc+ycsmWQ1z3rDI6SYOgxXG71uL0gRgykmm
KPZpO/bLyCiR5Z2KYVc3rHQU3HTgOu5yLy6c+9C7v/U9AOEGM+iCK65TpjoWc4zd
QQ4gOsC0p6Hpsk+QLjJg6VfLuQSSaGjlOCZgdbKfd/+RFO+uIEn8rUAVSNECMWEZ
XriX7613t2Saer9fwRPvm2L7DWzgVGkWqQPabumDk3F2xmmFghcCAwEAAaNCMEAw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFI/wS3+o
LkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQBLQNvAUKr+yAzv95ZU
RUm7lgAJQayzE4aGKAczymvmdLm6AC2upArT9fHxD4q/c2dKg8dEe3jgr25sbwMp
jjM5RcOO5LlXbKr8EpbsU8Yt5CRsuZRj+9xTaGdWPoO4zzUhw8lo/s7awlOqzJCK
6fBdRoyV3XpYKBovHd7NADdBj+1EbddTKJd+82cEHhXXipa0095MJ6RMG3NzdvQX
mcIfeg7jLQitChws/zyrVQ4PkX4268NXSb7hLi18YIvDQVETI53O9zJrlAGomecs
Mx86OyXShkDOOyyGeMlhLxS67ttVb9+E7gUJTb0o2HLO02JQZR7rkpeDMdmztcpH
WD9f
-----END CERTIFICATE-----
---
Server certificate
subject=C = VN, ST = Ha Noi, L = Ha Noi, O = MOBIFONE CORPORATION, CN = *.cliptv.vn

issuer=C = BE, O = GlobalSign nv-sa, CN = GlobalSign RSA OV SSL CA 2018

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4154 bytes and written 398 bytes
Verification error: self signed certificate in certificate chain
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 19 (self signed certificate in certificate chain)
---
DONE