SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (179 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	49.213.95.235
Reverse IP lookup:	No records found
Nameserver:	ns2.sonthuy.com.vn.
Nameserver:	ns1.sonthuy.com.vn.
Nameserver:	ns4.vngdns.net.
Nameserver:	ns3.vngdns.net.

General Information

Common Name:	*.laban.vn
SANs:	DNS:*.laban.vnDNS:laban.vn Total number of SANs: 2
Signature Algorithm:	sha384WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	fccaa80a5d02061f18ea97e128d5abd7
Not Before:	Oct 23, 2023 00:00:00 GMT
Not After:	Oct 22, 2024 23:59:59 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	za-ngx-srv
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.laban.vn

Decode this certificate for verbose information →

Subject Common Name	*.laban.vn
Issuer Common Name	ZeroSSL RSA Domain Secure Site CA
Issuer Organization	ZeroSSL
Not Before:	Oct 23, 2023 00:00:00 GMT
Not After:	Oct 22, 2024 23:59:59 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	fccaa80a5d02061f18ea97e128d5abd7
SHA1 Fingerprint:	F8:3E:6C:A7:63:49:87:26:4D:89:F9:99:2B:E5:EC:DF:24:2F:13:B4
MD5 Fingerprint:	8B:ED:03:01:59:0F:AB:37:0A:BD:67:46:9F:97:DB:B6

Certificate # 2 - Common Name: ZeroSSL RSA Domain Secure Site CA

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	ZeroSSL RSA Domain Secure Site CA
Subject Organization	ZeroSSL
Issuer Common Name	USERTrust RSA Certification Authority
Issuer Organization	The USERTRUST Network
Not Before:	Jan 30, 2020 00:00:00 GMT
Not After:	Jan 29, 2030 23:59:59 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	6c55abdbd00792c79d070cd8119ed6bf
SHA1 Fingerprint:	C8:1A:8B:D1:F9:CF:6D:84:C5:25:F3:78:CA:1D:3F:8C:30:77:0E:34
MD5 Fingerprint:	58:AA:23:10:7C:8D:5A:ED:EA:BD:0D:5E:32:57:85:92

OpenSSL Handshake

depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = AT, O = ZeroSSL, CN = ZeroSSL RSA Domain Secure Site CA
verify return:1
depth=0 CN = *.laban.vn
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:CN = *.laban.vn
   i:C = AT, O = ZeroSSL, CN = ZeroSSL RSA Domain Secure Site CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = AT, O = ZeroSSL, CN = ZeroSSL RSA Domain Secure Site CA
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.laban.vn

issuer=C = AT, O = ZeroSSL, CN = ZeroSSL RSA Domain Secure Site CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4087 bytes and written 399 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE