Namecheap.com

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Matches Common Name or/and SAN
Expired: No (35 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 159.223.195.50
Reverse IP lookup: No records found
Nameserver: ns12.dnsmadeeasy.com.
Nameserver: ns13.dnsmadeeasy.com.
Nameserver: ns11.dnsmadeeasy.com.
Nameserver: ns14.dnsmadeeasy.com.
Nameserver: ns10.dnsmadeeasy.com.
Nameserver: ns15.dnsmadeeasy.com.

General Information

Common Name: surething.com
SANs: DNS:surething.com Total number of SANs: 1
Signature Algorithm: ecdsa-with-SHA384
Key Type: ECDSA (secp256r1)
Key size: 256 bits
Serial Number: 4a9de60865e1544ba83b6d38983ae4b8a5f
Not Before: Sep 16, 2024 11:31:05 GMT
Not After: Dec 15, 2024 11:31:04 GMT
Number of certs: 2
Revocation Status: good
OCSP Stapling: Supported
Server: Caddy, Apache/2.4.10 (Ubuntu)
HSTS: Not Supported
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: surething.com

Decode this certificate for verbose information →
Subject Common Name surething.com
Issuer Common Name E6
Issuer Organization Let's Encrypt
Not Before: Sep 16, 2024 11:31:05 GMT
Not After: Dec 15, 2024 11:31:04 GMT
Signature Algorithm: ecdsa-with-SHA384
Serial Number: 4a9de60865e1544ba83b6d38983ae4b8a5f
SHA1 Fingerprint: 26:B4:C3:F8:15:28:FA:5B:7A:FE:B1:5A:CD:85:E6:BF:0A:F1:69:B4
MD5 Fingerprint: 49:3D:C7:B8:B0:6A:C2:0A:BB:23:C5:E0:05:64:9C:59

Certificate # 2 - Common Name: E6

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name E6
Subject Organization Let's Encrypt
Issuer Common Name ISRG Root X1
Issuer Organization Internet Security Research Group
Not Before: Mar 13, 2024 00:00:00 GMT
Not After: Mar 12, 2027 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: b0573e9173972770dbb487cb3a452b38
SHA1 Fingerprint: C9:4D:C4:83:1A:90:1A:9F:EC:0F:B4:9B:71:BD:49:B5:AA:D4:FA:D0
MD5 Fingerprint: 26:86:4C:28:A4:DE:37:F5:69:C1:EC:87:A0:EC:CB:27

OpenSSL Handshake

depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = E6
verify return:1
depth=0 CN = surething.com
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: C = US, O = Let's Encrypt, CN = E6
    Produced At: Nov  8 17:19:00 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: D47A388041E8E98D07387CECF6B6D8F20FA56431
      Issuer Key Hash: 0DC5CCFD9BEE1405A14C3082A53E5E8AC35809D2
      Serial Number: 04A9DE60865E1544BA83B6D38983AE4B8A5F
    Cert Status: good
    This Update: Nov  8 17:19:00 2024 GMT
    Next Update: Nov 15 17:18:58 2024 GMT

    Signature Algorithm: ecdsa-with-SHA384
         30:64:02:30:3c:ed:71:c6:02:38:25:fd:7c:b4:7e:60:97:f7:
         65:18:0c:a0:9f:a5:88:93:80:97:1f:98:aa:87:ad:66:b0:84:
         e2:4d:76:82:45:c0:8a:67:b8:ba:a6:7a:b4:6a:1d:2c:02:30:
         4d:e9:08:0c:9f:43:0b:dc:6d:32:bd:5c:dc:c1:33:b9:86:33:
         ab:91:43:8d:d4:2d:89:ab:78:f1:c9:eb:69:dc:ae:33:5b:ea:
         ec:1b:ab:59:54:14:3a:08:5e:13:3a:a0
======================================
---
Certificate chain
 0 s:CN = surething.com
   i:C = US, O = Let's Encrypt, CN = E6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = Let's Encrypt, CN = E6
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = surething.com

issuer=C = US, O = Let's Encrypt, CN = E6

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 2722 bytes and written 388 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_128_GCM_SHA256
    Session-ID: 4F70456F72756475F9DA2EAB3BF7407CF45FE850DC9DE214F57BEEC288B5094B
    Session-ID-ctx: 
    Resumption PSK: E07BDB39DC1AC51AA78955722E78B9F55ADEC41D2D3A83E0604C7F5AEB5BA7B4
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 604800 (seconds)
    TLS session ticket:
    0000 - fa 4a fa bc f6 a6 e3 0f-38 5b be 68 67 db c5 2a   .J......8[.hg..*
    0010 - aa 3b 70 43 f7 81 07 05-79 42 75 c0 d2 5b c0 58   .;pC....yBu..[.X
    0020 - 8c b4 8d 55 7f 25 dc 46-ad 6b 3e 51 77 0b 2b 7b   ...U.%.F.k>Qw.+{
    0030 - fa 02 6d 20 ec 88 3d b6-6b 93 d2 68 0b 1e c3 c0   ..m ..=.k..h....
    0040 - 0d be c8 50 5a 3e 76 9d-42 a4 9f 06 67 c0 ec bc   ...PZ>v.B...g...
    0050 - 9a 05 f0 fb 1f b1 f4 e1-54 8b 8c 93 38 32 8e 5e   ........T...82.^
    0060 - 30 c3 dc 2f 94 81 1a 50-1a                        0../...P.

    Start Time: 1731226074
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK