Namecheap.com

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Matches Common Name or/and SAN
Expired: No (195 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 213.13.146.142
Reverse IP lookup: sapo.pt.
Nameserver: ns.sapo.pt.
Nameserver: ns2.sapo.pt.
Nameserver: dns01.sapo.pt.
Nameserver: dns02.sapo.pt.

General Information

Common Name: *.sapo.pt
SANs: DNS:*.sapo.ptDNS:sapo.pt Total number of SANs: 2
Signature Algorithm: sha256WithRSAEncryption
Key Type: RSA
Key size: 2048 bits
Serial Number: 2adbc708062865a33c5db4a93b94cfc
Not Before: Oct 30, 2023 00:00:00 GMT
Not After: Nov 07, 2024 23:59:59 GMT
Number of certs: 3
Revocation Status: good
OCSP Stapling: Not Supported
Server: nginx
HSTS: max-age=31536000
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: *.sapo.pt

Decode this certificate for verbose information →
Subject Common Name *.sapo.pt
Issuer Common Name GeoTrust TLS RSA CA G1
Issuer Organization DigiCert Inc
Not Before: Oct 30, 2023 00:00:00 GMT
Not After: Nov 07, 2024 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 2adbc708062865a33c5db4a93b94cfc
SHA1 Fingerprint: B9:7C:CA:17:CD:92:7D:62:1C:E2:BC:98:83:D5:9E:D3:A3:0D:D4:93
MD5 Fingerprint: 5D:E1:A1:3D:D7:D5:4C:19:F9:7D:96:2C:CC:73:37:72

Certificate # 2 - Common Name: GeoTrust TLS RSA CA G1

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name GeoTrust TLS RSA CA G1
Subject Organization DigiCert Inc
Issuer Common Name DigiCert Global Root G2
Issuer Organization DigiCert Inc
Not Before: Nov 02, 2017 12:23:37 GMT
Not After: Nov 02, 2027 12:23:37 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: d07782a133fc6f9a57296e131ffd179
SHA1 Fingerprint: 8B:3C:5B:9B:86:7D:4B:E4:6D:1C:B5:A0:1D:45:D6:7D:C8:E9:40:82
MD5 Fingerprint: 05:EE:9C:2A:C6:6F:75:D9:64:AC:5F:1A:3C:7D:E7:5D

Certificate # 3 - Common Name: DigiCert Global Root G2

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name DigiCert Global Root G2
Subject Organization DigiCert Inc
Issuer Common Name DigiCert Global Root G2
Issuer Organization DigiCert Inc
Not Before: Aug 01, 2013 12:00:00 GMT
Not After: Jan 15, 2038 12:00:00 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 33af1e6a711a9a0bb2864b11d09fae5
SHA1 Fingerprint: DF:3C:24:F9:BF:D6:66:76:1B:26:80:73:FE:06:D1:CC:8D:4F:82:A4
MD5 Fingerprint: E4:A6:8A:C8:54:AC:52:42:46:0A:FD:72:48:1B:2A:44

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust TLS RSA CA G1
verify return:1
depth=0 CN = *.sapo.pt
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:CN = *.sapo.pt
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust TLS RSA CA G1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust TLS RSA CA G1
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.sapo.pt

issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust TLS RSA CA G1

---
No client certificate CA names sent
Peer signing digest: SHA512
Peer signature type: RSA
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 4350 bytes and written 444 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 5C6B4EF109EB57A4DBF4DCBADF4AF7C139672FF064DA649A8BC82021CC5FB6C0
    Session-ID-ctx: 
    Master-Key: A973F7C8EC36C2CB1427C7AF0FA81FDDADE7FB918186720AADF5F85FB5E5213BB3C8BB862D2E12F3CC85713C951D1DA6
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 58 2e e3 be 94 8f 65 68-86 15 ca 44 88 e8 1b 41   X.....eh...D...A
    0010 - 34 a7 41 19 cd 53 4f bf-9b 0e a4 c7 ae e4 37 a4   4.A..SO.......7.
    0020 - 15 49 74 8d 04 1c 3d 45-6f 55 af f8 7b 78 cc c3   .It...=EoU..{x..
    0030 - 7d e2 6a 0d 1b ad 43 61-01 39 e6 0c 74 e8 7a 02   }.j...Ca.9..t.z.
    0040 - 9a 2d c5 26 39 45 0f 94-8e 49 fd 33 d1 bb 29 9e   .-.&9E...I.3..).
    0050 - d4 f0 b4 50 83 fb b3 41-85 4d 7a f8 0d eb 03 8b   ...P...A.Mz.....
    0060 - 50 c9 a9 0e 6a 76 1b e8-25 45 8d 63 28 e7 8a 68   P...jv..%E.c(..h
    0070 - e0 be 17 05 c4 39 af 12-38 2a 2b 86 23 27 1c 03   .....9..8*+.#'..
    0080 - 6e 15 1a 16 b7 db e8 f7-86 09 44 44 77 bc cb f4   n.........DDw...
    0090 - ee 4e 94 9b cf 13 7f 17-1a 3c 81 1d 15 54 f0 b4   .N.......<...T..
    00a0 - df 1a d6 f1 f8 d9 1d 68-b6 17 57 e6 a1 ea a6 08   .......h..W.....
    00b0 - cd be 90 3f 8b 06 92 c8-56 4a 54 ca 60 1e 63 c4   ...?....VJT.`.c.

    Start Time: 1714163113
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---
DONE