Namecheap.com
SSL Checker SSL & CSR Decoder CSR Generator SSL Converter

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Matches Common Name or/and SAN
Expired: No (90 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 23.56.123.83
Reverse IP lookup: a23-56-123-83.deploy.static.akamaitechnologies.com.
Nameserver: a26-64.akam.net.
Nameserver: a7-66.akam.net.
Nameserver: a11-66.akam.net.
Nameserver: a28-65.akam.net.
Nameserver: a22-67.akam.net.
Nameserver: a1-141.akam.net.

General Information

Common Name: www.jw.org
SANs: DNS:www.jw.orgDNS:mediator.jw.orgDNS:jw.orgDNS:data.jw-api.org Total number of SANs: 4
Organization: Watchtower Bible and Tract Society of New York, Inc.
Locality: Wallkill
Signature Algorithm: sha256WithRSAEncryption
Key Type: ECDSA (secp256r1)
Key size: 256 bits
Serial Number: 58b3c904f22d962fa0066615c5547c4
Not Before: Jul 26, 2023 00:00:00 GMT
Not After: Jul 25, 2024 23:59:59 GMT
Number of certs: 2
Revocation Status: good
OCSP Stapling: Supported
Server: Not Provided
HSTS: max-age=31536000
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: www.jw.org

Decode this certificate for verbose information →
Subject Common Name www.jw.org
Subject Organization Watchtower Bible and Tract Society of New York, Inc.
Issuer Common Name DigiCert TLS RSA SHA256 2020 CA1
Issuer Organization DigiCert Inc
Not Before: Jul 26, 2023 00:00:00 GMT
Not After: Jul 25, 2024 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 58b3c904f22d962fa0066615c5547c4
SHA1 Fingerprint: 60:95:02:E6:DE:FE:21:A8:77:8F:86:37:A2:58:A6:39:F2:54:97:FC
MD5 Fingerprint: 30:1B:EB:BB:44:39:C1:F7:87:BC:06:5A:68:A5:45:78

Certificate # 2 - Common Name: DigiCert TLS RSA SHA256 2020 CA1

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name DigiCert TLS RSA SHA256 2020 CA1
Subject Organization DigiCert Inc
Issuer Common Name DigiCert Global Root CA
Issuer Organization DigiCert Inc
Not Before: Apr 14, 2021 00:00:00 GMT
Not After: Apr 13, 2031 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 6d8d904d5584346f68a2fa754227ec4
SHA1 Fingerprint: 1C:58:A3:A8:51:8E:87:59:BF:07:5B:76:B7:50:D4:F2:DF:26:4F:CD
MD5 Fingerprint: E6:7B:58:6F:70:46:BF:E0:AA:51:F6:66:0B:11:9D:D9

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
verify return:1
depth=0 C = US, ST = New York, L = Wallkill, O = "Watchtower Bible and Tract Society of New York, Inc.", CN = www.jw.org
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: B76BA2EAA8AA848C79EAB4DA0F98B2C59576B9F4
    Produced At: Apr 22 13:12:55 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: E4E395A229D3D4C1C31FF0980C0B4EC0098AABD8
      Issuer Key Hash: B76BA2EAA8AA848C79EAB4DA0F98B2C59576B9F4
      Serial Number: 058B3C904F22D962FA0066615C5547C4
    Cert Status: good
    This Update: Apr 22 12:57:02 2024 GMT
    Next Update: Apr 29 11:57:02 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
         04:dc:1b:50:a0:61:a9:e5:68:f2:33:40:dc:02:48:50:42:81:
         76:86:67:fe:f9:40:0d:d4:5c:d9:e6:b5:7b:96:d3:6f:7e:72:
         2c:ed:a6:c9:a9:e3:e3:6b:de:38:30:19:31:4b:96:36:da:b7:
         e4:68:b0:3e:ac:45:a3:8f:d1:51:eb:7d:2d:ee:b1:c2:ee:3c:
         60:c2:8a:af:fd:3f:fc:cf:0e:6c:2b:29:d1:71:d1:4d:88:45:
         eb:95:09:77:d6:25:ae:d5:86:4b:9a:c7:7b:90:63:39:1f:43:
         ee:e1:5c:c9:c4:82:0b:96:b9:e5:13:31:76:11:e1:d0:65:c9:
         78:9b:c3:71:c1:b8:74:72:0b:9c:00:17:12:5a:d8:ca:a2:23:
         f0:b0:ed:6e:80:40:5a:b9:5d:4c:d0:45:91:43:97:5a:f5:80:
         88:d0:07:01:32:be:81:f4:69:6f:0f:e4:dd:62:d7:17:8d:a8:
         bb:b8:ea:cf:55:e8:0a:04:91:3d:ef:55:a6:b5:1e:ca:e1:47:
         f7:8f:4d:31:1d:91:92:e5:ee:76:b6:fa:ca:72:b6:50:2e:6e:
         8a:6c:fb:c1:2e:82:87:a5:8b:b0:11:12:b9:17:02:c3:e0:47:
         3e:c3:be:ba:0a:35:f6:49:40:2c:d7:36:5d:22:7e:56:36:13:
         7a:ea:5b:18
======================================
---
Certificate chain
 0 s:C = US, ST = New York, L = Wallkill, O = "Watchtower Bible and Tract Society of New York, Inc.", CN = www.jw.org
   i:C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=C = US, ST = New York, L = Wallkill, O = "Watchtower Bible and Tract Society of New York, Inc.", CN = www.jw.org

issuer=C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3672 bytes and written 397 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE