SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (266 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	54.148.158.128
Reverse IP lookup:	ec2-54-148-158-128.us-west-2.compute.amazonaws.com.
Nameserver:	ns-1448.awsdns-53.org.
Nameserver:	ns-1557.awsdns-02.co.uk.
Nameserver:	ns-333.awsdns-41.com.
Nameserver:	ns-700.awsdns-23.net.

General Information

Common Name:	*.ivcbrasil.org.br
SANs:	DNS:*.ivcbrasil.org.brDNS:ivcbrasil.org.br Total number of SANs: 2
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	4096 bits
Serial Number:	f05cf6c1512303d230f9cc40614379b8
Not Before:	Dec 12, 2023 00:00:00 GMT
Not After:	Jan 11, 2025 23:59:59 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Supported
Server:	Microsoft-IIS/10.0
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.ivcbrasil.org.br

Decode this certificate for verbose information →

Subject Common Name	*.ivcbrasil.org.br
Issuer Common Name	Sectigo RSA Domain Validation Secure Server CA
Issuer Organization	Sectigo Limited
Not Before:	Dec 12, 2023 00:00:00 GMT
Not After:	Jan 11, 2025 23:59:59 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	f05cf6c1512303d230f9cc40614379b8
SHA1 Fingerprint:	89:0B:A4:1D:FA:0B:A6:4F:D3:0B:71:9C:55:B5:43:E1:90:83:FE:E4
MD5 Fingerprint:	11:C6:BC:D8:BB:5D:7E:8C:93:64:F1:C6:19:61:6D:2B

Certificate # 2 - Common Name: Sectigo RSA Domain Validation Secure Server CA

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	Sectigo RSA Domain Validation Secure Server CA
Subject Organization	Sectigo Limited
Issuer Common Name	USERTrust RSA Certification Authority
Issuer Organization	The USERTRUST Network
Not Before:	Nov 02, 2018 00:00:00 GMT
Not After:	Dec 31, 2030 23:59:59 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	7d5b5126b476ba11db74160bbc530da7
SHA1 Fingerprint:	33:E4:E8:08:07:20:4C:2B:61:82:A3:A1:4B:59:1A:CD:25:B5:F0:DB
MD5 Fingerprint:	AD:AB:5C:4D:F0:31:FB:92:99:F7:1A:DA:7E:18:F6:13

OpenSSL Handshake

depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
verify return:1
depth=0 CN = *.ivcbrasil.org.br
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: 8D8C5EC454AD8AE177E99BF99B05E1B8018D61E1
    Produced At: Apr 16 19:54:54 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 430BD20E4F137A1A6C918F24E5DA7E324D4733C8
      Issuer Key Hash: 8D8C5EC454AD8AE177E99BF99B05E1B8018D61E1
      Serial Number: F05CF6C1512303D230F9CC40614379B8
    Cert Status: good
    This Update: Apr 16 19:54:54 2024 GMT
    Next Update: Apr 23 19:54:53 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
         c9:f5:19:ea:2d:ed:5f:98:d2:f7:69:71:64:c3:54:96:ad:94:
         ef:6f:56:51:ed:1a:3b:d7:c2:8b:ef:1e:94:ab:a0:2c:b6:52:
         6d:93:d2:c3:99:93:22:be:d3:76:eb:87:ae:17:a8:19:82:87:
         9a:de:70:7c:21:9b:87:13:3b:b5:2a:7a:6e:ac:38:24:97:ff:
         f5:5b:85:92:cb:fa:4b:76:7c:4c:1b:d5:70:a9:0b:a2:e7:fb:
         1b:b4:e1:4d:41:ab:df:c5:1f:b2:1f:6b:37:f1:6c:ec:80:f3:
         fe:6a:1f:7b:f7:fc:d7:ae:cb:2d:02:d3:60:80:aa:73:fd:42:
         30:e3:05:52:92:27:17:80:39:07:1f:76:93:c2:cc:35:93:dd:
         82:00:f2:c4:6c:a7:be:94:2b:9d:12:4f:97:a2:57:23:80:f4:
         16:dc:b8:98:f1:8c:42:73:ff:e1:a8:f3:6d:b3:2d:e3:00:8d:
         3f:15:64:86:e3:00:71:7e:45:fc:35:11:13:e6:fd:53:8a:f3:
         88:99:c8:e5:23:95:9c:9d:7b:d6:c9:1c:51:90:83:07:c7:b3:
         cd:84:76:0d:a8:96:99:7a:d7:ed:49:6f:d3:6d:29:d0:68:d4:
         0f:5e:e0:d8:a9:6c:c2:0b:31:f3:e5:01:cb:d6:b4:b1:16:29:
         f6:75:e5:13
======================================
---
Certificate chain
 0 s:CN = *.ivcbrasil.org.br
   i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.ivcbrasil.org.br

issuer=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4655 bytes and written 407 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 4096 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE