SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (225 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	38.145.60.20
Reverse IP lookup:	proxy-iad01.fedoraproject.org.
Nameserver:	ns05.fedoraproject.org.
Nameserver:	ns02.fedoraproject.org.
Nameserver:	ns-iad02.fedoraproject.org.
Nameserver:	ns-iad01.fedoraproject.org.

General Information

Common Name:	*.fedoraproject.org
SANs:	DNS:*.fedoraproject.orgDNS:fedoraproject.org Total number of SANs: 2
Organization:	Red Hat, Inc.
Locality:	Raleigh
Signature Algorithm:	ecdsa-with-SHA384
Key Type:	RSA
Key size:	4096 bits
Serial Number:	cf226caddf397335cfc83d6053ee71e
Not Before:	Dec 07, 2023 00:00:00 GMT
Not After:	Nov 29, 2024 23:59:59 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Supported
Server:	Apache
HSTS:	max-age=31536000; includeSubDomains; preload
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.fedoraproject.org

Decode this certificate for verbose information →

Subject Common Name	*.fedoraproject.org
Subject Organization	Red Hat, Inc.
Issuer Common Name	DigiCert Global G3 TLS ECC SHA384 2020 CA1
Issuer Organization	DigiCert Inc
Not Before:	Dec 07, 2023 00:00:00 GMT
Not After:	Nov 29, 2024 23:59:59 GMT
Signature Algorithm:	ecdsa-with-SHA384
Serial Number:	cf226caddf397335cfc83d6053ee71e
SHA1 Fingerprint:	BB:EF:4F:CB:89:4E:FB:85:F3:16:4B:E3:C6:77:47:16:D8:8F:40:14
MD5 Fingerprint:	35:03:17:AF:68:FB:E8:81:96:26:1D:A6:2B:B6:2C:36

Certificate # 2 - Common Name: DigiCert Global G3 TLS ECC SHA384 2020 CA1

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	DigiCert Global G3 TLS ECC SHA384 2020 CA1
Subject Organization	DigiCert Inc
Issuer Common Name	DigiCert Global Root G3
Issuer Organization	DigiCert Inc
Not Before:	Apr 14, 2021 00:00:00 GMT
Not After:	Apr 13, 2031 23:59:59 GMT
Signature Algorithm:	ecdsa-with-SHA384
Serial Number:	b00e92d4d6d731fca3059c7cb1e1886
SHA1 Fingerprint:	95:77:F9:1F:E8:6C:27:D9:91:21:29:73:0E:81:66:37:3F:C2:EE:B8
MD5 Fingerprint:	BF:44:DA:68:B5:AB:CB:0A:48:C8:47:18:06:FF:97:06

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G3
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert Global G3 TLS ECC SHA384 2020 CA1
verify return:1
depth=0 C = US, ST = North Carolina, L = Raleigh, O = "Red Hat, Inc.", CN = *.fedoraproject.org
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: 8A23EB9E6BD7F9375DF96D2139769AA167DE10A8
    Produced At: Apr 18 01:06:23 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: BF9BCBEF71E2B39B8D19487ACFC75885354F8F02
      Issuer Key Hash: 8A23EB9E6BD7F9375DF96D2139769AA167DE10A8
      Serial Number: 0CF226CADDF397335CFC83D6053EE71E
    Cert Status: good
    This Update: Apr 18 00:51:02 2024 GMT
    Next Update: Apr 24 23:51:02 2024 GMT

    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:30:03:5b:8a:63:44:46:22:21:b6:ed:80:02:f9:00:
         87:0f:36:09:0f:68:17:0f:fa:ac:c5:50:4d:98:c3:40:e8:8c:
         d0:24:d1:d4:a6:d6:d8:45:e9:05:00:e0:0a:74:1d:a8:02:31:
         00:9c:bc:92:ef:fc:66:f7:ff:71:f6:e8:20:f1:8b:0a:20:31:
         3a:43:b2:82:69:17:3e:54:a2:1a:9a:45:ea:c7:81:89:87:3c:
         eb:ed:7a:0f:75:11:a6:6f:bb:68:ce:8f:4f
======================================
---
Certificate chain
 0 s:C = US, ST = North Carolina, L = Raleigh, O = "Red Hat, Inc.", CN = *.fedoraproject.org
   i:C = US, O = DigiCert Inc, CN = DigiCert Global G3 TLS ECC SHA384 2020 CA1
-----BEGIN CERTIFICATE-----
MIIHWDCCBt2gAwIBAgIQDPImyt3zlzNc/IPWBT7nHjAKBggqhkjOPQQDAzBZMQsw
CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypEaWdp
Q2VydCBHbG9iYWwgRzMgVExTIEVDQyBTSEEzODQgMjAyMCBDQTEwHhcNMjMxMjA3
MDAwMDAwWhcNMjQxMTI5MjM1OTU5WjBuMQswCQYDVQQGEwJVUzEXMBUGA1UECBMO
Tm9ydGggQ2Fyb2xpbmExEDAOBgNVBAcTB1JhbGVpZ2gxFjAUBgNVBAoTDVJlZCBI
YXQsIEluYy4xHDAaBgNVBAMMEyouZmVkb3JhcHJvamVjdC5vcmcwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDObVL5c1jf9qcBuPHbAgvLktmi3ks3HMEU
p2J/Z2W5Z+NDxrjY1X4yGAdXKCj8xZXEjkpv8V7u0cARRw8R6XGx8vvFnZgMVBD8
5/oBB5eLYDc8wI+GnjyBF//80XDxSq2H7C8HHlkFQE3E86LFbkP+DpOxLAt4LDt2
9/bNx8lVjgY1H1He2VnCZ+loAc0hEzpf5mEOJMuYxRHh4JxiMPGVmTzC3qfw12y+
QpY/VsN5OrT1yYAIzeBrWRD2IONPEN8l2ciDoDrHp24J5bREWDSiRmMm2kQiYEHC
SPt9pU6hZBhaC4jl9oHBN2BTRXV6/kQ5M07jAikoCWH/yTFSIBdBRzTX7G/9btzm
3DWTEWiWddHw9Wd/fwOknylz/qgK5u6TJIJH76xXqwJnGh0g4ulKDhV+saPCip9D
R2iJydDENA8eZu7TDSVL6yMS2/yMrqAUe5yHPOXaoAZlVpkqmUqvdoONWut/VfYt
65mGrqlNT3KZipGnKniQOs/VedxD+KRG9kEkz/S5xEfqj+EFFaPU0Vpc4pdnf59O
PlodnE0OXMvc7RPTtojPSQ1oQZyQPrI6xOqvBDcuPaWhu+wn15cIItAjpxgDrj3k
V3FBIW0Gd3jsterkHeRDwkQXBRljiQaWPpt5A3Qc6rxKHBcYHA+DEsjrMnnRZYN8
EK6vsduAuwIDAQABo4IDpTCCA6EwHwYDVR0jBBgwFoAUiiPrnmvX+Tdd+W0hOXaa
oWfeEKgwHQYDVR0OBBYEFPFRVEt4b3KqLnw//riLuKrx7psEMDEGA1UdEQQqMCiC
EyouZmVkb3JhcHJvamVjdC5vcmeCEWZlZG9yYXByb2plY3Qub3JnMD4GA1UdIAQ3
MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu
Y29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0
LmNvbS9EaWdpQ2VydEdsb2JhbEczVExTRUNDU0hBMzg0MjAyMENBMS0yLmNybDBI
oEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzNU
TFNFQ0NTSEEzODQyMDIwQ0ExLTIuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYB
BQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0
cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzNUTFNFQ0NT
SEEzODQyMDIwQ0ExLTIuY3J0MAwGA1UdEwEB/wQCMAAwggGBBgorBgEEAdZ5AgQC
BIIBcQSCAW0BawB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAAB
jEY2LVoAAAQDAEgwRgIhAO1EcwpSa55eMHKPylWOBamUgkqn1MH/nihj+cv7I2mS
AiEArTsNek9AVLSrxgJNmL6mVP6UhSjaPj0h253rcQowsnwAdwBIsONr2qZHNA/l
agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYxGNi18AAAEAwBIMEYCIQC3HoqClS6s
FjNK/UMYxSRwWdKFJ+7s6UJxRaOr62gdkgIhAMp6aFrEzwuVz0IgjN320108NjWD
+fa4+E4H5vzKc8t7AHcA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sA
AAGMRjYtfwAABAMASDBGAiEA8dJWBFWOPqYGTdY9wEinVBVOJDQDi3N0fiKgXu4O
M5wCIQDWlKlxFdZ+ukmwUhwXYKqbE/Ehxe9owMxg9+B/ihfSfTAKBggqhkjOPQQD
AwNpADBmAjEAoKlGhP6wLenlUTT+ZMsuEobB8S5Pz9zeWQAart9mX46V2m5giOhv
tNhPE7a6Pu+CAjEA6A7sm0+2snwDKP6D+HP5+BflniiRARKyPHZ76+VBeMlGxxn1
nJB1Jr7YLjBHmf2X
-----END CERTIFICATE-----
 1 s:C = US, O = DigiCert Inc, CN = DigiCert Global G3 TLS ECC SHA384 2020 CA1
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=C = US, ST = North Carolina, L = Raleigh, O = "Red Hat, Inc.", CN = *.fedoraproject.org

issuer=C = US, O = DigiCert Inc, CN = DigiCert Global G3 TLS ECC SHA384 2020 CA1

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3919 bytes and written 408 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 4096 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE