SSL Checker
Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.
Report
It's all good. We have not detected any issues.
| Hostname: | done Matches Common Name or/and SAN |
| Expired: | done No (337 days till expiration) |
| Public Key: | done We were unable to find any issues in the public key of end-entity certificate |
| Trusted: | done Yes, we were able to verify the certificate |
| Self-Signed: | done No, the end-entity certificate is not self-signed |
| Chain Issues: | done No, we were unable to detect any issues in the certificate chain sent by the server |
| Weak signatures: | done No, certificates sent by the server were not signed utilizing a weak hash function |
| OCSP Status: | done OCSP Responder returned "good" status for the end-entity certificate |
DNS Information
| Resolves To: | 91.195.240.12 |
| Reverse IP lookup: | No records found |
| Nameserver: | ns1.dnsowl.com. |
| Nameserver: | ns2.dnsowl.com. |
| Nameserver: | ns3.dnsowl.com. |
General Information
| Common Name: | easydocumentshop.com |
| SANs: | DNS:easydocumentshop.com Total number of SANs: 1 |
| Signature Algorithm: | sha256WithRSAEncryption |
| Key Type: | RSA |
| Key size: | 2048 bits |
| Serial Number: | ce9006a2ccf7b39412bf241a5a77a3b |
| Not Before: | Mar 28, 2024 00:00:00 GMT |
| Not After: | Mar 27, 2025 23:59:59 GMT |
| Number of certs: | 2 |
| Revocation Status: | good |
| OCSP Stapling: | Not Supported |
| Server: | NginX |
| HSTS: | Not Supported |
| HPKP: | Not Supported |
Chain Information
Certificate # 1 - Common Name: easydocumentshop.com
Decode this certificate for verbose information → launch| Subject Common Name | easydocumentshop.com |
| Issuer Common Name | Encryption Everywhere DV TLS CA - G2 |
| Issuer Organization | DigiCert Inc |
| Not Before: | Mar 28, 2024 00:00:00 GMT |
| Not After: | Mar 27, 2025 23:59:59 GMT |
| Signature Algorithm: | sha256WithRSAEncryption |
| Serial Number: | ce9006a2ccf7b39412bf241a5a77a3b |
| SHA1 Fingerprint: | 47:C5:C3:B0:2E:0A:91:23:61:5D:AF:03:70:67:0C:D2:87:8F:19:A3 |
| MD5 Fingerprint: | 5E:30:C9:70:2C:82:C6:9C:8C:0C:0F:B4:4B:9C:B7:F8 |
Certificate # 2 - Common Name: Encryption Everywhere DV TLS CA - G2
Decode this certificate for verbose information → launch| In place? | Yes, this certificate directly certifies the preceding one |
| Subject Common Name | Encryption Everywhere DV TLS CA - G2 |
| Subject Organization | DigiCert Inc |
| Issuer Common Name | DigiCert Global Root G2 |
| Issuer Organization | DigiCert Inc |
| Not Before: | Nov 27, 2017 12:46:40 GMT |
| Not After: | Nov 27, 2027 12:46:40 GMT |
| Signature Algorithm: | sha256WithRSAEncryption |
| Serial Number: | de0ffb5ee62cb61109f608c9ced5ed3 |
| SHA1 Fingerprint: | ED:63:02:68:4A:32:59:AA:04:F1:0F:E9:A9:7A:8F:D3:0B:96:5D:26 |
| MD5 Fingerprint: | 2C:29:E3:A3:30:F9:38:A1:36:B0:DB:03:F0:63:2F:A6 |
OpenSSL Handshake
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Encryption Everywhere DV TLS CA - G2
verify return:1
depth=0 CN = easydocumentshop.com
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
0 s:CN = easydocumentshop.com
i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Encryption Everywhere DV TLS CA - G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Encryption Everywhere DV TLS CA - G2
i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
---
Server certificate
subject=CN = easydocumentshop.com
issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Encryption Everywhere DV TLS CA - G2
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3283 bytes and written 395 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
Protocol : TLSv1.3
Cipher : TLS_AES_128_GCM_SHA256
Session-ID: A9802EBFBE1AF1C89496A5044586AFD852F32C10633E0D065E41BD2A4DBF9E24
Session-ID-ctx:
Resumption PSK: C8E6100289D986EB630864DEB1097F4F164A29451B751A0250C07CCA5CC8161C
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 604800 (seconds)
TLS session ticket:
0000 - a8 38 96 17 24 39 d1 07-e5 19 24 41 fc ad 21 0e .8..$9....$A..!.
0010 - 5e cf 93 34 16 62 8c ee-87 de ec 05 54 10 19 6f ^..4.b......T..o
0020 - e1 61 e0 04 1a 6b 6d 9a-53 93 b9 0c 38 3a 55 1f .a...km.S...8:U.
0030 - d1 a9 0b 18 2f 73 8e 3b-28 b7 8c 84 26 31 65 9c ..../s.;(...&1e.
0040 - 8c 5e 71 35 0d 95 8a 95-d3 ad d5 b4 99 4b c7 0e .^q5.........K..
0050 - f5 05 66 c7 b1 c4 58 c8-26 e2 79 8d 7e 78 19 5e ..f...X.&.y.~x.^
0060 - d7 65 7c 9c c9 5c f1 68-e0 2c d7 8b 54 a1 62 ad .e|..\.h.,..T.b.
0070 - e9 .
Start Time: 1713938397
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
Max Early Data: 0
---
read R BLOCK