SSL Checker
Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.
Report
It's all good. We have not detected any issues.
Hostname: | done Matches Common Name or/and SAN |
Expired: | done No (134 days till expiration) |
Public Key: | done We were unable to find any issues in the public key of end-entity certificate |
Trusted: | done Yes, we were able to verify the certificate |
Self-Signed: | done No, the end-entity certificate is not self-signed |
Chain Issues: | done No, we were unable to detect any issues in the certificate chain sent by the server |
Weak signatures: | done No, certificates sent by the server were not signed utilizing a weak hash function |
OCSP Status: | done OCSP Responder returned "good" status for the end-entity certificate |
DNS Information
Resolves To: | 40.71.11.131 |
Reverse IP lookup: | No records found |
Nameserver: | ns1-06.azure-dns.com. |
Nameserver: | ns2-06.azure-dns.net. |
Nameserver: | ns3-06.azure-dns.org. |
Nameserver: | ns4-06.azure-dns.info. |
General Information
Common Name: | redcross.org |
SANs: | DNS:redcross.org Total number of SANs: 1 |
Signature Algorithm: | sha256WithRSAEncryption |
Key Type: | RSA |
Key size: | 2048 bits |
Serial Number: | 249d837ca16303921206713a267d8c3 |
Not Before: | Mar 06, 2024 00:00:00 GMT |
Not After: | Sep 06, 2024 23:59:59 GMT |
Number of certs: | 2 |
Revocation Status: | good |
OCSP Stapling: | Supported |
Server: | Microsoft-IIS/10.0 |
HSTS: | Not Supported |
HPKP: | Not Supported |
Chain Information
Certificate # 1 - Common Name: redcross.org
Decode this certificate for verbose information → launchSubject Common Name | redcross.org |
Issuer Common Name | GeoTrust Global TLS RSA4096 SHA256 2022 CA1 |
Issuer Organization | DigiCert, Inc. |
Not Before: | Mar 06, 2024 00:00:00 GMT |
Not After: | Sep 06, 2024 23:59:59 GMT |
Signature Algorithm: | sha256WithRSAEncryption |
Serial Number: | 249d837ca16303921206713a267d8c3 |
SHA1 Fingerprint: | 4A:C2:FD:BF:FC:7A:48:46:AF:65:50:21:17:4E:5C:47:2A:3E:70:7D |
MD5 Fingerprint: | E4:54:0E:8C:C0:F0:C5:CB:6F:12:CF:DE:FC:EB:5A:18 |
Certificate # 2 - Common Name: GeoTrust Global TLS RSA4096 SHA256 2022 CA1
Decode this certificate for verbose information → launchIn place? | Yes, this certificate directly certifies the preceding one |
Subject Common Name | GeoTrust Global TLS RSA4096 SHA256 2022 CA1 |
Subject Organization | DigiCert, Inc. |
Issuer Common Name | DigiCert Global Root CA |
Issuer Organization | DigiCert Inc |
Not Before: | May 04, 2022 00:00:00 GMT |
Not After: | Nov 09, 2031 23:59:59 GMT |
Signature Algorithm: | sha256WithRSAEncryption |
Serial Number: | f622f6f21c2ff5d521f723a1d47d62d |
SHA1 Fingerprint: | 7E:6D:B7:B7:58:4D:8C:F2:00:3E:09:31:E6:CF:C4:1A:3A:62:D3:DF |
MD5 Fingerprint: | 14:64:3B:6F:56:9F:50:82:CF:62:69:1A:9B:D0:BD:92 |
OpenSSL Handshake
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA verify return:1 depth=1 C = US, O = "DigiCert, Inc.", CN = GeoTrust Global TLS RSA4096 SHA256 2022 CA1 verify return:1 depth=0 CN = redcross.org verify return:1 CONNECTED(00000003) OCSP response: ====================================== OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: A5B4D6EB36C4E76BA6DFC4640B012A2004B86623 Produced At: Apr 25 08:00:51 2024 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 98F90032A9C065EB3C4FA8510E4C8DB8A7101603 Issuer Key Hash: A5B4D6EB36C4E76BA6DFC4640B012A2004B86623 Serial Number: 0249D837CA16303921206713A267D8C3 Cert Status: good This Update: Apr 25 07:45:02 2024 GMT Next Update: May 2 06:45:02 2024 GMT Signature Algorithm: sha256WithRSAEncryption 27:8c:51:c0:ee:09:f7:9d:12:5a:17:59:24:6a:2f:23:63:87: 7b:33:24:ee:48:0f:1f:ac:93:c7:10:78:3e:36:58:50:4c:f3: d8:ad:b2:30:bb:39:e9:a1:5b:bd:10:c2:79:a1:f9:03:f4:df: 3a:6e:06:09:2f:51:d2:ad:d1:b2:df:d2:89:3d:81:2c:9d:d3: 8d:1c:6f:23:d6:e3:f0:20:53:26:32:67:31:27:76:24:44:8c: cc:5d:e4:8c:91:57:b6:8f:c6:2c:ba:54:90:a3:27:6c:2a:6d: 02:7a:d2:f2:12:b6:c2:ae:b8:51:e6:33:d8:50:c9:b7:c7:18: ac:6b:bb:d6:8e:17:6a:e7:6b:ca:91:21:3a:42:c7:83:74:55: 4b:52:7e:f9:7c:94:df:54:d2:6c:a2:a8:c8:7b:73:24:d6:87: cf:79:db:12:78:70:2d:6a:29:6e:68:4a:37:ba:87:c6:7e:9e: b4:56:0a:3c:c0:8f:4e:9c:d9:e6:56:ef:2f:16:8a:3c:ac:f4: 18:d4:45:a2:43:c6:8d:84:91:69:13:e5:58:82:94:55:f0:6d: 8a:f9:e7:a4:02:7e:c2:0b:b1:9e:ba:ee:f8:43:3e:e4:82:5e: c5:3c:3f:69:fe:bd:3a:7f:80:fd:32:06:1c:a1:c4:e5:07:dc: 21:1d:f9:e4:3c:a5:a0:bb:e0:80:ed:8b:4b:3a:65:23:30:85: bb:6b:2b:69:55:be:9a:41:3f:de:05:b1:9f:d1:4e:54:4e:69: 14:e8:46:d1:12:4c:85:22:7f:32:5e:71:ab:fe:b0:fd:40:11: 13:4f:60:31:b2:de:66:69:4c:da:3f:24:b2:ab:2e:07:33:7a: 26:2f:3f:b6:8c:90:97:40:11:1e:37:a9:1d:65:8b:f9:62:ed: 6f:5b:00:43:eb:f5:7d:76:40:87:58:db:57:44:80:4f:0f:e8: 2c:6b:fe:b2:55:49:20:d3:06:ed:71:24:cd:7f:6b:b9:88:b3: cb:ef:7e:7c:18:c0:02:a9:dc:84:47:6e:5b:6b:23:6b:0c:d4: 4f:95:00:4c:0c:9d:40:fc:3c:5a:4b:4c:58:f6:dd:5c:3f:05: 48:1e:40:50:f3:8c:e5:22:d3:0c:db:4b:d6:fc:8c:de:0e:2a: 3d:de:1c:d3:da:a4:cf:17:e1:fc:b5:a6:a4:31:a5:f2:f4:ff: ff:a8:10:4d:25:30:f3:9e:4e:dd:31:cd:10:40:c2:0f:17:45: e4:30:50:2c:f4:65:e8:47:07:22:99:61:aa:55:b2:4c:52:03: 3e:1f:6a:60:b0:c2:48:3b:52:dc:58:a2:0e:b3:9d:53:80:5b: 19:c5:92:5f:13:52:73:e3 ====================================== --- Certificate chain 0 s:CN = redcross.org i:C = US, O = "DigiCert, Inc.", CN = GeoTrust Global TLS RSA4096 SHA256 2022 CA1 -----BEGIN CERTIFICATE----- MIIHhjCCBW6gAwIBAgIQAknYN8oWMDkhIGcTomfYwzANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjQwMzA2MDAwMDAwWhcNMjQwOTA2MjM1OTU5WjAXMRUwEwYDVQQDEwxyZWRjcm9z cy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CRZJPAntToGv fUI5DAiUL1e0whcmDKe6pCe/0qSbZ0WN4YAKM3DBAVbNqApkwfkOYCMJHkaEiOBe +pnAXtBqS72JdPAAQQytNKFM/URoOopvtkT7uCNHGFvQblCBRJDnbRtP909w8eiS lcBG0ZXdy5bVzpWgUwoKjZ2Xnv1dq+vMT95dJIEgf54/4uc21UAR+Xc1uJqTueCM AbFh+irFTcZjKA+KncjtiVGEgEiH8pdEQK6gnk9v7zOIDM8a0MH82BSzKVkaIepQ fJKbKWLKPcx6916gQaT4umCBVOuIeeMQJ2k/Wx4rT5ADIJ1Qag0CT30ufaHobjOt GTNad4gBAgMBAAGjggOHMIIDgzAfBgNVHSMEGDAWgBSltNbrNsTna6bfxGQLASog BLhmIzAdBgNVHQ4EFgQU5NEizO0GvJ8ECn6L9fMotHYbWqIwFwYDVR0RBBAwDoIM cmVkY3Jvc3Mub3JnMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEW G2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESG Qmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQw OTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQu Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMIGH BggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0 LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0dl b1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAwGA1UdEwEB /wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABjhKVvFcAAAQDAEcwRQIhAJIBw51AAJA8SWqg /TsjdjumqINlVbgBOIVxDfQRmIu9AiAGQ628j5FJuUeBUdU3iHut8J3jmvh04Lgb A7T5tF/e/AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjhKV vHYAAAQDAEcwRQIgYzm30dZ/Yox8D6DsEy9bjNMfxA8mIcyeoGAe88T3K4oCIQDy Ja9T71C3Zvq+DQefZeLyDunyOX0CjoQfIkncFW0+SgB1AD8XS0/XIkdYlB1lHIS+ DRLtkDd/H4Vq68G/KIXs+GRuAAABjhKVvKMAAAQDAEYwRAIgTH9U+34Ik2iPwpVN dmqqWQRH/7qXzGGXyjpI0LBJzCMCIBTDCiILA3pEYp/VlzW4EpBJl7PA+Cv2Ja5M SFjaAXiGMA0GCSqGSIb3DQEBCwUAA4ICAQB+6i9/EOsRoUL1vxjmDDemBkSTujja 0jpxzzy8LfYQTbLpaRl5/kUPBppDLktBhezbSN+ZXMQg+E1v7f937yPY9JVl5OFI hP1LcubfC3F5UY9zQ8uEfVN+9cFKlZsY21hJzrMU7xnS6JZVjxLwraWlJrYj3M9d sgBS2emKpMb2eObalHSP0zFt9h2GWJdIhRjAmVrSijUrYl7YHeICpwpVWsfHbJUX NTS88QutgQuVbc4cIUzhPq7CHiI82eN+dTAO1m6LtHxPFp5GDpQwjlJUVMvfC6sx iSMrKHAf6ENfYeunP3HlkgWwkBpm7r46gsHg1G3hUWMMd4LWQCUml+FTJIOBFKje hvPOzMIj0lDSM1RZ/KUcicN0xcTerCFNaqmGkf4IHSl7o9senoU+VKbWZ8J8y2ht SlQKEn31yPLORofiWrvCxQCsEt2TAecpVaJbQUzRKIESAho4JXtKurg7I30eTYQr AEL1Yoy+pdAvRg7mWMd7hxUj3mWyQ1oGYMxswxdaa0v7sivDY/iSsCIHbuNgtsNQ xeXREsRJzsb+gNCA+JPgGuesLpW727p/ELNsw28eLpXSW5uWkBuEwjwru31mUIfo a9OhelJqqN6EQYFxzLPsWYr3fjA5qZJAs8gZFLflejV2aUwo0WzHjdeaPqns7gGq E/prm1TxD6msSA== -----END CERTIFICATE----- 1 s:C = US, O = "DigiCert, Inc.", CN = GeoTrust Global TLS RSA4096 SHA256 2022 CA1 i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIQD2IvbyHC/11SH3I6HUfWLTANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD QTAeFw0yMjA1MDQwMDAwMDBaFw0zMTExMDkyMzU5NTlaMFwxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjE0MDIGA1UEAxMrR2VvVHJ1c3QgR2xv YmFsIFRMUyBSU0E0MDk2IFNIQTI1NiAyMDIyIENBMTCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBAOi2w4fkhoZPCI6L7nLMjvJTFg2rvXa7JPgQtpm9Ls4Z 9u2/SuiTDcjnGfjMYq9uTdBsiRjCC8fh3HsrPMCCAvfAf7bY349rOV4XWTGXZ2RS UE20zKyhiF1Z+SkySD5+9yxzLNEyb+JXN8LLLcyB2Hw79jEq6v09+8zL5Ip3wFz9 +Uc3Tx4LVwTvW50pGMHFl3xpjO7iQS2RCkNcHHdqfEEkKy8EStVGA27aYYuHbgdx ivjv0Axx3M4NrWfO8tGj8w0t8LhKDTuk/gFOI4klRcHRjcuH6giK6mkM3qpGGQLW +Zc7Q93NFXalE5Qzn5/JESIcSPFDOezoAi9fMdtEa7Qj9/yCaUx5S14l66zlE1Od y5hzpQBOlsw9KjJxsfpc4LQTB8aDaNjSqzLpwj6XlsRjaRon9GSS1q6HDYI3o8pR x03xM1k7JTgiyyRO+84PVjLUOxy6u4SrEXRM0jdtxqnzfwW2CFsKo+5xHZB9xt5m 82zwUzY7+VOHEg8YpJxS2N6HR6QBvxo/6pgyfdmwAjiOGhA1GfHvQWf2vyHNguLq 1Jn4gr0b27HMZl6yqquv9O9XgDjPk147eym8GbN6AmBBke0HXR8fPwier1spgIoB W3txZY6OiJr/JRl2n5MnUZ3QdyFfvzfkuBWwVCI7WI4gVJmhkOMeG9grhIRPm+zH AgMBAAGjggGCMIIBfjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBSltNbr NsTna6bfxGQLASogBLhmIzAfBgNVHSMEGDAWgBQD3lA1VtFMu2bwo+IbG8OXsj3R VTAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl cnQuY29tMEAGCCsGAQUFBzAChjRodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v RGlnaUNlcnRHbG9iYWxSb290Q0EuY3J0MEIGA1UdHwQ7MDkwN6A1oDOGMWh0dHA6 Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwPQYD VR0gBDYwNDALBglghkgBhv1sAgEwBwYFZ4EMAQEwCAYGZ4EMAQIBMAgGBmeBDAEC AjAIBgZngQwBAgMwDQYJKoZIhvcNAQELBQADggEBAJ5ytcBRxwtzXW/S2tOySJu4 bhFRUuYRF91SMDUX8aX8Z/JIdLZb1+d6LIaiVkybFKYL8K2xual6/NL0tcI0T3Nw /QNwS12NrfbS/th9aus7kiSbnNbkM2sc61vx9lF0qYklhJzSOkUPPSyq4Bdhg8G6 puAqrvQNqxNNMTTyMs5KNJdpLMEdIKdelM+9KKEMy9/jWGuLoNr8BvjkDx19VQSI MCrwTFiQSC3sMkZQrCgZIwnQbf2ynOSMDutLoja5uKB7l+vbH2qSPFf3vD2HoTH7 S8+k0HfXb/f7ZSM5GDln3DTbBPI2qmmMiwFZJOMuYAQP1cyP8ywlhfdEdKVcW6E= -----END CERTIFICATE----- --- Server certificate subject=CN = redcross.org issuer=C = US, O = "DigiCert, Inc.", CN = GeoTrust Global TLS RSA4096 SHA256 2022 CA1 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: ECDH, P-521, 521 bits --- SSL handshake has read 4841 bytes and written 827 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- DONE