SSL Checker
Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.
Report
It's all good. We have not detected any issues.
Hostname: | done Matches Common Name or/and SAN |
Expired: | done No (50 days till expiration) |
Public Key: | done We were unable to find any issues in the public key of end-entity certificate |
Trusted: | done Yes, we were able to verify the certificate |
Self-Signed: | done No, the end-entity certificate is not self-signed |
Chain Issues: | done No, we were unable to detect any issues in the certificate chain sent by the server |
Weak signatures: | done No, certificates sent by the server were not signed utilizing a weak hash function |
OCSP Status: | done OCSP Responder returned "good" status for the end-entity certificate |
DNS Information
Resolves To: | 31.207.83.242 |
Reverse IP lookup: | srv.dinossi.com. |
Nameserver: | ns2.dinossi.com. |
Nameserver: | ns1.dinossi.com. |
General Information
Common Name: | *.dinossi.com |
SANs: | DNS:*.dinossi.comDNS:dinossi.com Total number of SANs: 2 |
Signature Algorithm: | sha256WithRSAEncryption |
Key Type: | RSA |
Key size: | 2048 bits |
Serial Number: | 3d051dc4cf57c469718c39b334d3dcd249f |
Not Before: | Jul 29, 2024 08:53:13 GMT |
Not After: | Oct 27, 2024 08:53:12 GMT |
Number of certs: | 2 |
Revocation Status: | good |
OCSP Stapling: | Supported |
Server: | Not Provided |
HSTS: | Not Supported |
HPKP: | Not Supported |
Chain Information
Certificate # 1 - Common Name: *.dinossi.com
Decode this certificate for verbose information → launchSubject Common Name | *.dinossi.com |
Issuer Common Name | R11 |
Issuer Organization | Let's Encrypt |
Not Before: | Jul 29, 2024 08:53:13 GMT |
Not After: | Oct 27, 2024 08:53:12 GMT |
Signature Algorithm: | sha256WithRSAEncryption |
Serial Number: | 3d051dc4cf57c469718c39b334d3dcd249f |
SHA1 Fingerprint: | A8:38:F4:D3:24:48:38:F1:1A:07:CB:03:BF:9D:5C:8F:A9:46:CF:4D |
MD5 Fingerprint: | DF:8D:76:FE:37:A1:58:16:B1:B9:FF:A4:02:DB:9D:C5 |
Certificate # 2 - Common Name: R11
Decode this certificate for verbose information → launchIn place? | Yes, this certificate directly certifies the preceding one |
Subject Common Name | R11 |
Subject Organization | Let's Encrypt |
Issuer Common Name | ISRG Root X1 |
Issuer Organization | Internet Security Research Group |
Not Before: | Mar 13, 2024 00:00:00 GMT |
Not After: | Mar 12, 2027 23:59:59 GMT |
Signature Algorithm: | sha256WithRSAEncryption |
Serial Number: | 8a7d3e13d62f30ef2386bd29076b34f8 |
SHA1 Fingerprint: | 69:6D:B3:AF:0D:FF:C1:7E:65:C6:A2:0D:92:5C:5A:7B:D2:4D:EC:7E |
MD5 Fingerprint: | 2F:AC:04:55:31:47:F4:6A:49:DF:9B:4E:BE:A6:DF:43 |
OpenSSL Handshake
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = R11 verify return:1 depth=0 CN = *.dinossi.com verify return:1 CONNECTED(00000003) OCSP response: ====================================== OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: C = US, O = Let's Encrypt, CN = R11 Produced At: Sep 5 05:02:00 2024 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 1A52B9B459E4C33398217E866D4BBD8A3BD667CE Issuer Key Hash: 08B9113BA5D08518B4EA0FA0AD9F861E8EFC3827 Serial Number: 03D051DC4CF57C469718C39B334D3DCD249F Cert Status: good This Update: Sep 5 05:02:00 2024 GMT Next Update: Sep 12 05:01:58 2024 GMT Signature Algorithm: sha256WithRSAEncryption b1:4a:bd:74:cb:19:e4:7c:77:b5:d5:9f:c9:84:2b:df:09:22: 02:7a:b2:ba:73:62:0f:e3:65:2d:f3:ee:ed:04:1f:f2:cc:68: ca:b5:6c:55:cc:be:f4:0b:b8:54:37:3e:70:e2:dd:5b:70:b4: 9a:3c:03:6e:21:52:b6:eb:ad:52:7b:42:4b:8e:a0:8c:fe:05: 2d:07:62:13:93:4a:9c:9d:06:b3:80:2b:bf:72:7c:9e:f9:bd: 9a:07:30:bc:7a:4f:d2:25:7d:c7:ee:d8:b2:8a:33:47:1a:32: 68:a3:df:76:50:00:13:21:47:72:ef:09:38:96:b2:3a:b6:3e: 66:2e:d3:61:5e:07:72:9b:ec:08:89:a4:01:d7:1b:32:23:b3: 49:bb:31:1e:e6:81:4b:0a:55:a1:fd:0d:36:5d:01:f4:0c:b0: f7:9e:e7:34:26:5b:6f:3d:79:7f:d1:3b:e6:69:38:84:6f:13: 9b:aa:ef:1a:ee:66:de:7a:1b:31:b5:c6:d0:79:11:39:6c:93: 61:a7:bc:ae:20:e8:65:43:0b:72:34:0e:3c:ad:be:09:90:3f: 4d:08:d8:21:05:88:ec:bb:8f:e5:de:64:2e:1e:29:e2:4e:d4: 39:28:1a:17:8b:45:fe:eb:49:93:1f:75:76:8d:17:cc:43:ea: 59:88:f6:1e ====================================== --- Certificate chain 0 s:CN = *.dinossi.com i:C = US, O = Let's Encrypt, CN = R11 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISA9BR3Ez1fEaXGMObM009zSSfMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTEwHhcNMjQwNzI5MDg1MzEzWhcNMjQxMDI3MDg1MzEyWjAYMRYwFAYDVQQD DA0qLmRpbm9zc2kuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA xMFCdjKdrK3UQ6AzNi942FBgEgrYtlYpER4TStEqaR12f/yFmO6kTj9ynlgM5+W0 0pUxATJXfNiWZA8PqveLRg+20bqpdtqJpc2w0qR6BUwy75VUJuUMZ6m0FjMFEOB3 UYI0ZsMVRLrc7J5Qf3iqKsEmFKuGdlsl+6C/VR3wT37IOSSLAMX/UMEYKgZvmXi/ G12tlexdrbxmfSm91N6W/7UAmqEtZ3jqdWA4+B/60EC1UEO/1yytMLad2bmRxtd7 shpE5kVvcU7O5EP18L+F3g/soHuH/dBqgAT+7H3EP8EBEspOkCpEpood9mXIpyl3 cUJCy2UIO+W9Xl0N8k8l3QIDAQABo4ICHjCCAhowDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBR3jUzQj8M5kjiRUg1ntG4jCPwftTAfBgNVHSMEGDAWgBTFz0ak6vTDwHps lcQtsF6SLybjuTBXBggrBgEFBQcBAQRLMEkwIgYIKwYBBQUHMAGGFmh0dHA6Ly9y MTEuby5sZW5jci5vcmcwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTEuaS5sZW5jci5v cmcvMCUGA1UdEQQeMByCDSouZGlub3NzaS5jb22CC2Rpbm9zc2kuY29tMBMGA1Ud IAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAPxdLT9ci R1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGQ/eiJhgAABAMARzBFAiEAtvQh 2gMVLuhNdfuqrwxjk6/uYPwV1tmwqnOb8Snu1iwCIFCYmVjlzr5bVGNfMRJR0D// ohKKZy2J9JfDIlj00u86AHYAGZgQcQnw1lIuMIDSnj9ku4NuKMz5D1KO7t/OSj8W tMoAAAGQ/eiJlwAABAMARzBFAiEA98yXRnGuc6jFq94PPNIb3MGeG0z+Y5vqYlCQ VIaOx8gCIClGMzNEGiSXA9nySndsA+XIp7eij6Z4TVOpOXMNU56FMA0GCSqGSIb3 DQEBCwUAA4IBAQCzNdhHzSzEBxlv7v1upY/eXPvvFcOe6jLvF2iwdWrdCXe4gSaR 3G4LQx5s7ubjmQ+8zmhO1okGEwp2tcQWgcXcwnV5fkO+hhDWp54xBlqUBa2p9TFD Id6/2BGxGH4JxkE8FFL1/1kFSobW5++SIS+wbdqYXKGPLWXNnYzYL8LZh+bUUUzZ p3Xyt5HlaHZ2luwxe3Bl0Y+KahWVWfHA9Ut0LXeDpyAYuU1rRB6UPltX/QlJfHdz iVnK7R1jMqeibj7hKHj+nmqxeAjASxg/QJrJ+tL9CANRjTrUVEwih1ASUob9De8D EROITHDnx3FPLtSYlLXx41IpWr6CS4BCsGJl -----END CERTIFICATE----- 1 s:C = US, O = Let's Encrypt, CN = R11 i:C = US, O = Internet Security Research Group, CN = ISRG Root X1 -----BEGIN CERTIFICATE----- MIIFBjCCAu6gAwIBAgIRAIp9PhPWLzDvI4a9KQdrNPgwDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjQwMzEzMDAwMDAw WhcNMjcwMzEyMjM1OTU5WjAzMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg RW5jcnlwdDEMMAoGA1UEAxMDUjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAuoe8XBsAOcvKCs3UZxD5ATylTqVhyybKUvsVAbe5KPUoHu0nsyQYOWcJ DAjs4DqwO3cOvfPlOVRBDE6uQdaZdN5R2+97/1i9qLcT9t4x1fJyyXJqC4N0lZxG AGQUmfOx2SLZzaiSqhwmej/+71gFewiVgdtxD4774zEJuwm+UE1fj5F2PVqdnoPy 6cRms+EGZkNIGIBloDcYmpuEMpexsr3E+BUAnSeI++JjF5ZsmydnS8TbKF5pwnnw SVzgJFDhxLyhBax7QG0AtMJBP6dYuC/FXJuluwme8f7rsIU5/agK70XEeOtlKsLP Xzze41xNG/cLJyuqC0J3U095ah2H2QIDAQABo4H4MIH1MA4GA1UdDwEB/wQEAwIB hjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwEgYDVR0TAQH/BAgwBgEB /wIBADAdBgNVHQ4EFgQUxc9GpOr0w8B6bJXELbBeki8m47kwHwYDVR0jBBgwFoAU ebRZ5nu25eQBc4AIiMgaWPbpm24wMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAC hhZodHRwOi8veDEuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcG A1UdHwQgMB4wHKAaoBiGFmh0dHA6Ly94MS5jLmxlbmNyLm9yZy8wDQYJKoZIhvcN AQELBQADggIBAE7iiV0KAxyQOND1H/lxXPjDj7I3iHpvsCUf7b632IYGjukJhM1y v4Hz/MrPU0jtvfZpQtSlET41yBOykh0FX+ou1Nj4ScOt9ZmWnO8m2OG0JAtIIE38 01S0qcYhyOE2G/93ZCkXufBL713qzXnQv5C/viOykNpKqUgxdKlEC+Hi9i2DcaR1 e9KUwQUZRhy5j/PEdEglKg3l9dtD4tuTm7kZtB8v32oOjzHTYw+7KdzdZiw/sBtn UfhBPORNuay4pJxmY/WrhSMdzFO2q3Gu3MUBcdo27goYKjL9CTF8j/Zz55yctUoV aneCWs/ajUX+HypkBTA+c8LGDLnWO2NKq0YD/pnARkAnYGPfUDoHR9gVSp/qRx+Z WghiDLZsMwhN1zjtSC0uBWiugF3vTNzYIEFfaPG7Ws3jDrAMMYebQ95JQ+HIBD/R PBuHRTBpqKlyDnkSHDHYPiNX3adPoPAcgdF3H2/W0rmoswMWgTlLn1Wu0mrks7/q pdWfS6PJ1jty80r2VKsM/Dj3YIDfbjXKdaFU5C+8bhfJGqU3taKauuz0wHVGT3eo 6FlWkWYtbt4pgdamlwVeZEW+LM7qZEJEsMNPrfC03APKmZsJgpWCDWOKZvkZcvjV uYkQ4omYCTX5ohy+knMjdOmdH9c7SpqEWBDC86fiNex+O0XOMEZSa8DA -----END CERTIFICATE----- --- Server certificate subject=CN = *.dinossi.com issuer=C = US, O = Let's Encrypt, CN = R11 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 3572 bytes and written 402 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- DONE