SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (54 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	3.101.63.44
Reverse IP lookup:	ec2-3-101-63-44.us-west-1.compute.amazonaws.com.
Nameserver:	ns56.domaincontrol.com.
Nameserver:	ns55.domaincontrol.com.

General Information

Common Name:	test-company-v1.hiration.com
SANs:	DNS:test-company-v1.hiration.com Total number of SANs: 1
Signature Algorithm:	ecdsa-with-SHA384
Key Type:	ECDSA (secp256r1)
Key size:	256 bits
Serial Number:	401bb23815c0071f3ad37ec8e0508e35259
Not Before:	Jan 18, 2025 15:38:47 GMT
Not After:	Apr 18, 2025 15:38:46 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	server
HSTS:	max-age=31536000; includeSubDomains; preload
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: test-company-v1.hiration.com

Decode this certificate for verbose information →

Subject Common Name	test-company-v1.hiration.com
Issuer Common Name	E5
Issuer Organization	Let's Encrypt
Not Before:	Jan 18, 2025 15:38:47 GMT
Not After:	Apr 18, 2025 15:38:46 GMT
Signature Algorithm:	ecdsa-with-SHA384
Serial Number:	401bb23815c0071f3ad37ec8e0508e35259
SHA1 Fingerprint:	D2:0A:56:AE:E3:33:CC:CB:00:DD:6A:3A:D2:0F:97:AC:36:0B:C3:5D
MD5 Fingerprint:	52:20:4A:E0:AB:17:74:36:68:DC:F2:E5:F3:86:5B:97

Certificate # 2 - Common Name: E5

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	E5
Subject Organization	Let's Encrypt
Issuer Common Name	ISRG Root X1
Issuer Organization	Internet Security Research Group
Not Before:	Mar 13, 2024 00:00:00 GMT
Not After:	Mar 12, 2027 23:59:59 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	838f6c63ceb1398c6206628315c9fdde
SHA1 Fingerprint:	5F:28:D9:C5:89:EE:4B:F3:1A:11:B7:8C:72:B8:D1:3F:07:9D:DC:45
MD5 Fingerprint:	54:7A:B1:C0:5C:A8:5A:6E:68:2C:91:28:0F:EF:D7:55

OpenSSL Handshake

depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = E5
verify return:1
depth=0 CN = test-company-v1.hiration.com
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:CN = test-company-v1.hiration.com
   i:C = US, O = Let's Encrypt, CN = E5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = Let's Encrypt, CN = E5
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = test-company-v1.hiration.com

issuer=C = US, O = Let's Encrypt, CN = E5

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 2421 bytes and written 419 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE