Namecheap.com

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Matches Common Name or/and SAN
Expired: No (218 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 23.74.32.242
Reverse IP lookup: a23-74-32-242.deploy.static.akamaitechnologies.com.
Nameserver: a14-67.akam.net.
Nameserver: a9-66.akam.net.
Nameserver: a5-64.akam.net.
Nameserver: a1-116.akam.net.
Nameserver: a6-64.akam.net.
Nameserver: a28-66.akam.net.

General Information

Common Name: www.costco.ca
SANs: DNS:www.costco.caDNS:costco.ca Total number of SANs: 2
Organization: Costco Wholesale Corporation
Locality: Issaquah
Signature Algorithm: sha256WithRSAEncryption
Key Type: RSA
Key size: 2048 bits
Serial Number: 4ec887e649be6dc9e0b9dc4dc0428ab
Not Before: Apr 13, 2020 00:00:00 GMT
Not After: Jul 12, 2022 12:00:00 GMT
Number of certs: 2
Revocation Status: good
OCSP Stapling: Supported
Server: AkamaiGHost
HSTS: max-age=86400
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: www.costco.ca

Decode this certificate for verbose information →
Subject Common Name www.costco.ca
Subject Organization Costco Wholesale Corporation
Issuer Common Name DigiCert SHA2 Extended Validation Server CA
Issuer Organization DigiCert Inc
Not Before: Apr 13, 2020 00:00:00 GMT
Not After: Jul 12, 2022 12:00:00 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 4ec887e649be6dc9e0b9dc4dc0428ab
SHA1 Fingerprint: E7:78:B4:A9:A2:5B:48:84:60:6E:33:DC:C0:A5:09:89:E3:5B:BA:F0
MD5 Fingerprint: BC:58:AF:95:1D:91:2E:28:61:7B:32:DE:B0:96:4A:54

Certificate # 2 - Common Name: DigiCert SHA2 Extended Validation Server CA

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name DigiCert SHA2 Extended Validation Server CA
Subject Organization DigiCert Inc
Issuer Common Name DigiCert High Assurance EV Root CA
Issuer Organization DigiCert Inc
Not Before: Oct 22, 2013 12:00:00 GMT
Not After: Oct 22, 2028 12:00:00 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: c79a944b08c11952092615fe26b1d83
SHA1 Fingerprint: 7E:2F:3A:4F:8F:E8:FA:8A:57:30:AE:CA:02:96:96:63:7E:98:6F:3F
MD5 Fingerprint: 25:3E:A8:7B:F6:7D:57:24:15:24:F0:0E:45:77:68:AC

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 Extended Validation Server CA
verify return:1
depth=0 businessCategory = Private Organization, jurisdictionC = US, jurisdictionST = Washington, serialNumber = 601 024 674, C = US, ST = Washington, L = Issaquah, O = Costco Wholesale Corporation, CN = www.costco.ca
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: 3DD350A5D6A0ADEEF34A600A65D321D4F8F8D60F
    Produced At: Dec  3 13:12:45 2021 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 49F4BD8A18BF760698C5DE402D683B716AE4E686
      Issuer Key Hash: 3DD350A5D6A0ADEEF34A600A65D321D4F8F8D60F
      Serial Number: 04EC887E649BE6DC9E0B9DC4DC0428AB
    Cert Status: good
    This Update: Dec  3 12:57:01 2021 GMT
    Next Update: Dec 10 12:12:01 2021 GMT

    Signature Algorithm: sha256WithRSAEncryption
         44:1c:be:32:4e:17:87:4c:66:d2:60:bc:ab:4a:c5:d7:ef:c9:
         8a:6c:76:c1:e4:2f:51:c7:5b:5b:ed:97:2c:e0:83:71:fd:46:
         a5:62:16:ef:a0:e3:27:66:95:e4:6c:6f:d0:4c:c0:5c:3b:22:
         d7:14:62:1a:30:c8:35:34:00:23:55:25:dd:63:45:71:dc:de:
         cb:3d:1d:26:c9:9d:ad:ef:05:f4:49:dd:30:5c:bf:a6:36:6d:
         7f:ff:d0:c8:c9:b6:27:7d:85:5a:98:a8:be:4b:e3:30:1c:af:
         3e:c2:07:ec:dd:c4:7f:54:29:38:4c:02:2e:a2:14:bf:aa:93:
         d5:5d:c8:4c:f9:6d:d8:16:d2:f4:65:34:cf:37:63:ad:71:78:
         7e:08:b7:1d:f8:66:01:02:1e:d3:fc:22:b7:42:9a:d7:6a:31:
         5b:0c:24:18:d1:30:34:8b:93:fa:be:52:df:3e:c0:f0:52:73:
         ce:a8:aa:2e:e7:f4:0b:86:b9:eb:46:4b:2d:f6:4f:ba:0d:bf:
         3f:ea:36:9b:47:72:15:8c:6d:3f:ed:31:a4:43:97:c4:2e:22:
         85:88:68:f7:9c:c5:57:99:34:5e:57:cd:1f:bd:44:28:e5:45:
         f0:52:fb:69:77:c6:ac:82:54:e1:f1:96:cb:c7:4b:67:07:49:
         41:72:77:39
======================================
---
Certificate chain
 0 s:/businessCategory=Private Organization/jurisdictionC=US/jurisdictionST=Washington/serialNumber=601 024 674/C=US/ST=Washington/L=Issaquah/O=Costco Wholesale Corporation/CN=www.costco.ca
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Extended Validation Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Extended Validation Server CA
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV Root CA
-----BEGIN CERTIFICATE-----
MIIEtjCCA56gAwIBAgIQDHmpRLCMEZUgkmFf4msdgzANBgkqhkiG9w0BAQsFADBs
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
ZSBFViBSb290IENBMB4XDTEzMTAyMjEyMDAwMFoXDTI4MTAyMjEyMDAwMFowdTEL
MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3
LmRpZ2ljZXJ0LmNvbTE0MDIGA1UEAxMrRGlnaUNlcnQgU0hBMiBFeHRlbmRlZCBW
YWxpZGF0aW9uIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANdTpARR+JmmFkhLZyeqk0nQOe0MsLAAh/FnKIaFjI5j2ryxQDji0/XspQUY
uD0+xZkXMuwYjPrxDKZkIYXLBxA0sFKIKx9om9KxjxKws9LniB8f7zh3VFNfgHk/
LhqqqB5LKw2rt2O5Nbd9FLxZS99RStKh4gzikIKHaq7q12TWmFXo/a8aUGxUvBHy
/Urynbt/DvTVvo4WiRJV2MBxNO723C3sxIclho3YIeSwTQyJ3DkmF93215SF2AQh
cJ1vb/9cuhnhRctWVyh+HA1BV6q3uCe7seT6Ku8hI3UarS2bhjWMnHe1c63YlC3k
8wyd7sFOYn4XwHGeLN7x+RAoGTMCAwEAAaOCAUkwggFFMBIGA1UdEwEB/wQIMAYB
Af8CAQAwDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp
Z2ljZXJ0LmNvbTBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2Vy
dC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlRVZSb290Q0EuY3JsMD0GA1UdIAQ2
MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j
b20vQ1BTMB0GA1UdDgQWBBQ901Cl1qCt7vNKYApl0yHU+PjWDzAfBgNVHSMEGDAW
gBSxPsNpA/i/RwHUmCYaCALvY2QrwzANBgkqhkiG9w0BAQsFAAOCAQEAnbbQkIbh
hgLtxaDwNBx0wY12zIYKqPBKikLWP8ipTa18CK3mtlC4ohpNiAexKSHc59rGPCHg
4xFJcKx6HQGkyhE6V6t9VypAdP3THYUYUN9XR3WhfVUgLkc3UHKMf4Ib0mKPLQNa
2sPIoc4sUqIAY+tzunHISScjl2SFnjgOrWNoPLpSgVh5oywM395t6zHyuqB8bPEs
1OG9d4Q3A84ytciagRpKkk47RpqF/oOi+Z6Mo8wNXrM9zwR4jxQUezKcxwCmXMS1
oVWNWlZopCJwqjyBcdmdqEU79OX2olHdx3ti6G8MdOu42vi/hw15UJGQmxg7kVkn
8TUoE6smftX3eg==
-----END CERTIFICATE-----
---
Server certificate
subject=/businessCategory=Private Organization/jurisdictionC=US/jurisdictionST=Washington/serialNumber=601 024 674/C=US/ST=Washington/L=Issaquah/O=Costco Wholesale Corporation/CN=www.costco.ca
issuer=/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Extended Validation Server CA
---
No client certificate CA names sent
Peer signing digest: SHA256
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 4249 bytes and written 329 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 1ACB30F6FE20874D3302EE9E422D77EACEFE3CF8BA04F39931D6C80145924765
    Session-ID-ctx: 
    Master-Key: 6D13E01AE3F0C34372028D807426EECB7FB47FB952AEA612919595C1568B63A04EDE6D5A889762E7E03EFA0D72FCA4A3
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 83100 (seconds)
    TLS session ticket:
    0000 - 00 00 3b 32 5b 5d 18 32-30 cf 19 a1 3f ac 6b 9c   ..;2[].20...?.k.
    0010 - 6d a5 9f c5 bf 7f b2 23-74 4b 3b 72 13 0b ba 80   m......#tK;r....
    0020 - 6e c8 68 22 15 61 f4 a6-e8 82 f7 28 91 50 5e 36   n.h".a.....(.P^6
    0030 - 2f 1c 33 2f 79 b3 71 a6-f9 8e c4 2d cf e1 b5 65   /.3/y.q....-...e
    0040 - 07 ed 09 b2 0d 39 07 c6-bc 8a ba 4a 79 41 74 00   .....9.....JyAt.
    0050 - 62 59 85 1d b3 1c 22 e4-19 c8 5a 4c 40 f3 f0 ba   bY...."...ZL@...
    0060 - b8 77 e2 33 c9 44 c7 41-5f 70 3c aa 37 bf a1 7a   .w.3.D.A_p<.7..z
    0070 - 1e 91 dd 3a dc 02 82 1c-05 ee 6c 74 dc f4 aa 0a   ...:......lt....
    0080 - ae ce 47 b8 90 20 13 5a-c8 68 dc 5c c5 b2 7b cc   ..G.. .Z.h.\..{.
    0090 - 5d 9e 2f 86 e1 87 07 bb-44 28 6f 15 98 de 8a 6c   ]./.....D(o....l
    00a0 - 51 b4 01 5b a3 cb 90 93-84 56 76 58 fc bb 61 6b   Q..[.....VvX..ak

    Start Time: 1638768845
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---
DONE