SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (171 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	186.211.255.80
Reverse IP lookup:	No records found
Nameserver:	ns4.correios.com.br.
Nameserver:	ns1.correios.com.br.
Nameserver:	ns2.correios.com.br.
Nameserver:	ns3.correios.com.br.

General Information

Common Name:	*.correios.com.br
SANs:	DNS:*.correios.com.brDNS:correios.com.br Total number of SANs: 2
Organization:	EMPRESA BRASILEIRA DE CORREIOS E TELEGRAFOS
Locality:	BRASILIA
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	2928e29729fb8857fcf194d7
Not Before:	Sep 14, 2023 11:54:40 GMT
Not After:	Oct 15, 2024 11:54:39 GMT
Number of certs:	4
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	LoadBalanceExt2
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.correios.com.br

Decode this certificate for verbose information →

Subject Common Name	*.correios.com.br
Subject Organization	EMPRESA BRASILEIRA DE CORREIOS E TELEGRAFOS
Issuer Common Name	GlobalSign RSA OV SSL CA 2018
Issuer Organization	GlobalSign nv-sa
Not Before:	Sep 14, 2023 11:54:40 GMT
Not After:	Oct 15, 2024 11:54:39 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	2928e29729fb8857fcf194d7
SHA1 Fingerprint:	18:FD:41:62:28:87:89:75:CD:75:3D:3B:0A:53:C2:C3:49:12:14:86
MD5 Fingerprint:	9D:1E:45:61:81:F6:20:CA:D0:0B:CF:A8:E9:B7:D9:D0

Certificate # 2 - Common Name: GlobalSign RSA OV SSL CA 2018

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GlobalSign RSA OV SSL CA 2018
Subject Organization	GlobalSign nv-sa
Issuer Common Name	GlobalSign
Issuer Organization	GlobalSign
Not Before:	Nov 21, 2018 00:00:00 GMT
Not After:	Nov 21, 2028 00:00:00 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	1ee5f221dfc623bd4333a8557
SHA1 Fingerprint:	DF:E8:30:23:06:2B:99:76:82:70:8B:4E:AB:8E:81:9A:FF:5D:97:75
MD5 Fingerprint:	A7:5D:8B:21:09:11:EE:17:3E:FD:25:E1:E0:0E:D6:FD

Certificate # 3 - Common Name: GlobalSign

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GlobalSign
Subject Organization	GlobalSign
Issuer Common Name	GlobalSign Root CA
Issuer Organization	GlobalSign nv-sa
Not Before:	Sep 19, 2018 00:00:00 GMT
Not After:	Jan 28, 2028 12:00:00 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	1ee5f169dff97352b6465d66a
SHA1 Fingerprint:	0B:BF:AB:97:05:95:95:E8:D1:EC:48:E8:9E:B8:65:7C:0E:5A:AE:71
MD5 Fingerprint:	58:BF:B0:EA:CF:17:E2:D0:A6:5A:4D:06:10:42:C3:BF

Certificate # 4 - Common Name: GlobalSign Root CA

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GlobalSign Root CA
Subject Organization	GlobalSign nv-sa
Issuer Common Name	GlobalSign Root CA
Issuer Organization	GlobalSign nv-sa
Not Before:	Sep 01, 1998 12:00:00 GMT
Not After:	Jan 28, 2028 12:00:00 GMT
Signature Algorithm:	sha1WithRSAEncryption
Serial Number:	40000000001154b5ac394
SHA1 Fingerprint:	B1:BC:96:8B:D4:F4:9D:62:2A:A8:9A:81:F2:15:01:52:A4:1D:82:9C
MD5 Fingerprint:	3E:45:52:15:09:51:92:E1:B7:5D:37:9F:B1:87:29:8A

OpenSSL Handshake

depth=3 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
verify return:1
depth=2 OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign RSA OV SSL CA 2018
verify return:1
depth=0 C = BR, ST = DISTRITO FEDERAL, L = BRASILIA, O = EMPRESA BRASILEIRA DE CORREIOS E TELEGRAFOS, CN = *.correios.com.br
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:C = BR, ST = DISTRITO FEDERAL, L = BRASILIA, O = EMPRESA BRASILEIRA DE CORREIOS E TELEGRAFOS, CN = *.correios.com.br
   i:C = BE, O = GlobalSign nv-sa, CN = GlobalSign RSA OV SSL CA 2018
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = BE, O = GlobalSign nv-sa, CN = GlobalSign RSA OV SSL CA 2018
   i:OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
-----BEGIN CERTIFICATE-----
MIIETjCCAzagAwIBAgINAe5fIh38YjvUMzqFVzANBgkqhkiG9w0BAQsFADBMMSAw
HgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xvYmFs
U2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0xODExMjEwMDAwMDBaFw0yODEx
MjEwMDAwMDBaMFAxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52
LXNhMSYwJAYDVQQDEx1HbG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKdaydUMGCEAI9WXD+uu3Vxoa2uP
UGATeoHLl+6OimGUSyZ59gSnKvuk2la77qCk8HuKf1UfR5NhDW5xUTolJAgvjOH3
idaSz6+zpz8w7bXfIa7+9UQX/dhj2S/TgVprX9NHsKzyqzskeU8fxy7quRU6fBhM
abO1IFkJXinDY+YuRluqlJBJDrnw9UqhCS98NE3QvADFBlV5Bs6i0BDxSEPouVq1
lVW9MdIbPYa+oewNEtssmSStR8JvA+Z6cLVwzM0nLKWMjsIYPJLJLnNvBhBWk0Cq
o8VS++XFBdZpaFwGue5RieGKDkFNm5KQConpFmvv73W+eka440eKHRwup08CAwEA
AaOCASkwggElMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0G
A1UdDgQWBBT473/yzXhnqN5vjySNiPGHAwKz6zAfBgNVHSMEGDAWgBSP8Et/qC5F
JK5NUPpjmove4t0bvDA+BggrBgEFBQcBAQQyMDAwLgYIKwYBBQUHMAGGImh0dHA6
Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9yb290cjMwNgYDVR0fBC8wLTAroCmgJ4Yl
aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9yb290LXIzLmNybDBHBgNVHSAEQDA+
MDwGBFUdIAAwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5j
b20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAJmQyC1fQorUC2bbmANz
EdSIhlIoU4r7rd/9c446ZwTbw1MUcBQJfMPg+NccmBqixD7b6QDjynCy8SIwIVbb
0615XoFYC20UgDX1b10d65pHBf9ZjQCxQNqQmJYaumxtf4z1s4DfjGRzNpZ5eWl0
6r/4ngGPoJVpjemEuunl1Ig423g7mNA2eymw0lIYkN5SQwCuaifIFJ6GlazhgDEw
fpolu4usBCOmmQDo8dIm7A9+O4orkjgTHY+GzYZSR+Y0fFukAj6KYXwidlNalFMz
hriSqHKvoflShx8xpfywgVcvzfTO3PYkz6fiNJBonf6q8amaEsybwMbDqKWwIX7e
SPY=
-----END CERTIFICATE-----
 2 s:OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
   i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 3 s:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
   i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=C = BR, ST = DISTRITO FEDERAL, L = BRASILIA, O = EMPRESA BRASILEIRA DE CORREIOS E TELEGRAFOS, CN = *.correios.com.br

issuer=C = BE, O = GlobalSign nv-sa, CN = GlobalSign RSA OV SSL CA 2018

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 5287 bytes and written 452 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 46EC69A6DB711DCBAF353BC8C23944D2CA4C8FC21DFD3BA913824C5992C994E3
    Session-ID-ctx: 
    Master-Key: CDD2CBBAF05AC42A65547673AD6FFCC1408DE78337FEDD3A265AD66668E8D4BECC5E968A3949B5A24B21646152E68937
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1714174301
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---
DONE