SSL Checker
Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.
Report
It's all good. We have not detected any issues.
| Hostname: | done Matches Common Name or/and SAN |
| Expired: | done No (31 days till expiration) |
| Public Key: | done We were unable to find any issues in the public key of end-entity certificate |
| Trusted: | done Yes, we were able to verify the certificate |
| Self-Signed: | done No, the end-entity certificate is not self-signed |
| Chain Issues: | done No, we were unable to detect any issues in the certificate chain sent by the server |
| Weak signatures: | done No, certificates sent by the server were not signed utilizing a weak hash function |
| OCSP Status: | done OCSP Responder returned "good" status for the end-entity certificate |
DNS Information
| Resolves To: | 58.187.8.10 |
| Reverse IP lookup: | No records found |
| Nameserver: | benedict.ns.cloudflare.com. |
| Nameserver: | sarah.ns.cloudflare.com. |
General Information
| Common Name: | *.giaoduc.net.vn |
| SANs: | DNS:*.giaoduc.net.vnDNS:giaoduc.net.vn Total number of SANs: 2 |
| Signature Algorithm: | sha256WithRSAEncryption |
| Key Type: | RSA |
| Key size: | 2048 bits |
| Serial Number: | a98bdfa4c1c67822b4d03235f1e8d23 |
| Not Before: | May 04, 2023 00:00:00 GMT |
| Not After: | May 20, 2024 23:59:59 GMT |
| Number of certs: | 2 |
| Revocation Status: | good |
| OCSP Stapling: | Not Supported |
| Server: | Universe |
| HSTS: | Not Supported |
| HPKP: | Not Supported |
Chain Information
Certificate # 1 - Common Name: *.giaoduc.net.vn
Decode this certificate for verbose information → launch| Subject Common Name | *.giaoduc.net.vn |
| Issuer Common Name | RapidSSL TLS RSA CA G1 |
| Issuer Organization | DigiCert Inc |
| Not Before: | May 04, 2023 00:00:00 GMT |
| Not After: | May 20, 2024 23:59:59 GMT |
| Signature Algorithm: | sha256WithRSAEncryption |
| Serial Number: | a98bdfa4c1c67822b4d03235f1e8d23 |
| SHA1 Fingerprint: | 22:49:5F:DF:7F:D5:7B:9F:98:C2:16:13:25:04:6E:0D:C3:B2:E9:F1 |
| MD5 Fingerprint: | EF:B8:14:43:9B:2C:C6:AE:8D:F2:A1:FD:A6:C1:C4:6F |
Certificate # 2 - Common Name: RapidSSL TLS RSA CA G1
Decode this certificate for verbose information → launch| In place? | Yes, this certificate directly certifies the preceding one |
| Subject Common Name | RapidSSL TLS RSA CA G1 |
| Subject Organization | DigiCert Inc |
| Issuer Common Name | DigiCert Global Root G2 |
| Issuer Organization | DigiCert Inc |
| Not Before: | Nov 02, 2017 12:24:33 GMT |
| Not After: | Nov 02, 2027 12:24:33 GMT |
| Signature Algorithm: | sha256WithRSAEncryption |
| Serial Number: | b259422ced9812a15a04e99528a0efa |
| SHA1 Fingerprint: | CB:FE:9E:B4:3B:3B:37:FE:0D:FB:C4:C2:EB:2D:4E:07:D0:8B:D8:E8 |
| MD5 Fingerprint: | 98:EB:0B:62:C3:FE:53:EA:C8:CA:A8:FD:B5:80:20:EE |
OpenSSL Handshake
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2 verify return:1 depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1 verify return:1 depth=0 CN = *.giaoduc.net.vn verify return:1 CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN = *.giaoduc.net.vn i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIQCpi9+kwcZ4IrTQMjXx6NIzANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx MB4XDTIzMDUwNDAwMDAwMFoXDTI0MDUyMDIzNTk1OVowGzEZMBcGA1UEAwwQKi5n aWFvZHVjLm5ldC52bjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANQG AEgwJ6OVPko3yQ+Jy7fFzPrFSdG02zP8ldgE7W0D39A8Vv/PHZY3nK2/RQu02Xmj elaP45rAATOf1ecumM96gQUkjrUHxHWDz3nsGlaAC9SHQgxmYnzGQrwnVGLBLkw5 bFPJYI/Yw+Jaa7FFmZu+aQrWOzCFWy6n/XHpRoGeNI6I/vIz3XZvf6/K2nZj9VOs k1zzUcNHu8dkyJ5PnzEQlzNh3ac7pAy1GU6VD96odC4pxiWrXlCmp/g+6zgFk63r EY2mZ7c9MEoZOvRCKDbaZrU/jRo0Cc9jafIM0z8aL2FZiK8fH3GepU2ruj99nt59 JjorsLllmXFn9udHQsUCAwEAAaOCAycwggMjMB8GA1UdIwQYMBaAFAzbbIJJD0pn CrgU7nrESFKI61Y4MB0GA1UdDgQWBBRCjzKTuAu8HyuhFSgrOtGpIlTrwzArBgNV HREEJDAighAqLmdpYW9kdWMubmV0LnZugg5naWFvZHVjLm5ldC52bjAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1UdHwQ4 MDYwNKAyoDCGLmh0dHA6Ly9jZHAucmFwaWRzc2wuY29tL1JhcGlkU1NMVExTUlNB Q0FHMS5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0 cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHYGCCsGAQUFBwEBBGowaDAmBggrBgEF BQcwAYYaaHR0cDovL3N0YXR1cy5yYXBpZHNzbC5jb20wPgYIKwYBBQUHMAKGMmh0 dHA6Ly9jYWNlcnRzLnJhcGlkc3NsLmNvbS9SYXBpZFNTTFRMU1JTQUNBRzEuY3J0 MAkGA1UdEwQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB1AHb/iD8KtvuV UcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABh+USPR8AAAQDAEYwRAIgJv8Mm89m MkiC0I1STt5rq8wd2QPeTlgRYvsbk0XBkBoCIFTsPDeECfhrLmOVFehmfgZKLyn+ YZAHyyZyMB7SK9FcAHcAc9meiRtMlnigIH1HneayxhzQUV5xGSqMa4AQesF3crUA AAGH5RI9BgAABAMASDBGAiEA1BUgs485WczPUmOIT0WNqpExdErlyxDUZfsLfLa3 MPsCIQDbgwQfPRIil6lO7eOh0GYBPCKcv/jyhjehfmchF8Ic2QB3AEiw42vapkc0 D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABh+USPO8AAAQDAEgwRgIhAJoGcdJu XRpgRiEN4dTdohJnyry4z0ZtzmLmN19FmFJQAiEAnVPVIn4Qb92SsVKasgC1wwfN yAY5Zj6YPmccPQI3jFIwDQYJKoZIhvcNAQELBQADggEBAEKI6SrQSbAva18n2Xuv yiSx6db8Qzxq8e0oV5b60o+3584N/tu8PsBe5mIfW7fW+cdp4uTcZvVNQbAN6hr5 +QXx/CuwINvGFeWxqonwTrJ/91NtMN+cC0nuvde33CWzqfml13Bzv2k3uFK4WSBS zftajfJNznzsNBcV+E6pU7bB1Jwa14gkaYzf90IYpWR6pkpK3Kb1jyEButyWrZmk 4NVtpE+0IFTApb2CQXdaNe66u9SwGLvGyNb0J7cHisT7z5hkF14Z4Ls4+YqRFN2Y JSb9KCJyY6IINiaqdFjA1ggrhZxYkNXV+uotxrc7JnI7D2WpVeGg99PxDgUeJccv G1A= -----END CERTIFICATE----- 1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1 i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2 -----BEGIN CERTIFICATE----- MIIEszCCA5ugAwIBAgIQCyWUIs7ZgSoVoE6ZUooO+jANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH MjAeFw0xNzExMDIxMjI0MzNaFw0yNzExMDIxMjI0MzNaMGAxCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xHzAdBgNVBAMTFlJhcGlkU1NMIFRMUyBSU0EgQ0EgRzEwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC/uVklRBI1FuJdUEkFCuDL/I3aJQiaZ6aibRHj ap/ap9zy1aYNrphe7YcaNwMoPsZvXDR+hNJOo9gbgOYVTPq8gXc84I75YKOHiVA4 NrJJQZ6p2sJQyqx60HkEIjzIN+1LQLfXTlpuznToOa1hyTD0yyitFyOYwURM+/CI 8FNFMpBhw22hpeAQkOOLmsqT5QZJYeik7qlvn8gfD+XdDnk3kkuuu0eG+vuyrSGr 5uX5LRhFWlv1zFQDch/EKmd163m6z/ycx/qLa9zyvILc7cQpb+k7TLra9WE17YPS n9ANjG+ECo9PDW3N9lwhKQCNvw1gGoguyCQu7HE7BnW8eSSFAgMBAAGjggFmMIIB YjAdBgNVHQ4EFgQUDNtsgkkPSmcKuBTuesRIUojrVjgwHwYDVR0jBBgwFoAUTiJU IBiV5uNu5g/6+rkS7QYXjzkwDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMDQGCCsGAQUFBwEB BCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEIGA1Ud HwQ7MDkwN6A1oDOGMWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEds b2JhbFJvb3RHMi5jcmwwYwYDVR0gBFwwWjA3BglghkgBhv1sAQEwKjAoBggrBgEF BQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzALBglghkgBhv1sAQIw CAYGZ4EMAQIBMAgGBmeBDAECAjANBgkqhkiG9w0BAQsFAAOCAQEAGUSlOb4K3Wtm SlbmE50UYBHXM0SKXPqHMzk6XQUpCheF/4qU8aOhajsyRQFDV1ih/uPIg7YHRtFi CTq4G+zb43X1T77nJgSOI9pq/TqCwtukZ7u9VLL3JAq3Wdy2moKLvvC8tVmRzkAe 0xQCkRKIjbBG80MSyDX/R4uYgj6ZiNT/Zg6GI6RofgqgpDdssLc0XIRQEotxIZcK zP3pGJ9FCbMHmMLLyuBd+uCWvVcF2ogYAawufChS/PT61D9rqzPRS5I2uqa3tmIT 44JhJgWhBnFMb7AGQkvNq9KNS9dd3GWc17H/dXa1enoxzWjE0hBdFjxPhUb0W3wi 8o34/m8Fxw== -----END CERTIFICATE----- --- Server certificate subject=CN = *.giaoduc.net.vn issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 3358 bytes and written 405 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- DONE