Namecheap.com
SSL Checker SSL & CSR Decoder CSR Generator SSL Converter

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Matches Common Name or/and SAN
Expired: No (288 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 185.17.117.32
Reverse IP lookup: No records found
Nameserver: ns.mafra.cz.
Nameserver: ns2.mafra.cz.
Nameserver: ns.mafracz.net.

General Information

Common Name: *.idnes.cz
SANs: DNS:*.idnes.czDNS:idnes.cz Total number of SANs: 2
Signature Algorithm: ecdsa-with-SHA256
Key Type: ECDSA (secp256r1)
Key size: 256 bits
Serial Number: ab84db7cddc163e00b13f2d69bb69b1e
Not Before: Jan 29, 2024 00:00:00 GMT
Not After: Feb 07, 2025 23:59:59 GMT
Number of certs: 3
Revocation Status: good
OCSP Stapling: Supported
Server: Not Provided
HSTS: max-age=15552000
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: *.idnes.cz

Decode this certificate for verbose information →
Subject Common Name *.idnes.cz
Issuer Common Name Sectigo ECC Domain Validation Secure Server CA
Issuer Organization Sectigo Limited
Not Before: Jan 29, 2024 00:00:00 GMT
Not After: Feb 07, 2025 23:59:59 GMT
Signature Algorithm: ecdsa-with-SHA256
Serial Number: ab84db7cddc163e00b13f2d69bb69b1e
SHA1 Fingerprint: 7B:47:2C:01:3E:CE:F8:98:AB:FB:70:CE:0B:44:43:17:8E:25:3E:30
MD5 Fingerprint: D4:A5:CE:E2:DF:C8:E1:3B:D9:74:E7:57:43:B1:AD:BC

Certificate # 2 - Common Name: Sectigo ECC Domain Validation Secure Server CA

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name Sectigo ECC Domain Validation Secure Server CA
Subject Organization Sectigo Limited
Issuer Common Name USERTrust ECC Certification Authority
Issuer Organization The USERTRUST Network
Not Before: Nov 02, 2018 00:00:00 GMT
Not After: Dec 31, 2030 23:59:59 GMT
Signature Algorithm: ecdsa-with-SHA384
Serial Number: f3644e6b6e0050237e0946bd7be1f51d
SHA1 Fingerprint: E8:49:90:CB:9B:F8:E3:AB:0B:CA:E8:A6:49:CB:30:FE:4D:C4:D7:67
MD5 Fingerprint: BA:35:06:26:C8:2C:E1:68:11:45:7B:0D:A6:E1:02:C8

Certificate # 3 - Common Name: USERTrust ECC Certification Authority

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name USERTrust ECC Certification Authority
Subject Organization The USERTRUST Network
Issuer Common Name AAA Certificate Services
Issuer Organization Comodo CA Limited
Not Before: Mar 12, 2019 00:00:00 GMT
Not After: Dec 31, 2028 23:59:59 GMT
Signature Algorithm: sha384WithRSAEncryption
Serial Number: 56671d04ea4f994c6f10814759d27594
SHA1 Fingerprint: CA:77:88:C3:2D:A1:E4:B7:86:3A:4F:B5:7D:00:B5:5D:DA:CB:C7:F9
MD5 Fingerprint: 42:F8:52:9F:E5:45:10:3F:DD:84:89:80:A8:64:7F:29

OpenSSL Handshake

depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust ECC Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo ECC Domain Validation Secure Server CA
verify return:1
depth=0 CN = *.idnes.cz
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: F6850A3B1186E1047D0EAA0B2CD2EECC647B7BAE
    Produced At: Apr 21 03:05:37 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: CF94DC5C304AA79485721F956E67895AC21657DD
      Issuer Key Hash: F6850A3B1186E1047D0EAA0B2CD2EECC647B7BAE
      Serial Number: AB84DB7CDDC163E00B13F2D69BB69B1E
    Cert Status: good
    This Update: Apr 21 03:05:37 2024 GMT
    Next Update: Apr 28 03:05:36 2024 GMT

    Signature Algorithm: ecdsa-with-SHA256
         30:44:02:20:38:d9:7a:f4:62:4c:e4:e0:d2:8e:24:2e:6b:36:
         12:11:ef:3f:60:0f:83:21:75:0f:f0:b1:0a:59:5b:1c:6b:7a:
         02:20:3e:24:8e:8a:b1:e3:64:12:18:56:f9:2c:54:f8:1d:13:
         77:94:6f:61:34:62:ac:54:23:94:d4:7a:9f:ea:04:39
======================================
---
Certificate chain
 0 s:CN = *.idnes.cz
   i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo ECC Domain Validation Secure Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo ECC Domain Validation Secure Server CA
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust ECC Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust ECC Certification Authority
   i:C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.idnes.cz

issuer=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo ECC Domain Validation Secure Server CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3775 bytes and written 399 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE