SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (25 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	18.244.214.89
Reverse IP lookup:	server-18-244-214-89.sfo53.r.cloudfront.net.
Nameserver:	ns5.ringpublishing.net.
Nameserver:	ns6.ringpublishing.net.
Nameserver:	ns7.ringpublishing.net.
Nameserver:	ns8.ringpublishing.net.

General Information

Common Name:	*.onet.pl
SANs:	DNS:*.onet.plDNS:onet.pl Total number of SANs: 2
Organization:	Ringier Axel Springer Polska Sp z o.o.
Locality:	Warszawa
Signature Algorithm:	ecdsa-with-SHA256
Key Type:	ECDSA (secp256r1)
Key size:	256 bits
Serial Number:	28ea185b5e4808dc5a3573d18b1f91d
Not Before:	Jul 11, 2023 00:00:00 GMT
Not After:	May 14, 2024 23:59:59 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	Ring Publishing - Accelerator
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.onet.pl

Decode this certificate for verbose information →

Subject Common Name	*.onet.pl
Subject Organization	Ringier Axel Springer Polska Sp z o.o.
Issuer Common Name	GeoTrust TLS ECC CA G1
Issuer Organization	DigiCert Inc
Not Before:	Jul 11, 2023 00:00:00 GMT
Not After:	May 14, 2024 23:59:59 GMT
Signature Algorithm:	ecdsa-with-SHA256
Serial Number:	28ea185b5e4808dc5a3573d18b1f91d
SHA1 Fingerprint:	8A:73:93:00:4A:90:11:A6:4C:80:2B:96:3F:10:40:90:AE:81:6B:9F
MD5 Fingerprint:	C5:3E:39:D6:92:01:73:7C:7E:4E:62:CC:B7:81:0A:0A

Certificate # 2 - Common Name: GeoTrust TLS ECC CA G1

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GeoTrust TLS ECC CA G1
Subject Organization	DigiCert Inc
Issuer Common Name	DigiCert Global Root G3
Issuer Organization	DigiCert Inc
Not Before:	Nov 02, 2017 12:59:38 GMT
Not After:	Nov 02, 2027 12:59:38 GMT
Signature Algorithm:	ecdsa-with-SHA256
Serial Number:	34a3ff947be39c199ceb806961e516d
SHA1 Fingerprint:	BF:E7:BA:21:A2:FA:56:71:9B:61:F6:4E:E1:B2:69:D0:B8:0B:44:E5
MD5 Fingerprint:	08:D2:82:05:87:25:34:BC:0D:5D:07:7F:30:01:08:68

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G3
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust TLS ECC CA G1
verify return:1
depth=0 C = PL, ST = Mazowieckie, L = Warszawa, O = Ringier Axel Springer Polska Sp z o.o., CN = *.onet.pl
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:C = PL, ST = Mazowieckie, L = Warszawa, O = Ringier Axel Springer Polska Sp z o.o., CN = *.onet.pl
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust TLS ECC CA G1
-----BEGIN CERTIFICATE-----
MIIE8zCCBJqgAwIBAgIQAo6hhbXkgI3Fo1c9GLH5HTAKBggqhkjOPQQDAjBgMQsw
CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
ZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgRUNDIENBIEcxMB4X
DTIzMDcxMTAwMDAwMFoXDTI0MDUxNDIzNTk1OVowezELMAkGA1UEBhMCUEwxFDAS
BgNVBAgTC01hem93aWVja2llMREwDwYDVQQHEwhXYXJzemF3YTEvMC0GA1UEChMm
UmluZ2llciBBeGVsIFNwcmluZ2VyIFBvbHNrYSBTcCB6IG8uby4xEjAQBgNVBAMM
CSoub25ldC5wbDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABArzcUhjTUv6eE1i
/RNmeuTkkFk3U53oGhehSsP30gNSvzPADKTjPggPltmvqYTu95x4H77EZmJfp2PW
c4uBttqjggMZMIIDFTAfBgNVHSMEGDAWgBS9gs9Hex6MIoX+jKgfw+Gy3/2mmTAd
BgNVHQ4EFgQUblA8O3/2iWtmKDieTbl+CpfZND4wHQYDVR0RBBYwFIIJKi5vbmV0
LnBsggdvbmV0LnBsMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NkcC5nZW90cnVz
dC5jb20vR2VvVHJ1c3RUTFNFQ0NDQUcxLmNybDA+BgNVHSAENzA1MDMGBmeBDAEC
AjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwdgYI
KwYBBQUHAQEEajBoMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0
LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dl
b1RydXN0VExTRUNDQ0FHMS5jcnQwCQYDVR0TBAIwADCCAX8GCisGAQQB1nkCBAIE
ggFvBIIBawFpAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJ
RS6iVQAABAMASDBGAiEA5JODlO2bauJmHsgcairNdFrRLI5V5GF9rbhfNeTvLPYC
IQC/Zp/3sLinr2XKtcn7zs/f59J4d01xWGM0yTWGWl+ISwB2AEiw42vapkc0D+Vq
AvqdMOscUgHLVt0sgdm7v6s52IRzAAABiUUuonoAAAQDAEcwRQIgVjF6iRr1vJSf
NeyxI/RlD+R5Zx1jk9zP4ZcxwpMHIbkCIQCiuc9R5eyKXYoTJ7+ywW9QDV03jt0U
q84Lt3gLIWVWAQB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAAB
iUUuohUAAAQDAEcwRQIhAJcsZqH1ZYJusLH8p2fXtiM9FoMTS5rzGHtHq/oKR3Gy
AiAuI9oqDKeLbCSyny3PLpNVQe61fKxe81fSvD/dd2HiRzAKBggqhkjOPQQDAgNH
ADBEAiBO4ajTTUa5csD/1GKyaDAK13RMle2PGBAVv9DHvzkzSwIgDLQeoWqkykhm
tlKU7bxDWhN38+0WYTABM6kCNQl2BeI=
-----END CERTIFICATE-----
 1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust TLS ECC CA G1
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G3
-----BEGIN CERTIFICATE-----
MIIDIjCCAqegAwIBAgIQA0o/+Ue+OcGZzrgGlh5RbTAKBggqhkjOPQQDAjBhMQsw
CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
ZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAe
Fw0xNzExMDIxMjU5MzhaFw0yNzExMDIxMjU5MzhaMGAxCzAJBgNVBAYTAlVTMRUw
EwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20x
HzAdBgNVBAMTFkdlb1RydXN0IFRMUyBFQ0MgQ0EgRzEwWTATBgcqhkjOPQIBBggq
hkjOPQMBBwNCAARq1Zj5CUHtNOXYXvkbpA0hbP0z4QRoAVYDNhmA4ZS4c1ZsNCkW
9dRLoGN903ll4C1knoqPlurtQFbE1zZKQgJVo4IBQDCCATwwHQYDVR0OBBYEFL2C
z0d7Howihf6MqB/D4bLf/aaZMB8GA1UdIwQYMBaAFLPbSKT5ocXYrjZBzBFjaWIp
vEvGMA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwEgYDVR0TAQH/BAgwBgEB/wIBADA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUH
MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBCBgNVHR8EOzA5MDegNaAzhjFo
dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290RzMuY3Js
MD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMAoGCCqGSM49BAMCA2kAMGYCMQDi0sZJgYka7acLC8nc
Y9M1bbgvlkAyznRVT+O15a/l7xFVq230VXPrGeiwGZkfdJ0CMQDMWuDYxQNFeogR
QNzAmTaQxOW+mxCdxdmL5dLHLJOQaI8N4TjTct2W3oyvTAaYn20=
-----END CERTIFICATE-----
---
Server certificate
subject=C = PL, ST = Mazowieckie, L = Warszawa, O = Ringier Axel Springer Polska Sp z o.o., CN = *.onet.pl

issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust TLS ECC CA G1

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 2440 bytes and written 382 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE