Namecheap.com

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Matches Common Name or/and SAN
Expired: No (63 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 104.21.61.63
Reverse IP lookup: No records found
Nameserver: kia.ns.cloudflare.com.
Nameserver: mark.ns.cloudflare.com.

General Information

Common Name: keepcalm-o-matic.co.uk
SANs: DNS:keepcalm-o-matic.co.ukDNS:*.keepcalm-o-matic.co.uk Total number of SANs: 2
Signature Algorithm: sha256WithRSAEncryption
Key Type: RSA
Key size: 2048 bits
Serial Number: b5819319b6a87ffd0ef3dd8eedf5ef54
Not Before: Mar 31, 2024 07:01:53 GMT
Not After: Jun 29, 2024 07:01:52 GMT
Number of certs: 3
Revocation Status: good
OCSP Stapling: Supported
Server: cloudflare
HSTS: max-age=2592000
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: keepcalm-o-matic.co.uk

Decode this certificate for verbose information →
Subject Common Name keepcalm-o-matic.co.uk
Issuer Common Name GTS CA 1P5
Issuer Organization Google Trust Services LLC
Not Before: Mar 31, 2024 07:01:53 GMT
Not After: Jun 29, 2024 07:01:52 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: b5819319b6a87ffd0ef3dd8eedf5ef54
SHA1 Fingerprint: A8:57:F6:01:3B:6F:0B:6B:CA:7E:77:61:5F:BC:76:55:BA:E2:A7:CF
MD5 Fingerprint: 01:54:D7:0A:66:C2:F6:2E:2A:30:A3:47:11:BD:8B:5C

Certificate # 2 - Common Name: GTS CA 1P5

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name GTS CA 1P5
Subject Organization Google Trust Services LLC
Issuer Common Name GTS Root R1
Issuer Organization Google Trust Services LLC
Not Before: Aug 13, 2020 00:00:42 GMT
Not After: Sep 30, 2027 00:00:42 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 203bc50a32753f0918022edf1
SHA1 Fingerprint: 9C:0B:25:2A:67:8A:08:7F:BE:E4:96:A4:43:77:F7:55:6A:C6:05:E7
MD5 Fingerprint: 40:BB:51:1C:4F:B0:F5:5C:73:46:FF:54:B5:D5:8E:62

Certificate # 3 - Common Name: GTS Root R1

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name GTS Root R1
Subject Organization Google Trust Services LLC
Issuer Common Name GlobalSign Root CA
Issuer Organization GlobalSign nv-sa
Not Before: Jun 19, 2020 00:00:42 GMT
Not After: Jan 28, 2028 00:00:42 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 77bd0d6cdb36f91aea210fc4f058d30d
SHA1 Fingerprint: 08:74:54:87:E8:91:C1:9E:30:78:C1:F2:A0:7E:45:29:50:EF:36:F6
MD5 Fingerprint: 36:82:B6:C0:EB:81:95:9E:4B:44:58:DF:BB:65:D4:F7

OpenSSL Handshake

depth=3 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
verify return:1
depth=2 C = US, O = Google Trust Services LLC, CN = GTS Root R1
verify return:1
depth=1 C = US, O = Google Trust Services LLC, CN = GTS CA 1P5
verify return:1
depth=0 CN = keepcalm-o-matic.co.uk
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: D5FC9E0DDF1ECADD0897976E2BC55FC52BF5ECB8
    Produced At: Apr 25 11:41:29 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: EC4A2797F8915935139678B3E8C8A21D097B312E
      Issuer Key Hash: D5FC9E0DDF1ECADD0897976E2BC55FC52BF5ECB8
      Serial Number: B5819319B6A87FFD0EF3DD8EEDF5EF54
    Cert Status: good
    This Update: Apr 25 11:41:29 2024 GMT
    Next Update: May  2 10:41:28 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
         77:61:8f:eb:0a:9b:68:e0:32:82:9a:48:a3:01:6e:5f:86:36:
         0e:35:52:41:4f:b9:0d:a0:a4:03:d1:30:e0:d6:d0:0a:19:8d:
         bd:47:2a:86:fb:ec:1a:b0:96:6b:a6:bf:9a:17:0f:6d:4f:d0:
         e3:83:b0:11:34:84:14:d2:fa:60:67:a8:39:3a:11:9f:ce:58:
         56:0b:11:8e:9a:57:90:fa:54:82:84:e3:23:c4:63:2d:83:3f:
         a4:a5:45:1c:ad:10:83:86:05:0c:96:71:ae:27:a2:ed:71:cb:
         52:10:72:1b:13:9f:8a:2b:b0:8a:8b:5d:77:ac:22:23:ba:2d:
         ee:f0:72:5d:76:45:33:56:67:5b:ec:3e:8f:1b:ee:e4:4b:55:
         db:05:05:4c:20:5d:1f:eb:3d:39:69:a3:ea:0c:19:82:78:8c:
         d9:5e:a9:c3:f1:83:9a:47:a0:00:b2:03:74:34:4a:ca:3f:04:
         17:f6:dc:83:dd:84:f6:26:ae:a8:6c:7f:b1:68:a0:63:63:5e:
         71:63:32:15:28:3a:b7:f6:d7:e2:3d:d9:bd:66:6b:40:b1:8e:
         48:ca:ce:56:2b:45:05:9a:71:33:03:58:11:9b:35:0a:7e:e1:
         2f:7f:57:1c:3a:bb:88:bb:a3:d8:eb:76:30:03:c5:6b:33:52:
         64:68:d9:89
======================================
---
Certificate chain
 0 s:CN = keepcalm-o-matic.co.uk
   i:C = US, O = Google Trust Services LLC, CN = GTS CA 1P5
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIRALWBkxm2qH/9DvPdju3171QwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwMzMxMDcwMTUzWhcNMjQwNjI5
MDcwMTUyWjAhMR8wHQYDVQQDExZrZWVwY2FsbS1vLW1hdGljLmNvLnVrMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FoTtobOIUU1tbillBHRwxEOf1Wr
Z5g2xKmxOtRlBNQMX15eUK4TqDs6FEcP3ZkaGEwRCU9QUY+UT1xvwXqcPfAgJ4gb
/1dTXQJ56Qgk/T3ij0S5rbwJGQ0uQzB8KLspeCW924kwoJad2Kp66obWrazJB9YZ
JPfJaEkDUodIzrTE92zk5LVrKwwk8bgKU5aveaaFMhs9npviD6f+Z73p+jM7BTM/
2Co8ejTG3bF8Y7qK0zflXF3RUNwBLHCFeWpui2pqHZVXN++/Kb5tS55edJXrf4aA
zquHDOPzAMhYGMzOK7PSaYotw2kNG+BkYIOZqHPdCC9cLyzzYDQkpE/0NQIDAQAB
o4ICmDCCApQwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFA8N0qO292WuAVMFEM7cO59eKHyJMB8GA1Ud
IwQYMBaAFNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1Bggr
BgEFBQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvdjdrcGlJSFFk
OHcwMQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFw
NS5kZXIwOwYDVR0RBDQwMoIWa2VlcGNhbG0tby1tYXRpYy5jby51a4IYKi5rZWVw
Y2FsbS1vLW1hdGljLmNvLnVrMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB
1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3Rz
MXA1L0J0aHA0MHJoN0V3LmNybDCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2ADtT
d3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjpOHf1EAAAQDAEcwRQIh
AI7is3BMwIGp2iQ/oXRnuzHAbZhMboFpQ1zDI1pknOgxAiByASDlmtKNoyxXNz6S
Ij5ga2wKiTWq2wer4fZGEMBkPwB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf
5mdMWjp0AAABjpOHf3EAAAQDAEgwRgIhAPQf1d+CVSVejuWot7KrcHe7v0LKe3s1
LtL+CpOMqrNoAiEA2gPyIc8fmkMG7//T6zB8qWhUyfLAVd0aktALDKqn6/QwDQYJ
KoZIhvcNAQELBQADggEBACy+xLJeJ33NCnXLSCAPYbSiW7WtepCC8p3rWZunohsU
1Jkkc/WkUXnYk5Vvayw+cQ2pBHO4PaihD8BLYh75OJ0+LZBhLFQ/f7gyzl0Vew0c
+ccBmxcD/Ah/YyegZ9+4Xub/n0TflRmhpHjbPvHMNbPdsh5k79xyk+PfGaFYAJdw
1F5DO0ZuFoDjcVTdfNIr6HJRlPmTs7MbEnEhDI/8wQf/vjLZ/USZ9MbNOtk5zQ7y
yX+ITEv4BD7HNCFrhkVViCAkMfmkUyyOnJria6eu5AWT4Sz3XO/8MTa3Cts/aISj
kXr4mWQ25Bg0WJoodqEo9IC00oOakgGYQsC68R8tcKs=
-----END CERTIFICATE-----
 1 s:C = US, O = Google Trust Services LLC, CN = GTS CA 1P5
   i:C = US, O = Google Trust Services LLC, CN = GTS Root R1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, O = Google Trust Services LLC, CN = GTS Root R1
   i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = keepcalm-o-matic.co.uk

issuer=C = US, O = Google Trust Services LLC, CN = GTS CA 1P5

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 5376 bytes and written 418 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-CHACHA20-POLY1305
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-CHACHA20-POLY1305
    Session-ID: 6A883BEE87D008274EC64585EE1E71355FB166CED96E5C749E8E3466555FCE9A
    Session-ID-ctx: 
    Master-Key: 01676A4CE5BD72037799CDEEBFBB3C3B3896E91F6FB0E43EB43F045AA58B1110C39707C736E1A7EDBF815387610B42B2
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 64800 (seconds)
    TLS session ticket:
    0000 - 42 04 dd b3 aa 11 fc be-e1 a0 f2 67 57 ab 81 37   B..........gW..7
    0010 - 07 75 b1 af fb db e3 b1-68 53 b9 d1 98 d6 72 a2   .u......hS....r.
    0020 - 8b 74 cc a4 ad fb 6f 8f-a7 fd e4 b2 27 69 6c 01   .t....o.....'il.
    0030 - 82 b7 d5 04 4a bd 7c 02-88 bd e3 eb e2 45 02 9d   ....J.|......E..
    0040 - 55 7c 48 e6 31 f4 45 fb-48 3f 3d f1 5b 8f 26 1a   U|H.1.E.H?=.[.&.
    0050 - c9 2f b2 84 76 e5 14 fc-4c 04 f7 ed 74 b0 da 19   ./..v...L...t...
    0060 - 34 92 b2 a9 cc 52 69 95-54 e7 a2 c9 e2 43 31 f7   4....Ri.T....C1.
    0070 - e3 13 b7 9a ff cf 86 18-db 94 3f 38 1d 73 c7 c1   ..........?8.s..
    0080 - 23 c9 a0 94 5b b0 b1 14-23 46 03 b9 df 43 bc 54   #...[...#F...C.T
    0090 - 31 b1 7e d0 e4 b8 e5 7b-f9 11 5e ce 1d 20 a7 00   1.~....{..^.. ..
    00a0 - 12 d4 da 73 ca 9f c1 7d-35 f9 3a 68 a5 49 19 e4   ...s...}5.:h.I..
    00b0 - ff f9 4d a5 a5 e2 89 48-4d 7c e3 52 fb 85 d1 f7   ..M....HM|.R....

    Start Time: 1714134828
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---
DONE