SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (7 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	157.240.22.35
Reverse IP lookup:	edge-star-mini-shv-01-sjc3.facebook.com.
Nameserver:	a.ns.facebook.com.
Nameserver:	b.ns.facebook.com.
Nameserver:	c.ns.facebook.com.
Nameserver:	d.ns.facebook.com.

General Information

Common Name:	fbcdn.net
SANs:	DNS:fbcdn.netDNS:fbsbx.comDNS:www.fbcdn.net Total number of SANs: 3
Organization:	Meta Platforms, Inc.
Locality:	Menlo Park
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	db17f6d7cf6da065c4e6aded695dc7c
Not Before:	Feb 02, 2024 00:00:00 GMT
Not After:	May 02, 2024 23:59:59 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	Not Provided
HSTS:	max-age=31536000; preload; includeSubDomains
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: fbcdn.net

Decode this certificate for verbose information →

Subject Common Name	fbcdn.net
Subject Organization	Meta Platforms, Inc.
Issuer Common Name	DigiCert SHA2 High Assurance Server CA
Issuer Organization	DigiCert Inc
Not Before:	Feb 02, 2024 00:00:00 GMT
Not After:	May 02, 2024 23:59:59 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	db17f6d7cf6da065c4e6aded695dc7c
SHA1 Fingerprint:	96:4C:29:7C:66:E9:45:8C:58:4F:02:2E:18:0C:DF:22:79:6E:43:36
MD5 Fingerprint:	C9:A8:E1:E8:3A:13:B6:4C:11:D3:3C:EA:45:94:38:28

Certificate # 2 - Common Name: DigiCert SHA2 High Assurance Server CA

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	DigiCert SHA2 High Assurance Server CA
Subject Organization	DigiCert Inc
Issuer Common Name	DigiCert High Assurance EV Root CA
Issuer Organization	DigiCert Inc
Not Before:	Oct 22, 2013 12:00:00 GMT
Not After:	Oct 22, 2028 12:00:00 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	4e1e7a4dc5cf2f36dc02b42b85d159f
SHA1 Fingerprint:	A0:31:C4:67:82:E6:E6:C6:62:C2:C8:7C:76:DA:9A:A6:2C:CA:BD:8E
MD5 Fingerprint:	AA:EE:5C:F8:B0:D8:59:6D:2E:0C:BE:67:42:1C:F7:DB

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 High Assurance Server CA
verify return:1
depth=0 C = US, ST = California, L = Menlo Park, O = "Meta Platforms, Inc.", CN = fbcdn.net
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:C = US, ST = California, L = Menlo Park, O = "Meta Platforms, Inc.", CN = fbcdn.net
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 High Assurance Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 High Assurance Server CA
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=C = US, ST = California, L = Menlo Park, O = "Meta Platforms, Inc.", CN = fbcdn.net

issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 High Assurance Server CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3482 bytes and written 384 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_CHACHA20_POLY1305_SHA256
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE