SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.
Hostname: Matches Common Name or/and SAN
Expired: No (711 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 54.158.255.40
Reverse IP lookup: ec2-54-158-255-40.compute-1.amazonaws.com.
Nameserver: ns-1208.awsdns-23.org.
Nameserver: ns-1562.awsdns-03.co.uk.
Nameserver: ns-185.awsdns-23.com.
Nameserver: ns-724.awsdns-26.net.

General Information

Common Name: substantiator.com
SANs: DNS:substantiator.comDNS:www.substantiator.com
Total number of SANs: 2
Signature Algorithm: sha256WithRSAEncryption
Key Type: RSA
Key size: 2048 bits
Serial Number: 7235468a8a3b499d7ad5632abac464a9
Not Before: Aug 05, 2019 00:00:00 GMT
Not After: Aug 04, 2021 23:59:59 GMT
Number of certs: 3
Revocation Status: good
OCSP Stapling: Not Supported
Server: Apache
HSTS: Not Supported
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: substantiator.com

Decode this certificate for verbose information →
Subject Common Name substantiator.com
Issuer Common Name Sectigo RSA Domain Validation Secure Server CA
Issuer Organization Sectigo Limited
Not Before: Aug 05, 2019 00:00:00 GMT
Not After: Aug 04, 2021 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 7235468a8a3b499d7ad5632abac464a9
SHA1 Fingerprint: B9:28:21:CE:E4:6C:F5:C7:10:CC:C5:AD:98:EF:3B:51:4F:95:9E:F0
MD5 Fingerprint: 62:5F:A0:A8:3F:35:CF:A5:FF:B0:65:05:C1:E9:1A:01

Certificate # 2 - Common Name: Sectigo RSA Domain Validation Secure Server CA

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name Sectigo RSA Domain Validation Secure Server CA
Subject Organization Sectigo Limited
Issuer Common Name USERTrust RSA Certification Authority
Issuer Organization The USERTRUST Network
Not Before: Nov 02, 2018 00:00:00 GMT
Not After: Dec 31, 2030 23:59:59 GMT
Signature Algorithm: sha384WithRSAEncryption
Serial Number: 7d5b5126b476ba11db74160bbc530da7
SHA1 Fingerprint: 33:E4:E8:08:07:20:4C:2B:61:82:A3:A1:4B:59:1A:CD:25:B5:F0:DB
MD5 Fingerprint: AD:AB:5C:4D:F0:31:FB:92:99:F7:1A:DA:7E:18:F6:13

Certificate # 3 - Common Name: USERTrust RSA Certification Authority

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name USERTrust RSA Certification Authority
Subject Organization The USERTRUST Network
Issuer Common Name USERTrust RSA Certification Authority
Issuer Organization The USERTRUST Network
Not Before: Feb 01, 2010 00:00:00 GMT
Not After: Jan 18, 2038 23:59:59 GMT
Signature Algorithm: sha384WithRSAEncryption
Serial Number: 1fd6d30fca3ca51a81bbc640e35032d
SHA1 Fingerprint: 2B:8F:1B:57:33:0D:BB:A2:D0:7A:6C:51:F7:0E:E9:0D:DA:B9:AD:8E
MD5 Fingerprint: 1B:FE:69:D1:91:B7:19:33:A3:72:A8:0F:E1:55:E5:B5

OpenSSL Handshake

depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
verify return:1
depth=0 OU = Domain Control Validated, OU = PositiveSSL, CN = substantiator.com
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:/OU=Domain Control Validated/OU=PositiveSSL/CN=substantiator.com
   i:/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
   i:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority
   i:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=substantiator.com
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 5433 bytes and written 337 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 360739AC214F062A95CC288553EA67FC1CA8EACA94893AFC5AE50F1DF91310A4
    Session-ID-ctx: 
    Master-Key: 05880BC77DEA0D9A64EB9775FF70DA85C552950B60ACBDC3C218243477E90C1AD9A411A3C718AC925E463E5AA62CA724
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - d0 ff ae 14 9b 01 d9 52-a6 f0 5c 24 32 94 6a b6   .......R..\$2.j.
    0010 - c1 07 01 93 2f 0d f7 03-33 90 83 a0 eb c2 95 94   ..../...3.......
    0020 - d9 25 a3 12 63 e2 d1 cd-db a9 86 60 cd 43 26 24   .%..c......`.C&$
    0030 - a7 1b 67 97 58 a9 5f 88-69 6d e8 24 02 b8 e9 8e   ..g.X._.im.$....
    0040 - 17 d8 93 ea ea 8a 69 f4-10 a6 e6 8d 83 e4 ef 7c   ......i........|
    0050 - 5b 2d 35 3f 26 f1 78 98-68 b6 64 40 54 f1 eb e8   [-5?&.x.h.d@T...
    0060 - 10 c0 1d 96 9b 97 75 b2-c1 87 7b 6d e7 7b 5f d2   ......u...{m.{_.
    0070 - 9f 80 ad 38 c0 00 7d e5-6b b3 87 6e e6 4c 22 be   ...8..}.k..n.L".
    0080 - f4 94 96 db 38 7b fb c2-4e c1 79 d7 8d da 63 ab   ....8{..N.y...c.
    0090 - f2 71 7a 4d d3 10 6d 84-93 8b 24 fe 05 cf 23 f7   .qzM..m...$...#.
    00a0 - c7 64 6e cc c7 6a 38 6a-83 a7 0a 39 c6 91 9f 15   .dn..j8j...9....
    00b0 - a6 14 ad 6e 9e 7c b9 2c-8b c0 3f 53 e2 e9 0a 69   ...n.|.,..?S...i
    00c0 - 22 f6 fa 5b 44 99 6c e0-a8 33 43 dd 9c 95 4e 7c   "..[D.l..3C...N|

    Start Time: 1566673499
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---
DONE