Namecheap.com

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Doesn't match Common Name or/and SANs
Expired: No (67 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 91.211.156.128
Reverse IP lookup: web-portal1.mediaset.net.
Nameserver: ns1.register.it.
Nameserver: ns2.register.it.

General Information

Common Name: *.mediasetpremium.it
SANs: DNS:*.mediasetpremium.itDNS:mediasetpremium.it Total number of SANs: 2
Organization: Mediaset Premium S.p.A
Locality: Roma
Signature Algorithm: sha256WithRSAEncryption
Key Type: RSA
Key size: 2048 bits
Serial Number: eed1a04fc3ef7490000000051020dd9
Not Before: Apr 06, 2020 08:14:10 GMT
Not After: Feb 05, 2022 08:44:09 GMT
Number of certs: 2
Revocation Status: good
OCSP Stapling: Not Supported
Server: nginx
HSTS: Not Supported
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: *.mediasetpremium.it

Decode this certificate for verbose information →
Subject Common Name *.mediasetpremium.it
Subject Organization Mediaset Premium S.p.A
Issuer Common Name Entrust Certification Authority - L1K
Issuer Organization Entrust, Inc.
Not Before: Apr 06, 2020 08:14:10 GMT
Not After: Feb 05, 2022 08:44:09 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: eed1a04fc3ef7490000000051020dd9
SHA1 Fingerprint: 93:83:39:A5:C9:0B:0C:64:7A:4F:D9:2B:35:34:4F:06:6D:E2:FF:B0
MD5 Fingerprint: 34:A7:28:F9:37:28:0A:03:2E:CF:02:E4:1C:CA:3A:DB

Certificate # 2 - Common Name: Entrust Certification Authority - L1K

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name Entrust Certification Authority - L1K
Subject Organization Entrust, Inc.
Issuer Common Name Entrust Root Certification Authority - G2
Issuer Organization Entrust, Inc.
Not Before: Oct 05, 2015 19:13:56 GMT
Not After: Dec 05, 2030 19:43:56 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: ee94cc30000000051d37785
SHA1 Fingerprint: F2:1C:12:F4:6C:DB:6B:2E:16:F0:9F:94:19:CD:FF:32:84:37:B2:D7
MD5 Fingerprint: 35:94:F5:3C:2A:77:54:47:EB:95:67:4B:FF:6C:F2:8B

OpenSSL Handshake

depth=2 C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2009 Entrust, Inc. - for authorized use only", CN = Entrust Root Certification Authority - G2
verify return:1
depth=1 C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2012 Entrust, Inc. - for authorized use only", CN = Entrust Certification Authority - L1K
verify return:1
depth=0 C = IT, ST = Roma, L = Roma, O = Mediaset Premium S.p.A, CN = *.mediasetpremium.it
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:/C=IT/ST=Roma/L=Roma/O=Mediaset Premium S.p.A/CN=*.mediasetpremium.it
   i:/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2012 Entrust, Inc. - for authorized use only/CN=Entrust Certification Authority - L1K
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
 1 s:/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2012 Entrust, Inc. - for authorized use only/CN=Entrust Certification Authority - L1K
   i:/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2009 Entrust, Inc. - for authorized use only/CN=Entrust Root Certification Authority - G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=IT/ST=Roma/L=Roma/O=Mediaset Premium S.p.A/CN=*.mediasetpremium.it
issuer=/C=US/O=Entrust, Inc./OU=See www.entrust.net/legal-terms/OU=(c) 2012 Entrust, Inc. - for authorized use only/CN=Entrust Certification Authority - L1K
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3857 bytes and written 337 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 2C031CB10791DAC51AA47CEF4A0D60C54C4C2F2DCEAD55D90E1F9CCFB2D5A2E6
    Session-ID-ctx: 
    Master-Key: 502F96001A98D8D94FF5A46F77C4BBEC9EDA5C0970D7AE2AC09C05F5458FD29311A487F38A3BD72B5D0E32CA94E669B9
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 3d 5f cf a6 24 5e 6b bb-b2 ba 73 95 06 cd 41 41   =_..$^k...s...AA
    0010 - b3 7a a2 fb 75 45 29 97-7f 19 dc c9 8e 82 2c 10   .z..uE).......,.
    0020 - c1 26 f0 59 bf 66 4e f7-b9 70 c5 8f d2 00 96 39   .&.Y.fN..p.....9
    0030 - 74 7d dc 3d 7d e5 55 ab-70 a1 44 39 17 6d e0 51   t}.=}.U.p.D9.m.Q
    0040 - 86 40 f3 65 72 9a a1 53-9e 2c ee 2d 72 ed 08 0d   .@.er..S.,.-r...
    0050 - 09 19 a8 52 27 b9 6f 58-ab 2e 97 27 4f f2 86 62   ...R'.oX...'O..b
    0060 - 75 33 ba 01 2e 40 84 54-82 4b ec 74 c5 fc e6 c0   u3...@.T.K.t....
    0070 - 19 e8 b2 3d 43 31 e7 f7-39 6c 54 d0 a6 59 b8 8d   ...=C1..9lT..Y..
    0080 - 4c 39 10 1a 6d 37 bb 97-d6 5c 4a b5 04 3c 49 42   L9..m7...\J..<IB
    0090 - 88 ca ab 0d 71 aa ee ba-20 4e b2 95 4c 52 af 00   ....q... N..LR..
    00a0 - 0d 93 5c 9a c6 8c 6e b8-b1 26 79 1d 00 0f 6f 14   ..\...n..&y...o.
    00b0 - ff 1e ab bd 3f da 04 e8-e4 23 1f 6c b1 9a 10 08   ....?....#.l....

    Start Time: 1638257144
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---
DONE