SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname:	Matches Common Name or/and SAN
Expired:	No (170 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	We were unable to verify this certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	The chain doesn't contain any intermediate certificates
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	200.198.59.152
Reverse IP lookup:	No records found
Nameserver:	rubi.hemominas.mg.gov.br.
Nameserver:	nss1.prodemge.gov.br.

General Information

Common Name:	*.hemominas.mg.gov.br
SANs:	DNS:*.hemominas.mg.gov.brDNS:hemominas.mg.gov.br Total number of SANs: 2
Signature Algorithm:	sha384WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	495548feb7ac69816c37d5d845417118
Not Before:	Dec 22, 2023 00:00:00 GMT
Not After:	Dec 21, 2024 23:59:59 GMT
Number of certs:	1
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	Apache/2.4.29 (Win32) OpenSSL/1.0.2n PHP/7.1.12
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.hemominas.mg.gov.br

Decode this certificate for verbose information →

Subject Common Name	*.hemominas.mg.gov.br
Issuer Common Name	Valid Certificadora RSA DV SSL CA
Issuer Organization	Valid Certificadora Digital LTDA
Not Before:	Dec 22, 2023 00:00:00 GMT
Not After:	Dec 21, 2024 23:59:59 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	495548feb7ac69816c37d5d845417118
SHA1 Fingerprint:	A1:56:70:40:4B:B0:50:CF:F4:8F:58:23:6B:9C:0D:EA:B6:21:7D:FF
MD5 Fingerprint:	04:83:B9:FB:A8:FC:CD:03:18:CA:71:BB:99:70:28:C7

OpenSSL Handshake

depth=0 CN = *.hemominas.mg.gov.br
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = *.hemominas.mg.gov.br
verify error:num=21:unable to verify the first certificate
verify return:1
depth=0 CN = *.hemominas.mg.gov.br
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:CN = *.hemominas.mg.gov.br
   i:C = BR, O = Valid Certificadora Digital LTDA, CN = Valid Certificadora RSA DV SSL CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.hemominas.mg.gov.br

issuer=C = BR, O = Valid Certificadora Digital LTDA, CN = Valid Certificadora RSA DV SSL CA

---
No client certificate CA names sent
Peer signing digest: SHA512
Peer signature type: RSA
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 2384 bytes and written 460 bytes
Verification error: unable to verify the first certificate
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 55C20EFB8F45243BC5019580E062C91453CA73919022FE24B9F88F89157EFA6D
    Session-ID-ctx: 
    Master-Key: B6944EEED11D4B447DE8BF4391E9BD362E91843A520FF6CA2C896EE58522CBA32FC1E478D5640944C10FE62A991AA8D0
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - bb d0 9a f8 08 9c 0b c7-c8 7c 64 dd ef c1 bc d9   .........|d.....
    0010 - bb ff 3a ae e3 65 e4 49-a4 9f 23 13 8b 70 89 5e   ..:..e.I..#..p.^
    0020 - 22 e2 67 56 87 b1 0f 45-7c 2e ee e7 68 c4 42 bc   ".gV...E|...h.B.
    0030 - 9f a0 14 7e ea 37 61 80-59 cb 6b a5 ad c2 36 5a   ...~.7a.Y.k...6Z
    0040 - 65 53 8e 61 39 51 1e 17-01 7e 2e a7 e7 e3 73 07   eS.a9Q...~....s.
    0050 - 4c 3f 54 bb 54 ce e7 7e-b6 01 dd 22 c6 22 dc 1f   L?T.T..~..."."..
    0060 - 90 87 b5 04 54 24 82 1f-6c 1a 24 04 d8 68 e2 c9   ....T$..l.$..h..
    0070 - 1e 34 0e 05 61 aa 4b 13-bd 32 7a 22 be 58 38 17   .4..a.K..2z".X8.
    0080 - 3d e5 75 89 b4 78 83 31-ba bd 5d 81 1e 09 4c a7   =.u..x.1..]...L.
    0090 - 08 9e 0d a3 57 11 6b d5-e0 24 14 d3 67 62 b3 1b   ....W.k..$..gb..
    00a0 - 18 30 60 1e e9 44 4f 94-ee 52 96 9f 29 35 f8 48   .0`..DO..R..)5.H
    00b0 - 7b b6 32 b7 57 21 14 f3-ea 52 2b 7a ff d0 40 b8   {.2.W!...R+z..@.
    00c0 - 47 ef 63 a8 00 59 b4 de-ef 4e 15 aa 94 ed 29 65   G.c..Y...N....)e

    Start Time: 1720125737
    Timeout   : 7200 (sec)
    Verify return code: 21 (unable to verify the first certificate)
    Extended master secret: no
---
DONE