SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (278 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	14.225.10.15
Reverse IP lookup:	static.vnpt.vn.
Nameserver:	ns8.synerfy.vn.
Nameserver:	ns6.synerfy.vn.
Nameserver:	ns7.synerfy.vn.

General Information

Common Name:	*.kenh14.vn
SANs:	DNS:*.kenh14.vnDNS:kenh14.vn Total number of SANs: 2
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	4096 bits
Serial Number:	1995da522a681ba8393db4db
Not Before:	Dec 22, 2023 05:24:21 GMT
Not After:	Jan 22, 2025 05:24:20 GMT
Number of certs:	3
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	openresty
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.kenh14.vn

Decode this certificate for verbose information →

Subject Common Name	*.kenh14.vn
Issuer Common Name	AlphaSSL CA - SHA256 - G4
Issuer Organization	GlobalSign nv-sa
Not Before:	Dec 22, 2023 05:24:21 GMT
Not After:	Jan 22, 2025 05:24:20 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	1995da522a681ba8393db4db
SHA1 Fingerprint:	54:3F:16:9C:B2:09:89:D0:88:1D:FD:D2:08:60:6F:8A:C3:44:B7:B1
MD5 Fingerprint:	01:55:0C:30:22:7F:0D:B7:59:DC:E9:81:C0:77:AE:05

Certificate # 2 - Common Name: AlphaSSL CA - SHA256 - G4

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	AlphaSSL CA - SHA256 - G4
Subject Organization	GlobalSign nv-sa
Issuer Common Name	GlobalSign Root CA
Issuer Organization	GlobalSign nv-sa
Not Before:	Oct 12, 2022 03:49:43 GMT
Not After:	Oct 12, 2027 00:00:00 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	7d4d42a92b431d7e6453e7c19a8d5877
SHA1 Fingerprint:	D3:41:62:62:72:7F:E1:82:E0:99:6C:79:3B:0F:A4:46:76:C6:54:1A
MD5 Fingerprint:	7F:FB:7E:B7:93:5F:A6:8B:D3:C0:D6:93:6A:99:AB:26

Certificate # 3 - Common Name: GlobalSign Root CA

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GlobalSign Root CA
Subject Organization	GlobalSign nv-sa
Issuer Common Name	GlobalSign Root CA
Issuer Organization	GlobalSign nv-sa
Not Before:	Sep 01, 1998 12:00:00 GMT
Not After:	Jan 28, 2028 12:00:00 GMT
Signature Algorithm:	sha1WithRSAEncryption
Serial Number:	40000000001154b5ac394
SHA1 Fingerprint:	B1:BC:96:8B:D4:F4:9D:62:2A:A8:9A:81:F2:15:01:52:A4:1D:82:9C
MD5 Fingerprint:	3E:45:52:15:09:51:92:E1:B7:5D:37:9F:B1:87:29:8A

OpenSSL Handshake

depth=2 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G4
verify return:1
depth=0 CN = *.kenh14.vn
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:CN = *.kenh14.vn
   i:C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G4
   i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
   i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.kenh14.vn

issuer=C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G4

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4743 bytes and written 400 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 4096 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE