Namecheap.com

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Matches Common Name or/and SAN
Expired: No (233 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 23.59.200.37
Reverse IP lookup: a23-59-200-37.deploy.static.akamaitechnologies.com.
Nameserver: a9-66.akam.net.
Nameserver: a6-64.akam.net.
Nameserver: a14-67.akam.net.
Nameserver: a28-66.akam.net.
Nameserver: a5-64.akam.net.
Nameserver: a1-116.akam.net.

General Information

Common Name: costco.ca
SANs: DNS:costco.caDNS:www.costco.ca Total number of SANs: 2
Organization: Costco Wholesale CORPORATION
Locality: Issaquah
Signature Algorithm: sha256WithRSAEncryption
Key Type: ECDSA (secp256r1)
Key size: 256 bits
Serial Number: 1605bddfa9b27760a9e08865bfb78fd
Not Before: Dec 28, 2023 00:00:00 GMT
Not After: Dec 27, 2024 23:59:59 GMT
Number of certs: 2
Revocation Status: good
OCSP Stapling: Supported
Server: AkamaiGHost
HSTS: max-age=86400
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: costco.ca

Decode this certificate for verbose information →
Subject Common Name costco.ca
Subject Organization Costco Wholesale CORPORATION
Issuer Common Name DigiCert SHA2 Extended Validation Server CA
Issuer Organization DigiCert Inc
Not Before: Dec 28, 2023 00:00:00 GMT
Not After: Dec 27, 2024 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 1605bddfa9b27760a9e08865bfb78fd
SHA1 Fingerprint: 91:D3:77:B0:13:08:71:9E:4F:39:D1:A4:7B:E0:61:15:92:9E:D3:B9
MD5 Fingerprint: 1C:21:4B:B5:1A:6E:C3:DC:48:50:23:E8:6B:C0:68:3D

Certificate # 2 - Common Name: DigiCert SHA2 Extended Validation Server CA

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name DigiCert SHA2 Extended Validation Server CA
Subject Organization DigiCert Inc
Issuer Common Name DigiCert High Assurance EV Root CA
Issuer Organization DigiCert Inc
Not Before: Oct 22, 2013 12:00:00 GMT
Not After: Oct 22, 2028 12:00:00 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: c79a944b08c11952092615fe26b1d83
SHA1 Fingerprint: 7E:2F:3A:4F:8F:E8:FA:8A:57:30:AE:CA:02:96:96:63:7E:98:6F:3F
MD5 Fingerprint: 25:3E:A8:7B:F6:7D:57:24:15:24:F0:0E:45:77:68:AC

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 Extended Validation Server CA
verify return:1
depth=0 jurisdictionC = US, jurisdictionST = Washington, businessCategory = Private Organization, serialNumber = 601 024 674, C = US, ST = Washington, L = Issaquah, O = Costco Wholesale CORPORATION, CN = costco.ca
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: 3DD350A5D6A0ADEEF34A600A65D321D4F8F8D60F
    Produced At: May  6 06:36:17 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 49F4BD8A18BF760698C5DE402D683B716AE4E686
      Issuer Key Hash: 3DD350A5D6A0ADEEF34A600A65D321D4F8F8D60F
      Serial Number: 01605BDDFA9B27760A9E08865BFB78FD
    Cert Status: good
    This Update: May  6 06:21:02 2024 GMT
    Next Update: May 13 05:21:02 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
         8c:6b:d5:26:28:52:2b:d4:3c:fd:35:66:55:db:e5:cd:cb:80:
         33:62:2f:fa:29:b3:c9:6a:61:0b:e2:3f:8b:bc:62:1b:80:d6:
         7d:73:3e:3f:46:bc:40:a9:68:50:f7:16:99:de:b8:f4:1f:f4:
         c8:97:23:bc:09:4d:66:f0:cc:1d:bb:52:82:33:d7:ff:ca:03:
         af:f9:e0:48:85:d8:3c:ab:41:61:58:28:eb:b0:39:d4:59:ca:
         22:64:71:15:93:77:93:66:3b:a2:e8:a7:43:ec:1c:08:a1:80:
         c0:1e:ca:d4:2d:12:31:35:ee:80:4f:92:6b:09:3c:1f:48:d7:
         4c:8e:2e:64:e2:35:98:67:4b:85:04:d7:a4:5a:64:d0:dc:81:
         78:9b:de:9c:20:62:b3:fe:f6:17:21:de:21:24:cf:01:c2:05:
         3f:69:10:88:32:16:39:54:df:19:20:7f:b0:21:b8:be:20:26:
         28:1c:dd:38:cd:6d:a8:fe:31:f0:29:6d:7a:fb:1c:db:eb:06:
         75:fd:cd:44:2a:d2:fe:8e:a7:e9:6c:7b:43:ae:45:ff:e8:2e:
         25:f8:86:c1:21:d6:b3:97:70:0d:8f:94:4d:2d:f8:b2:22:c0:
         4e:c1:88:af:a8:fd:41:52:0c:9b:99:8e:ce:4a:3c:a6:f8:46:
         0a:f3:53:65
======================================
---
Certificate chain
 0 s:jurisdictionC = US, jurisdictionST = Washington, businessCategory = Private Organization, serialNumber = 601 024 674, C = US, ST = Washington, L = Issaquah, O = Costco Wholesale CORPORATION, CN = costco.ca
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 Extended Validation Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 Extended Validation Server CA
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA
-----BEGIN CERTIFICATE-----
MIIEtjCCA56gAwIBAgIQDHmpRLCMEZUgkmFf4msdgzANBgkqhkiG9w0BAQsFADBs
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
ZSBFViBSb290IENBMB4XDTEzMTAyMjEyMDAwMFoXDTI4MTAyMjEyMDAwMFowdTEL
MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3
LmRpZ2ljZXJ0LmNvbTE0MDIGA1UEAxMrRGlnaUNlcnQgU0hBMiBFeHRlbmRlZCBW
YWxpZGF0aW9uIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANdTpARR+JmmFkhLZyeqk0nQOe0MsLAAh/FnKIaFjI5j2ryxQDji0/XspQUY
uD0+xZkXMuwYjPrxDKZkIYXLBxA0sFKIKx9om9KxjxKws9LniB8f7zh3VFNfgHk/
LhqqqB5LKw2rt2O5Nbd9FLxZS99RStKh4gzikIKHaq7q12TWmFXo/a8aUGxUvBHy
/Urynbt/DvTVvo4WiRJV2MBxNO723C3sxIclho3YIeSwTQyJ3DkmF93215SF2AQh
cJ1vb/9cuhnhRctWVyh+HA1BV6q3uCe7seT6Ku8hI3UarS2bhjWMnHe1c63YlC3k
8wyd7sFOYn4XwHGeLN7x+RAoGTMCAwEAAaOCAUkwggFFMBIGA1UdEwEB/wQIMAYB
Af8CAQAwDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp
Z2ljZXJ0LmNvbTBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2Vy
dC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlRVZSb290Q0EuY3JsMD0GA1UdIAQ2
MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j
b20vQ1BTMB0GA1UdDgQWBBQ901Cl1qCt7vNKYApl0yHU+PjWDzAfBgNVHSMEGDAW
gBSxPsNpA/i/RwHUmCYaCALvY2QrwzANBgkqhkiG9w0BAQsFAAOCAQEAnbbQkIbh
hgLtxaDwNBx0wY12zIYKqPBKikLWP8ipTa18CK3mtlC4ohpNiAexKSHc59rGPCHg
4xFJcKx6HQGkyhE6V6t9VypAdP3THYUYUN9XR3WhfVUgLkc3UHKMf4Ib0mKPLQNa
2sPIoc4sUqIAY+tzunHISScjl2SFnjgOrWNoPLpSgVh5oywM395t6zHyuqB8bPEs
1OG9d4Q3A84ytciagRpKkk47RpqF/oOi+Z6Mo8wNXrM9zwR4jxQUezKcxwCmXMS1
oVWNWlZopCJwqjyBcdmdqEU79OX2olHdx3ti6G8MdOu42vi/hw15UJGQmxg7kVkn
8TUoE6smftX3eg==
-----END CERTIFICATE-----
---
Server certificate
subject=jurisdictionC = US, jurisdictionST = Washington, businessCategory = Private Organization, serialNumber = 601 024 674, C = US, ST = Washington, L = Issaquah, O = Costco Wholesale CORPORATION, CN = costco.ca

issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 Extended Validation Server CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3749 bytes and written 400 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: 07E514F56A86F064DC6C07BCDE0B0B601F9BB32EBCB8501745B04B2DDC42A9B3
    Session-ID-ctx: 
    Resumption PSK: 231448408CEF31453A892F8CFC66AAD017054F41DD9CAC55ECB6C19F01D74EC956C816482959A27EA05166BADABF1748
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 83100 (seconds)
    TLS session ticket:
    0000 - 00 00 2d 44 13 b0 97 12-f3 84 f8 dd 62 ad 47 9e   ..-D........b.G.
    0010 - 45 23 f2 61 c5 e7 22 c5-11 30 22 53 80 05 26 9e   E#.a.."..0"S..&.
    0020 - b6 45 59 36 61 2d b9 ac-a4 40 dc d1 13 fc d9 c4   .EY6a-...@......
    0030 - 8c 2e bc 2b d5 ff f7 24-ff 5c c7 db c2 0c 89 77   ...+...$.\.....w
    0040 - 40 27 2c 1c 57 96 03 51-83 b1 51 01 cc 43 3a c7   @',.W..Q..Q..C:.
    0050 - 93 cb 12 3d 01 96 0a 57-a9 35 4b 3d b0 77 46 a1   ...=...W.5K=.wF.
    0060 - f2 18 30 10 90 f5 e2 45-e1 35 77 d4 fd 26 03 6d   ..0....E.5w..&.m
    0070 - a4 6c 41 dc 76 e5 45 9f-cd 8e 26 7e 44 59 ab 6c   .lA.v.E...&~DY.l
    0080 - da ae d9 62 65 af ff 0f-0e 4d 5c a0 0d e4 42 d8   ...be....M\...B.
    0090 - be ff 0c 7d 2f 6a ed f6-21 83 42 57 fe fa f1 10   ...}/j..!.BW....
    00a0 - cb 72 ea d5 cb b1 45 5e-d4 ee 08 30 ce 2d 4f 99   .r....E^...0.-O.
    00b0 - b1 67 75 be 40 b0 0a 70-fa 61 b9 1f 08 e3 8b a9   .gu.@..p.a......
    00c0 - 27 c8 e5 9c b1 19 bd 4b-e9 4d 0d bf f8 cf b0 02   '......K.M......
    00d0 - 95 36 ce cc 9f de c0 06-ac da 55 9f 00 af 4b b4   .6........U...K.

    Start Time: 1715132460
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: E6E2547557174253803AE6E9EEA62B30ADAE8B5A34467D5EE14603AC6E618061
    Session-ID-ctx: 
    Resumption PSK: 74D47E36B85805F55BA917CC1DBA142EBE7A34E0D32FCC6444F38E9A73146E02E6ADF00197312C2A71B8419B6D7574DF
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 83100 (seconds)
    TLS session ticket:
    0000 - 00 00 2d 44 13 b0 97 12-f3 84 f8 dd 62 ad 47 9e   ..-D........b.G.
    0010 - 36 e5 af e9 42 f6 ce 97-61 15 33 d9 4e f4 84 22   6...B...a.3.N.."
    0020 - d3 eb 31 3c 72 52 7c b5-eb 4e dc 31 12 d8 a2 5a   ..1<rR|..N.1...Z
    0030 - a9 b1 5d ee fb ee 9b 49-2e 1e d7 f2 da 63 41 db   ..]....I.....cA.
    0040 - 08 c3 dd b0 f6 2c d3 96-e3 38 11 ac 0a 71 e4 37   .....,...8...q.7
    0050 - 33 b5 b7 5b 97 f2 5b 66-5f 81 22 17 98 6d 1e f3   3..[..[f_."..m..
    0060 - c6 bc 0e 26 06 a0 ad 9e-0b 93 08 02 18 75 7d 86   ...&.........u}.
    0070 - 97 89 5b f9 d2 f4 c6 b5-9f 2e 37 3d eb ae 15 96   ..[.......7=....
    0080 - 02 22 b4 93 f3 58 fd 75-f8 99 79 be 5f fc 31 b7   ."...X.u..y._.1.
    0090 - 1f 35 bf c1 3d 8d b0 79-f8 3b 26 9d 56 b0 53 39   .5..=..y.;&.V.S9
    00a0 - 81 1e 3b 7d 2a b0 b0 5d-50 c6 b4 d6 6e 3d 57 8c   ..;}*..]P...n=W.
    00b0 - b8 9e d0 b2 73 c6 6e f8-03 7b de 26 21 68 d3 7d   ....s.n..{.&!h.}
    00c0 - 48 86 5f 34 2d 6b 3c 63-b3 56 28 31 b9 96 57 58   H._4-k<c.V(1..WX
    00d0 - df e8 35 f9 97 ec c0 e9-5a 16 61 75 bd c4 73 cc   ..5.....Z.au..s.

    Start Time: 1715132460
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK