SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (290 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	216.49.176.128
Reverse IP lookup:	cdnlocal.churchofjesuschrist.org.
Nameserver:	ns1.intellectualreserveinc.org.
Nameserver:	ns2.intellectualreserveinc.org.
Nameserver:	ns33.intellectualreserveinc.org.
Nameserver:	ns32.intellectualreserveinc.org.
Nameserver:	ns31.intellectualreserveinc.org.
Nameserver:	ns34.intellectualreserveinc.org.

General Information

Common Name:	*.ldscdn.org
SANs:	DNS:*.ldscdn.orgDNS:ldscdn.org Total number of SANs: 2
Organization:	Intellectual Reserve Inc.
Locality:	Salt Lake City
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	aa276f42194042e187d3781b037e135
Not Before:	Jan 10, 2024 00:00:00 GMT
Not After:	Feb 09, 2025 23:59:59 GMT
Number of certs:	3
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	Apache/2.4.6 (Red Hat Enterprise Linux)
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.ldscdn.org

Decode this certificate for verbose information →

Subject Common Name	*.ldscdn.org
Subject Organization	Intellectual Reserve Inc.
Issuer Common Name	DigiCert Global G2 TLS RSA SHA256 2020 CA1
Issuer Organization	DigiCert Inc
Not Before:	Jan 10, 2024 00:00:00 GMT
Not After:	Feb 09, 2025 23:59:59 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	aa276f42194042e187d3781b037e135
SHA1 Fingerprint:	11:12:99:AC:56:3F:AB:46:F9:BE:1B:2A:81:76:79:A5:3D:50:0B:2F
MD5 Fingerprint:	A5:CE:21:D7:9C:C3:8E:57:A8:31:DB:EB:BC:26:37:B6

Certificate # 2 - Common Name: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	DigiCert Global G2 TLS RSA SHA256 2020 CA1
Subject Organization	DigiCert Inc
Issuer Common Name	DigiCert Global Root G2
Issuer Organization	DigiCert Inc
Not Before:	Mar 30, 2021 00:00:00 GMT
Not After:	Mar 29, 2031 23:59:59 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	cf5bd062b5602f47ab8502c23ccf066
SHA1 Fingerprint:	1B:51:1A:BE:AD:59:C6:CE:20:70:77:C0:BF:0E:00:43:B1:38:26:12
MD5 Fingerprint:	21:14:C6:BF:5B:E1:5E:FD:DD:3C:F6:A5:F9:43:EE:8A

Certificate # 3 - Common Name: DigiCert Global Root G2

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	DigiCert Global Root G2
Subject Organization	DigiCert Inc
Issuer Common Name	DigiCert Global Root G2
Issuer Organization	DigiCert Inc
Not Before:	Aug 01, 2013 12:00:00 GMT
Not After:	Jan 15, 2038 12:00:00 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	33af1e6a711a9a0bb2864b11d09fae5
SHA1 Fingerprint:	DF:3C:24:F9:BF:D6:66:76:1B:26:80:73:FE:06:D1:CC:8D:4F:82:A4
MD5 Fingerprint:	E4:A6:8A:C8:54:AC:52:42:46:0A:FD:72:48:1B:2A:44

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1
verify return:1
depth=0 C = US, ST = Utah, L = Salt Lake City, O = Intellectual Reserve Inc., CN = *.ldscdn.org
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:C = US, ST = Utah, L = Salt Lake City, O = Intellectual Reserve Inc., CN = *.ldscdn.org
   i:C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIQDPW9BitWAvR6uFAsI8zwZjANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0yMTAzMzAwMDAwMDBaFw0zMTAzMjkyMzU5NTlaMFkxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxMzAxBgNVBAMTKkRpZ2lDZXJ0IEdsb2Jh
bCBHMiBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMz3EGJPprtjb+2QUlbFbSd7ehJWivH0+dbn4Y+9lavyYEEV
cNsSAPonCrVXOFt9slGTcZUOakGUWzUb+nv6u8W+JDD+Vu/E832X4xT1FE3LpxDy
FuqrIvAxIhFhaZAmunjZlx/jfWardUSVc8is/+9dCopZQ+GssjoP80j812s3wWPc
3kbW20X+fSP9kOhRBx5Ro1/tSUZUfyyIxfQTnJcVPAPooTncaQwywa8WV0yUR0J8
osicfebUTVSvQpmowQTCd5zWSOTOEeAqgJnwQ3DPP3Zr0UxJqyRewg2C/Uaoq2yT
zGJSQnWS+Jr6Xl6ysGHlHx+5fwmY6D36g39HaaECAwEAAaOCAYIwggF+MBIGA1Ud
EwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFHSFgMBmx9833s+9KTeqAx2+7c0XMB8G
A1UdIwQYMBaAFE4iVCAYlebjbuYP+vq5Eu0GF485MA4GA1UdDwEB/wQEAwIBhjAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdgYIKwYBBQUHAQEEajBoMCQG
CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQAYIKwYBBQUHMAKG
NGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RH
Mi5jcnQwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDA9BgNVHSAENjA0MAsGCWCGSAGG/WwC
ATAHBgVngQwBATAIBgZngQwBAgEwCAYGZ4EMAQICMAgGBmeBDAECAzANBgkqhkiG
9w0BAQsFAAOCAQEAkPFwyyiXaZd8dP3A+iZ7U6utzWX9upwGnIrXWkOH7U1MVl+t
wcW1BSAuWdH/SvWgKtiwla3JLko716f2b4gp/DA/JIS7w7d7kwcsr4drdjPtAFVS
slme5LnQ89/nD/7d+MS5EHKBCQRfz5eeLjJ1js+aWNJXMX43AYGyZm0pGrFmCW3R
bpD0ufovARTFXFZkAdl9h6g4U5+LXUZtXMYnhIHUfoyMo5tS58aI7Dd8KvvwVVo4
chDYABPPTHPbqjc1qCmBaZx2vN4Ye5DUys/vZwP9BFohFrH/6j/f3IL16/RZkiMN
JCqVJUzKoZHm1Lesh3Sz8W2jmdv51b2EQJ8HmA==
-----END CERTIFICATE-----
 2 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=C = US, ST = Utah, L = Salt Lake City, O = Intellectual Reserve Inc., CN = *.ldscdn.org

issuer=C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4481 bytes and written 401 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE