SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (14 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	98.142.239.91
Reverse IP lookup:	vidayestilo.terra.com.mx.
Nameserver:	a24-67.akam.net.
Nameserver:	a1-19.akam.net.
Nameserver:	a6-66.akam.net.
Nameserver:	a11-66.akam.net.
Nameserver:	a28-64.akam.net.
Nameserver:	a13-65.akam.net.

General Information

Common Name:	*.terra.com.mx
SANs:	DNS:*.terra.com.mxDNS:terra.com.mx Total number of SANs: 2
Organization:	Terra Networks Brasil S.A.
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	dc5d5c1d59be5ba2459c73745c67213
Not Before:	May 11, 2023 00:00:00 GMT
Not After:	May 10, 2024 23:59:59 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Supported
Server:	Microsoft-IIS/8.5
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.terra.com.mx

Decode this certificate for verbose information →

Subject Common Name	*.terra.com.mx
Subject Organization	Terra Networks Brasil S.A.
Issuer Common Name	Sectigo RSA Organization Validation Secure Server CA
Issuer Organization	Sectigo Limited
Not Before:	May 11, 2023 00:00:00 GMT
Not After:	May 10, 2024 23:59:59 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	dc5d5c1d59be5ba2459c73745c67213
SHA1 Fingerprint:	06:F7:E2:A1:9F:29:85:9E:45:D4:74:A8:D4:36:B1:04:22:6D:C2:A5
MD5 Fingerprint:	8F:56:D0:6C:65:3C:A6:D7:6F:1C:36:7F:E6:B7:2B:CE

Certificate # 2 - Common Name: Sectigo RSA Organization Validation Secure Server CA

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	Sectigo RSA Organization Validation Secure Server CA
Subject Organization	Sectigo Limited
Issuer Common Name	USERTrust RSA Certification Authority
Issuer Organization	The USERTRUST Network
Not Before:	Nov 02, 2018 00:00:00 GMT
Not After:	Dec 31, 2030 23:59:59 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	137d539caa7c31a9a433701968847a8d
SHA1 Fingerprint:	40:CE:F3:04:6C:91:6E:D7:AE:55:7F:60:E7:68:42:82:8B:51:DE:53
MD5 Fingerprint:	88:6E:A7:8B:53:0E:0F:D5:BD:A4:E1:25:27:AB:6A:2C

OpenSSL Handshake

depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Organization Validation Secure Server CA
verify return:1
depth=0 C = BR, ST = S\C3\A3o Paulo, O = Terra Networks Brasil S.A., CN = *.terra.com.mx
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: 17D9D6252767F931C24943D93036448C6CA94FEB
    Produced At: Apr 19 22:53:43 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 21F3459A10CAA6C84BDA1E3962B127D5338A7C48
      Issuer Key Hash: 17D9D6252767F931C24943D93036448C6CA94FEB
      Serial Number: 0DC5D5C1D59BE5BA2459C73745C67213
    Cert Status: good
    This Update: Apr 19 22:53:43 2024 GMT
    Next Update: Apr 26 22:53:42 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
         35:19:53:1b:58:f4:89:f1:85:bb:25:5f:a0:2c:7e:34:b6:45:
         86:9b:8e:92:6d:90:2a:3c:5e:30:b8:a4:d7:01:46:40:2f:86:
         12:31:69:31:45:df:84:6d:31:28:c0:32:60:70:72:45:df:13:
         96:18:d1:93:64:e4:f6:80:0f:7e:ff:c2:fb:d9:1e:16:39:52:
         fb:c1:ac:08:21:be:e9:ea:ec:ca:c1:cb:4b:28:f8:3c:c2:10:
         30:4f:86:ea:2c:21:f7:02:23:46:b1:89:12:44:00:35:ad:36:
         17:84:69:66:5b:45:3f:f9:f5:dc:6f:c2:d2:a0:b8:78:15:d3:
         48:2c:4d:f3:7c:d0:a0:20:5b:26:94:e1:53:95:33:ac:56:c3:
         7b:77:70:0e:24:08:21:6e:70:7d:c9:b6:2b:a6:42:c7:0a:55:
         b8:c5:0e:aa:c9:2b:20:99:d4:4b:9d:04:9d:c4:ce:65:06:ed:
         db:12:f7:b8:96:46:47:ab:47:cc:0b:45:fd:cd:41:bd:55:91:
         fb:8e:1b:4f:47:0b:9b:ee:2d:21:03:64:96:47:fc:f1:75:2c:
         68:d2:ef:13:4d:dd:71:26:1c:d7:01:75:28:ec:7a:38:46:ac:
         48:ce:d6:36:00:88:76:58:81:54:92:cf:5a:49:e4:04:35:93:
         54:03:8b:0d
======================================
---
Certificate chain
 0 s:C = BR, ST = S\C3\A3o Paulo, O = Terra Networks Brasil S.A., CN = *.terra.com.mx
   i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Organization Validation Secure Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Organization Validation Secure Server CA
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=C = BR, ST = S\C3\A3o Paulo, O = Terra Networks Brasil S.A., CN = *.terra.com.mx

issuer=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Organization Validation Secure Server CA

---
No client certificate CA names sent
Peer signing digest: SHA1
Peer signature type: RSA
Server Temp Key: ECDH, P-521, 521 bits
---
SSL handshake has read 4429 bytes and written 573 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-SHA384
    Session-ID: E31B0000F8B469200C2259048DEA6A308636BBA10C3E549489DB87EB1AFF2939
    Session-ID-ctx: 
    Master-Key: 17B4A12DEE00B691889A31C2F4E06145220D5F0BC2DB7B37DE9C07E9E7BE090342B0B149A409C2CFA0634D739BAE9798
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1714139244
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---
DONE