SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname:	Doesn't match Common Name or/and SANs
Expired:	No (100 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	165.143.151.47
Reverse IP lookup:	gis.telkom.co.za.
Nameserver:	ns1.intekom.com.
Nameserver:	ns2.intekom.com.

General Information

Common Name:	*.telkom.co.za
SANs:	DNS:*.telkom.co.zaDNS:telkom.co.za Total number of SANs: 2
Organization:	Telkom SA SOC
Locality:	Highveld
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	226e2ed3a58c18da19f7f0dadb6b543d
Not Before:	Jul 04, 2023 08:16:30 GMT
Not After:	Aug 04, 2024 08:16:29 GMT
Number of certs:	3
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	Unable to check
HSTS:	Unable to check
HPKP:	Unable to check

Chain Information

Certificate # 1 - Common Name: *.telkom.co.za

Decode this certificate for verbose information →

Subject Common Name	*.telkom.co.za
Subject Organization	Telkom SA SOC
Issuer Common Name	Entrust Certification Authority - L1K
Issuer Organization	Entrust, Inc.
Not Before:	Jul 04, 2023 08:16:30 GMT
Not After:	Aug 04, 2024 08:16:29 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	226e2ed3a58c18da19f7f0dadb6b543d
SHA1 Fingerprint:	C7:04:72:8E:E1:01:8B:16:10:86:CF:47:46:36:D1:1C:92:17:5F:E2
MD5 Fingerprint:	56:7F:FF:4C:48:04:0E:0E:CB:9C:9A:86:66:64:E2:D7

Certificate # 2 - Common Name: Entrust Certification Authority - L1K

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	Entrust Certification Authority - L1K
Subject Organization	Entrust, Inc.
Issuer Common Name	Entrust Root Certification Authority - G2
Issuer Organization	Entrust, Inc.
Not Before:	Oct 05, 2015 19:13:56 GMT
Not After:	Dec 05, 2030 19:43:56 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	ee94cc30000000051d37785
SHA1 Fingerprint:	F2:1C:12:F4:6C:DB:6B:2E:16:F0:9F:94:19:CD:FF:32:84:37:B2:D7
MD5 Fingerprint:	35:94:F5:3C:2A:77:54:47:EB:95:67:4B:FF:6C:F2:8B

Certificate # 3 - Common Name: Entrust Root Certification Authority - G2

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	Entrust Root Certification Authority - G2
Subject Organization	Entrust, Inc.
Issuer Common Name	Entrust Root Certification Authority - G2
Issuer Organization	Entrust, Inc.
Not Before:	Jul 07, 2009 17:25:54 GMT
Not After:	Dec 07, 2030 17:55:54 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	4a538c28
SHA1 Fingerprint:	8C:F4:27:FD:79:0C:3A:D1:66:06:8D:E8:1E:57:EF:BB:93:22:72:D4
MD5 Fingerprint:	4B:E2:C9:91:96:65:0C:F4:0E:5A:93:92:A0:0A:FE:B2

OpenSSL Handshake

depth=2 C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2009 Entrust, Inc. - for authorized use only", CN = Entrust Root Certification Authority - G2
verify return:1
depth=1 C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2012 Entrust, Inc. - for authorized use only", CN = Entrust Certification Authority - L1K
verify return:1
depth=0 C = ZA, ST = Gauteng, L = Highveld, O = Telkom SA SOC, CN = *.telkom.co.za
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:C = ZA, ST = Gauteng, L = Highveld, O = Telkom SA SOC, CN = *.telkom.co.za
   i:C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2012 Entrust, Inc. - for authorized use only", CN = Entrust Certification Authority - L1K
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2012 Entrust, Inc. - for authorized use only", CN = Entrust Certification Authority - L1K
   i:C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2009 Entrust, Inc. - for authorized use only", CN = Entrust Root Certification Authority - G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2009 Entrust, Inc. - for authorized use only", CN = Entrust Root Certification Authority - G2
   i:C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2009 Entrust, Inc. - for authorized use only", CN = Entrust Root Certification Authority - G2
-----BEGIN CERTIFICATE-----
MIIEPjCCAyagAwIBAgIESlOMKDANBgkqhkiG9w0BAQsFADCBvjELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50
cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3Qs
IEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEyMDAGA1UEAxMpRW50cnVz
dCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIwHhcNMDkwNzA3MTcy
NTU0WhcNMzAxMjA3MTc1NTU0WjCBvjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVu
dHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwt
dGVybXMxOTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0
aG9yaXplZCB1c2Ugb25seTEyMDAGA1UEAxMpRW50cnVzdCBSb290IENlcnRpZmlj
YXRpb24gQXV0aG9yaXR5IC0gRzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6hLZy254Ma+KZ6TABp3bqMriVQRrJ2mFOWHLP/vaCeb9zYQYKpSfYs1/T
RU4cctZOMvJyig/3gxnQaoCAAEUesMfnmr8SVycco2gvCoe9amsOXmXzHHfV1IWN
cCG0szLni6LVhjkCsbjSR87kyUnEO6fe+1R9V77w6G7CebI6C1XiUJgWMhNcL3hW
wcKUs/Ja5CeanyTXxuzQmyWC48zCxEXFjJd6BmsqEZ+pCm5IO2/b1BEZQvePB7/1
U1+cPvQXLOZprE4yTGJ36rfo5bs0vBmLrpxR57d+tVOxMyLlbc9wPBr64ptntoP0
jaWvYkxN4FisZDQSA/i2jZRjJKRxAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAP
BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqciZ60B7vfec7aVHUbI2fkBJmqzAN
BgkqhkiG9w0BAQsFAAOCAQEAeZ8dlsa2eT8ijYfThwMEYGprmi5ZiXMRrEPR9RP/
jTkrwPK9T3CMqS/qF8QLVJ7UG5aYMzyorWKiAHarWWluBh1+xLlEjZivEtRh2woZ
Rkfz6/djwUAFQKXSt/S1mja/qYh2iARVBCuch38aNzx+LaUa2NSJXsq9rD1s2G2v
1fN2D807iDginWyTmsQ9v4IbZT+mD12q/OWyFcq1rca8PdCE6OoGcrBNOTJ4vz4R
nAuknZoh8/CbCzB428Hch0P+vGOaysXCHMnHjf87ElgI5rY97HosTvuDls4MPGmH
VHOkc8KT/1EQrBVUAdj8BbGJoX90g5pJ19xOe4pIb4tF9g==
-----END CERTIFICATE-----
---
Server certificate
subject=C = ZA, ST = Gauteng, L = Highveld, O = Telkom SA SOC, CN = *.telkom.co.za

issuer=C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2012 Entrust, Inc. - for authorized use only", CN = Entrust Certification Authority - L1K

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 4638 bytes and written 453 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 05A17ED309D422264D49C254D1FC298ECA24A79BE1B413CED5B03DEC614C3B5E
    Session-ID-ctx: 
    Master-Key: 6AB57EB4700F40C87869A2A98A9735DB516217D6D259F004A5B7F1DC9DA59B8CDDC8A388466DB0F5168D19E64F3BBBD5
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1714035192
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---
DONE