SSL Checker
Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.
Report
It's all good. We have not detected any issues.
| Hostname: | done Matches Common Name or/and SAN |
| Expired: | done No (46 days till expiration) |
| Public Key: | done We were unable to find any issues in the public key of end-entity certificate |
| Trusted: | done Yes, we were able to verify the certificate |
| Self-Signed: | done No, the end-entity certificate is not self-signed |
| Chain Issues: | done No, we were unable to detect any issues in the certificate chain sent by the server |
| Weak signatures: | done No, certificates sent by the server were not signed utilizing a weak hash function |
| OCSP Status: | done OCSP Responder returned "good" status for the end-entity certificate |
DNS Information
| Resolves To: | 159.223.195.50 |
| Reverse IP lookup: | No records found |
| Nameserver: | ns13.dnsmadeeasy.com. |
| Nameserver: | ns14.dnsmadeeasy.com. |
| Nameserver: | ns12.dnsmadeeasy.com. |
| Nameserver: | ns10.dnsmadeeasy.com. |
| Nameserver: | ns11.dnsmadeeasy.com. |
| Nameserver: | ns15.dnsmadeeasy.com. |
General Information
| Common Name: | surething.com |
| SANs: | DNS:surething.com Total number of SANs: 1 |
| Signature Algorithm: | ecdsa-with-SHA384 |
| Key Type: | ECDSA (secp256r1) |
| Key size: | 256 bits |
| Serial Number: | 4a9de60865e1544ba83b6d38983ae4b8a5f |
| Not Before: | Sep 16, 2024 11:31:05 GMT |
| Not After: | Dec 15, 2024 11:31:04 GMT |
| Number of certs: | 2 |
| Revocation Status: | good |
| OCSP Stapling: | Supported |
| Server: | Caddy, Apache/2.4.10 (Ubuntu) |
| HSTS: | Not Supported |
| HPKP: | Not Supported |
Chain Information
Certificate # 1 - Common Name: surething.com
Decode this certificate for verbose information → launch| Subject Common Name | surething.com |
| Issuer Common Name | E6 |
| Issuer Organization | Let's Encrypt |
| Not Before: | Sep 16, 2024 11:31:05 GMT |
| Not After: | Dec 15, 2024 11:31:04 GMT |
| Signature Algorithm: | ecdsa-with-SHA384 |
| Serial Number: | 4a9de60865e1544ba83b6d38983ae4b8a5f |
| SHA1 Fingerprint: | 26:B4:C3:F8:15:28:FA:5B:7A:FE:B1:5A:CD:85:E6:BF:0A:F1:69:B4 |
| MD5 Fingerprint: | 49:3D:C7:B8:B0:6A:C2:0A:BB:23:C5:E0:05:64:9C:59 |
Certificate # 2 - Common Name: E6
Decode this certificate for verbose information → launch| In place? | Yes, this certificate directly certifies the preceding one |
| Subject Common Name | E6 |
| Subject Organization | Let's Encrypt |
| Issuer Common Name | ISRG Root X1 |
| Issuer Organization | Internet Security Research Group |
| Not Before: | Mar 13, 2024 00:00:00 GMT |
| Not After: | Mar 12, 2027 23:59:59 GMT |
| Signature Algorithm: | sha256WithRSAEncryption |
| Serial Number: | b0573e9173972770dbb487cb3a452b38 |
| SHA1 Fingerprint: | C9:4D:C4:83:1A:90:1A:9F:EC:0F:B4:9B:71:BD:49:B5:AA:D4:FA:D0 |
| MD5 Fingerprint: | 26:86:4C:28:A4:DE:37:F5:69:C1:EC:87:A0:EC:CB:27 |
OpenSSL Handshake
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = E6
verify return:1
depth=0 CN = surething.com
verify return:1
CONNECTED(00000003)
OCSP response:
======================================
OCSP Response Data:
OCSP Response Status: successful (0x0)
Response Type: Basic OCSP Response
Version: 1 (0x0)
Responder Id: C = US, O = Let's Encrypt, CN = E6
Produced At: Oct 26 07:19:00 2024 GMT
Responses:
Certificate ID:
Hash Algorithm: sha1
Issuer Name Hash: D47A388041E8E98D07387CECF6B6D8F20FA56431
Issuer Key Hash: 0DC5CCFD9BEE1405A14C3082A53E5E8AC35809D2
Serial Number: 04A9DE60865E1544BA83B6D38983AE4B8A5F
Cert Status: good
This Update: Oct 26 07:19:00 2024 GMT
Next Update: Nov 2 07:18:58 2024 GMT
Signature Algorithm: ecdsa-with-SHA384
30:65:02:31:00:a6:24:8e:b1:5c:71:5e:ca:ff:38:3d:00:77:
26:6c:e7:15:a0:82:0e:e1:38:a5:d0:dd:d8:2b:7f:dc:f3:b3:
0d:f8:3b:b1:23:5a:5d:28:02:61:e2:7a:57:01:15:6c:d4:02:
30:5e:31:ad:7a:0b:03:d3:35:86:8d:c2:0b:50:5f:a1:f7:f9:
11:09:55:49:51:ef:c9:86:a8:4a:b0:78:ec:78:0a:c6:b4:1e:
45:a3:46:4c:f1:61:c7:88:37:7f:fa:f6:9a
======================================
---
Certificate chain
0 s:CN = surething.com
i:C = US, O = Let's Encrypt, CN = E6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
1 s:C = US, O = Let's Encrypt, CN = E6
i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
-----BEGIN CERTIFICATE-----
MIIEVzCCAj+gAwIBAgIRALBXPpFzlydw27SHyzpFKzgwDQYJKoZIhvcNAQELBQAw
TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjQwMzEzMDAwMDAw
WhcNMjcwMzEyMjM1OTU5WjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg
RW5jcnlwdDELMAkGA1UEAxMCRTYwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATZ8Z5G
h/ghcWCoJuuj+rnq2h25EqfUJtlRFLFhfHWWvyILOR/VvtEKRqotPEoJhC6+QJVV
6RlAN2Z17TJOdwRJ+HB7wxjnzvdxEP6sdNgA1O1tHHMWMxCcOrLqbGL0vbijgfgw
gfUwDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcD
ATASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBSTJ0aYA6lRaI6Y1sRCSNsj
v1iU0jAfBgNVHSMEGDAWgBR5tFnme7bl5AFzgAiIyBpY9umbbjAyBggrBgEFBQcB
AQQmMCQwIgYIKwYBBQUHMAKGFmh0dHA6Ly94MS5pLmxlbmNyLm9yZy8wEwYDVR0g
BAwwCjAIBgZngQwBAgEwJwYDVR0fBCAwHjAcoBqgGIYWaHR0cDovL3gxLmMubGVu
Y3Iub3JnLzANBgkqhkiG9w0BAQsFAAOCAgEAfYt7SiA1sgWGCIpunk46r4AExIRc
MxkKgUhNlrrv1B21hOaXN/5miE+LOTbrcmU/M9yvC6MVY730GNFoL8IhJ8j8vrOL
pMY22OP6baS1k9YMrtDTlwJHoGby04ThTUeBDksS9RiuHvicZqBedQdIF65pZuhp
eDcGBcLiYasQr/EO5gxxtLyTmgsHSOVSBcFOn9lgv7LECPq9i7mfH3mpxgrRKSxH
pOoZ0KXMcB+hHuvlklHntvcI0mMMQ0mhYj6qtMFStkF1RpCG3IPdIwpVCQqu8GV7
s8ubknRzs+3C/Bm19RFOoiPpDkwvyNfvmQ14XkyqqKK5oZ8zhD32kFRQkxa8uZSu
h4aTImFxknu39waBxIRXE4jKxlAmQc4QjFZoq1KmQqQg0J/1JF8RlFvJas1VcjLv
YlvUB2t6npO6oQjB3l+PNf0DpQH7iUx3Wz5AjQCi6L25FjyE06q6BZ/QlmtYdl/8
ZYao4SRqPEs/6cAiF+Qf5zg2UkaWtDphl1LKMuTNLotvsX99HP69V2faNyegodQ0
LyTApr/vT01YPE46vNsDLgK+4cL6TrzC/a4WcmF5SRJ938zrv/duJHLXQIku5v0+
EwOy59Hdm0PT/Er/84dDV0CSjdR/2XuZM3kpysSKLgD1cKiDA+IRguODCxfO9cyY
Ig46v9mFmBvyH04=
-----END CERTIFICATE-----
---
Server certificate
subject=CN = surething.com
issuer=C = US, O = Let's Encrypt, CN = E6
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 2723 bytes and written 388 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
Protocol : TLSv1.3
Cipher : TLS_AES_128_GCM_SHA256
Session-ID: C10F46EF63C46363837F56B5FCF3FE2710AD076F592B60373E9254422846F26E
Session-ID-ctx:
Resumption PSK: 6ED64FCEF07F6A7488205D136EDA73D5B6503EBA2756334B15C7B6DA2C773DB8
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 604800 (seconds)
TLS session ticket:
0000 - 8e 26 c3 63 7e bd 45 50-fc c1 f8 b1 a4 01 2e 0f .&.c~.EP........
0010 - 45 98 04 20 b9 d3 d5 a6-86 eb de f1 b7 8b ea 56 E.. ...........V
0020 - b6 8c 1a bf eb de fd 20-68 ce 24 35 c5 7e 51 fd ....... h.$5.~Q.
0030 - df 52 30 59 6c a2 af bb-29 ae b1 d6 00 93 ab be .R0Yl...).......
0040 - 73 dc 1c f5 ea 88 e1 a6-13 0c 84 3c 25 f8 ae 4c s..........<%..L
0050 - 51 84 c8 81 5f 3c 64 ff-b4 e9 c0 f4 88 1e 07 2a Q..._<d........*
0060 - 52 2c 4b ad 72 39 2e 59-f0 R,K.r9.Y.
Start Time: 1730227846
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
Max Early Data: 0
---
read R BLOCK