SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (45 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	173.230.132.238
Reverse IP lookup:	haproxyfe1-production.atl.linode.georiot.com.
Nameserver:	ns2.geniuslink.com.
Nameserver:	ns3.geniuslink.com.
Nameserver:	ns4.geniuslink.com.
Nameserver:	ns5.geniuslink.com.
Nameserver:	ns6.geniuslink.com.
Nameserver:	ns1.geniuslink.com.

General Information

Common Name:	georiot.co
SANs:	DNS:georiot.co Total number of SANs: 1
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	ECDSA (secp256r1)
Key size:	256 bits
Serial Number:	455462cacf370626a5a52cadc5c2924a6c4
Not Before:	Mar 02, 2024 22:00:50 GMT
Not After:	May 31, 2024 22:00:49 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	nginx
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: georiot.co

Decode this certificate for verbose information →

Subject Common Name	georiot.co
Issuer Common Name	R3
Issuer Organization	Let's Encrypt
Not Before:	Mar 02, 2024 22:00:50 GMT
Not After:	May 31, 2024 22:00:49 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	455462cacf370626a5a52cadc5c2924a6c4
SHA1 Fingerprint:	B1:44:6A:D5:64:6B:B9:0F:20:DB:6C:02:E9:3E:66:31:87:42:E6:3D
MD5 Fingerprint:	AC:73:FF:CF:D4:37:D2:0D:0D:FB:68:81:E6:07:DB:82

Certificate # 2 - Common Name: R3

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	R3
Subject Organization	Let's Encrypt
Issuer Common Name	ISRG Root X1
Issuer Organization	Internet Security Research Group
Not Before:	Sep 04, 2020 00:00:00 GMT
Not After:	Sep 15, 2025 16:00:00 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	912b084acf0c18a753f6d62e25a75f5a
SHA1 Fingerprint:	A0:53:37:5B:FE:84:E8:B7:48:78:2C:7C:EE:15:82:7A:6A:F5:A4:05
MD5 Fingerprint:	E8:29:E6:5D:7C:43:07:D6:FB:C1:3C:17:9E:03:7A:36

OpenSSL Handshake

depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = georiot.co
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:CN = georiot.co
   i:C = US, O = Let's Encrypt, CN = R3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = Let's Encrypt, CN = R3
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
-----BEGIN CERTIFICATE-----
MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw
TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw
WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg
RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP
R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx
sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm
NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg
Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG
/kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC
AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB
Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA
FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw
AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw
Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB
gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W
PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl
ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz
CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm
lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4
avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2
yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O
yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids
hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+
HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv
MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX
nLRbwHOoq7hHwg==
-----END CERTIFICATE-----
---
Server certificate
subject=CN = georiot.co

issuer=C = US, O = Let's Encrypt, CN = R3

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 2733 bytes and written 401 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE