Namecheap.com

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Matches Common Name or/and SAN
Expired: No (174 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 137.200.4.16
Reverse IP lookup: No records found
Nameserver: dns6.ssa.gov.
Nameserver: dns1.ssa.gov.
Nameserver: dns2.ssa.gov.
Nameserver: dns5.ssa.gov.

General Information

Common Name: www.ssa.gov
SANs: DNS:www.ssa.govDNS:ai.ssa.govDNS:best.ssa.govDNS:beta.ssa.govDNS:edata.ssa.govDNS:eme.ssa.govDNS:faq.ssa.govDNS:faq-es.ssa.govDNS:ftp.ssa.govDNS:hspd12.ssa.govDNS:ipv6.segurosocial.govDNS:ipv6.socialsecurity.govDNS:ipv6.ssa.govDNS:myaccount.socialsecurity.govDNS:myaccount.ssa.govDNS:policy.ssa.govDNS:prisonedata.ssa.govDNS:secure.ssa.govDNS:segurosocial.govDNS:signup.socialsecurity.govDNS:signup.ssa.govDNS:socialsecurity.govDNS:ssa.govDNS:wwwtest-origin.ssa.govDNS:wwwtest.ssa.govDNS:www-origin.ssa.govDNS:www.myaccount.socialsecurity.govDNS:www.open.socialsecurity.govDNS:www.open.ssa.govDNS:www.segurosocial.govDNS:www.signup.socialsecurity.govDNS:www.socialsecurity.gov Total number of SANs: 32
Organization: Social Security Administration
Locality: Baltimore
Signature Algorithm: sha256WithRSAEncryption
Key Type: RSA
Key size: 2048 bits
Serial Number: 627d69801b5b581087b8a11f69ff990
Not Before: Sep 28, 2023 00:00:00 GMT
Not After: Oct 17, 2024 23:59:59 GMT
Number of certs: 2
Revocation Status: good
OCSP Stapling: Not Supported
Server: Not Provided
HSTS: max-age=31536000
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: www.ssa.gov

Decode this certificate for verbose information →
Subject Common Name www.ssa.gov
Subject Organization Social Security Administration
Issuer Common Name DigiCert EV RSA CA G2
Issuer Organization DigiCert Inc
Not Before: Sep 28, 2023 00:00:00 GMT
Not After: Oct 17, 2024 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 627d69801b5b581087b8a11f69ff990
SHA1 Fingerprint: BA:C2:E4:E6:E3:F7:5F:10:89:5E:4A:6C:D1:D8:1A:4A:93:0B:EA:E0
MD5 Fingerprint: 47:D6:B3:02:38:DB:7C:1F:52:9B:FC:BD:5B:80:3C:8F

Certificate # 2 - Common Name: DigiCert EV RSA CA G2

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name DigiCert EV RSA CA G2
Subject Organization DigiCert Inc
Issuer Common Name DigiCert Global Root G2
Issuer Organization DigiCert Inc
Not Before: Jul 02, 2020 12:42:50 GMT
Not After: Jul 02, 2030 12:42:50 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 1678f1fef882255d8b0a70e6b7bb220
SHA1 Fingerprint: 09:0A:16:F9:BA:16:00:1B:2E:C1:30:F8:05:23:E5:B5:EB:25:91:58
MD5 Fingerprint: 51:25:85:FE:60:C0:F0:F9:98:8B:2A:94:52:6D:4D:82

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2
verify return:1
depth=0 jurisdictionC = US, businessCategory = Government entity, serialNumber = Government Entity, C = US, ST = Maryland, L = Baltimore, O = Social Security Administration, CN = www.ssa.gov
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:jurisdictionC = US, businessCategory = Government entity, serialNumber = Government Entity, C = US, ST = Maryland, L = Baltimore, O = Social Security Administration, CN = www.ssa.gov
   i:C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2
-----BEGIN CERTIFICATE-----
MIIJQjCCCCqgAwIBAgIQBifWmAG1tYEIe4oR9p/5kDANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBFViBSU0EgQ0EgRzIwHhcNMjMwOTI4MDAwMDAwWhcNMjQxMDE3MjM1
OTU5WjCBwDETMBEGCysGAQQBgjc8AgEDEwJVUzEaMBgGA1UEDwwRR292ZXJubWVu
dCBlbnRpdHkxGjAYBgNVBAUTEUdvdmVybm1lbnQgRW50aXR5MQswCQYDVQQGEwJV
UzERMA8GA1UECBMITWFyeWxhbmQxEjAQBgNVBAcTCUJhbHRpbW9yZTEnMCUGA1UE
ChMeU29jaWFsIFNlY3VyaXR5IEFkbWluaXN0cmF0aW9uMRQwEgYDVQQDEwt3d3cu
c3NhLmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMzb3S8daLDP
3N+acnCBSZmAIzhKKUaBKoH40TqDxDYLoS7g92b4B2me4L2ZHEs5cp3EnZld4Ww1
uim6RzOtLAhpQ8K22Gi5RDgKeJPwP9tqzb3rIOpecRZ129KXDheKTnopUuZFDZ4x
R/zsM1PoYyO3CelsQlsYu+SshlSaVi/PqvcpWOBNlRqpsHNKf4nnghUeOHi1CZqo
CvpgwVX9tB2taRCNcLiYO/7CN7pXLR4gnfTVRsgRUid5fU81cb9Tgy4jneTCC9u/
sYDBIUMJuybQNtmSQtn105WL/0+hRrz4lR3K/76CIIa/EAgkoQQ4QUZi7yTqHAiC
Rf2KkYaND38CAwEAAaOCBbEwggWtMB8GA1UdIwQYMBaAFGpOUL+YaJ1beyB11FkB
eUhmkjIGMB0GA1UdDgQWBBSLnZ7cSCzxf1y3tDKwYPh0FCkrUTCCAnEGA1UdEQSC
AmgwggJkggt3d3cuc3NhLmdvdoIKYWkuc3NhLmdvdoIMYmVzdC5zc2EuZ292ggxi
ZXRhLnNzYS5nb3aCDWVkYXRhLnNzYS5nb3aCC2VtZS5zc2EuZ292ggtmYXEuc3Nh
LmdvdoIOZmFxLWVzLnNzYS5nb3aCC2Z0cC5zc2EuZ292gg5oc3BkMTIuc3NhLmdv
doIVaXB2Ni5zZWd1cm9zb2NpYWwuZ292ghdpcHY2LnNvY2lhbHNlY3VyaXR5Lmdv
doIMaXB2Ni5zc2EuZ292ghxteWFjY291bnQuc29jaWFsc2VjdXJpdHkuZ292ghFt
eWFjY291bnQuc3NhLmdvdoIOcG9saWN5LnNzYS5nb3aCE3ByaXNvbmVkYXRhLnNz
YS5nb3aCDnNlY3VyZS5zc2EuZ292ghBzZWd1cm9zb2NpYWwuZ292ghlzaWdudXAu
c29jaWFsc2VjdXJpdHkuZ292gg5zaWdudXAuc3NhLmdvdoISc29jaWFsc2VjdXJp
dHkuZ292ggdzc2EuZ292ghZ3d3d0ZXN0LW9yaWdpbi5zc2EuZ292gg93d3d0ZXN0
LnNzYS5nb3aCEnd3dy1vcmlnaW4uc3NhLmdvdoIgd3d3Lm15YWNjb3VudC5zb2Np
YWxzZWN1cml0eS5nb3aCG3d3dy5vcGVuLnNvY2lhbHNlY3VyaXR5LmdvdoIQd3d3
Lm9wZW4uc3NhLmdvdoIUd3d3LnNlZ3Vyb3NvY2lhbC5nb3aCHXd3dy5zaWdudXAu
c29jaWFsc2VjdXJpdHkuZ292ghZ3d3cuc29jaWFsc2VjdXJpdHkuZ292MEoGA1Ud
IARDMEEwCwYJYIZIAYb9bAIBMDIGBWeBDAEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6
Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9j
cmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEVWUlNBQ0FHMi5jcmwwNKAyoDCGLmh0
dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEVWUlNBQ0FHMi5jcmwwcwYI
KwYBBQUHAQEEZzBlMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j
b20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdp
Q2VydEVWUlNBQ0FHMi5jcnQwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIE
ggFvBIIBawFpAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGK
3U+ViQAABAMASDBGAiEAhhuOSs2N+ZNZoq9i82hi8+fmpWa5ExbBKoaeC2Qs+MYC
IQD7Z6O7/ELS5LsDv8i3NjKAzt18ycUlLtWDMfjbiAOxrAB2AEiw42vapkc0D+Vq
AvqdMOscUgHLVt0sgdm7v6s52IRzAAABit1PlWQAAAQDAEcwRQIhAJOCBZX0GUMg
AZQFA/1Ste0/AkLKxf8IjFrxSsBthIe7AiBTHUva8K2CFbqxmVDrcF0OspQhaUKK
k0EBaotnZdwDLwB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAAB
it1PlXIAAAQDAEcwRQIgS6CqknH8zjb9ad/WvDsLwYkMXjZn9oU/1TiqWzY8NPEC
IQCW2KtgMMbl/Mw5zaHNQ6y9svs2kVh2SRC2Fgee1hAVBDANBgkqhkiG9w0BAQsF
AAOCAQEAqoQx5o1Wj08kSQunbqAH29xoK4baopQoRjeksKkjJtldCre13Z9vXHAP
a5QXZNW7ohTMBPruV9K/pmekWCwsBIYQKahrrURCJkI3sER+MQ1z9HlWGef1WRYn
VJgh801QJaAfX7+Gf28WuU9wwEUGXCV2nyhx8N+hj0KnnGm9wMg2gc79SQXDpmE2
+OaQbMDXLHzqBlP9FhTdVt54CwEjXx5sjdsOwuJkt/q/A/8+o5EQRxLhL7ct5Zez
jloCbG1rR1NuYvl3219Gc9YpLCAYga0jUsOYARh6ZyJOuH/SEeqg9VN++8tX8HKA
MwWfVPrakr+YW2s/UhIVBDhVZwVdaQ==
-----END CERTIFICATE-----
 1 s:C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIQAWePH++IIlXYsKcOa3uyIDANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0yMDA3MDIxMjQyNTBaFw0zMDA3MDIxMjQyNTBaMEQxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxHjAcBgNVBAMTFURpZ2lDZXJ0IEVWIFJT
QSBDQSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0eZsx/neTr
f4MXJz0R2fJTIDfN8AwUAu7hy4gI0vp7O8LAAHx2h3bbf8wl+pGMSxaJK9ffDDCD
63FqqFBqE9eTmo3RkgQhlu55a04LsXRLcK6crkBOO0djdonybmhrfGrtBqYvbRat
xenkv0Sg4frhRl4wYh4dnW0LOVRGhbt1G5Q19zm9CqMlq7LlUdAE+6d3a5++ppfG
cnWLmbEVEcLHPAnbl+/iKauQpQlU1Mi+wEBnjE5tK8Q778naXnF+DsedQJ7NEi+b
QoonTHEz9ryeEcUHuQTv7nApa/zCqes5lXn1pMs4LZJ3SVgbkTLj+RbBov/uiwTX
tkBEWawvZH8CAwEAAaOCAgswggIHMB0GA1UdDgQWBBRqTlC/mGidW3sgddRZAXlI
ZpIyBjAfBgNVHSMEGDAWgBROIlQgGJXm427mD/r6uRLtBhePOTAOBgNVHQ8BAf8E
BAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBIGA1UdEwEB/wQI
MAYBAf8CAQAwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz
cC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGln
aWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDA3oDWgM4YxaHR0cDov
L2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDCBzgYD
VR0gBIHGMIHDMIHABgRVHSAAMIG3MCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMIGKBggrBgEFBQcCAjB+DHxBbnkgdXNlIG9mIHRoaXMg
Q2VydGlmaWNhdGUgY29uc3RpdHV0ZXMgYWNjZXB0YW5jZSBvZiB0aGUgUmVseWlu
ZyBQYXJ0eSBBZ3JlZW1lbnQgbG9jYXRlZCBhdCBodHRwczovL3d3dy5kaWdpY2Vy
dC5jb20vcnBhLXVhMA0GCSqGSIb3DQEBCwUAA4IBAQBSMgrCdY2+O9spnYNvwHiG
+9lCJbyELR0UsoLwpzGpSdkHD7pVDDFJm3//B8Es+17T1o5Hat+HRDsvRr7d3MEy
o9iXkkxLhKEgApA2Ft2eZfPrTolc95PwSWnn3FZ8BhdGO4brTA4+zkPSKoMXi/X+
WLBNN29Z/nbCS7H/qLGt7gViEvTIdU8x+H4l/XigZMUDaVmJ+B5d7cwSK7yOoQdf
oIBGmA5Mp4LhMzo52rf//kXPfE3wYIZVHqVuxxlnTkFYmffCX9/Lon7SWaGdg6Rc
k4RHhHLWtmz2lTZ5CEo2ljDsGzCFGJP7oT4q6Q8oFC38irvdKIJ95cUxYzj4tnOI
-----END CERTIFICATE-----
---
Server certificate
subject=jurisdictionC = US, businessCategory = Government entity, serialNumber = Government Entity, C = US, ST = Maryland, L = Baltimore, O = Social Security Administration, CN = www.ssa.gov

issuer=C = US, O = DigiCert Inc, CN = DigiCert EV RSA CA G2

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 4234 bytes and written 444 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 2A80EC5BFF45E0BE1348AD0F668D8846025F19CC782A1068EF2B4F15361DD857
    Session-ID-ctx: 
    Master-Key: D459ADCCF0CEF64629FBB1F10A1CDBEFC628466A1A71EDCED95EACA40AB7E3C1E536748C5332DD6E227ED04A7471295D
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1714152445
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---
DONE