Namecheap.com

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Matches Common Name or/and SAN
Expired: No (106 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 104.20.108.32
Reverse IP lookup: No records found
Nameserver: ivy.ns.cloudflare.com.
Nameserver: john.ns.cloudflare.com.

General Information

Common Name: *.thisamericanlife.org
SANs: DNS:*.thisamericanlife.orgDNS:thisamericanlife.org Total number of SANs: 2
Signature Algorithm: sha256WithRSAEncryption
Key Type: RSA
Key size: 2048 bits
Serial Number: 4aa25e8c40e358be0c3dcc03cf8a8eae
Not Before: Jun 12, 2023 00:00:00 GMT
Not After: Jul 12, 2024 23:59:59 GMT
Number of certs: 3
Revocation Status: good
OCSP Stapling: Supported
Server: cloudflare
HSTS: Not Supported
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: *.thisamericanlife.org

Decode this certificate for verbose information →
Subject Common Name *.thisamericanlife.org
Issuer Common Name Sectigo RSA Domain Validation Secure Server CA
Issuer Organization Sectigo Limited
Not Before: Jun 12, 2023 00:00:00 GMT
Not After: Jul 12, 2024 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 4aa25e8c40e358be0c3dcc03cf8a8eae
SHA1 Fingerprint: C5:21:B7:9B:23:4C:A6:16:14:24:A6:6E:68:CB:D4:71:4C:95:2F:8D
MD5 Fingerprint: 07:AD:7A:15:65:26:0C:CA:32:32:B5:74:04:95:E0:26

Certificate # 2 - Common Name: Sectigo RSA Domain Validation Secure Server CA

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name Sectigo RSA Domain Validation Secure Server CA
Subject Organization Sectigo Limited
Issuer Common Name USERTrust RSA Certification Authority
Issuer Organization The USERTRUST Network
Not Before: Nov 02, 2018 00:00:00 GMT
Not After: Dec 31, 2030 23:59:59 GMT
Signature Algorithm: sha384WithRSAEncryption
Serial Number: 7d5b5126b476ba11db74160bbc530da7
SHA1 Fingerprint: 33:E4:E8:08:07:20:4C:2B:61:82:A3:A1:4B:59:1A:CD:25:B5:F0:DB
MD5 Fingerprint: AD:AB:5C:4D:F0:31:FB:92:99:F7:1A:DA:7E:18:F6:13

Certificate # 3 - Common Name: USERTrust RSA Certification Authority

Decode this certificate for verbose information →
In place? Yes, this certificate directly certifies the preceding one
Subject Common Name USERTrust RSA Certification Authority
Subject Organization The USERTRUST Network
Issuer Common Name USERTrust RSA Certification Authority
Issuer Organization The USERTRUST Network
Not Before: Feb 01, 2010 00:00:00 GMT
Not After: Jan 18, 2038 23:59:59 GMT
Signature Algorithm: sha384WithRSAEncryption
Serial Number: 1fd6d30fca3ca51a81bbc640e35032d
SHA1 Fingerprint: 2B:8F:1B:57:33:0D:BB:A2:D0:7A:6C:51:F7:0E:E9:0D:DA:B9:AD:8E
MD5 Fingerprint: 1B:FE:69:D1:91:B7:19:33:A3:72:A8:0F:E1:55:E5:B5

OpenSSL Handshake

depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
verify return:1
depth=0 CN = *.thisamericanlife.org
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: 8D8C5EC454AD8AE177E99BF99B05E1B8018D61E1
    Produced At: Mar 24 20:06:00 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 430BD20E4F137A1A6C918F24E5DA7E324D4733C8
      Issuer Key Hash: 8D8C5EC454AD8AE177E99BF99B05E1B8018D61E1
      Serial Number: 4AA25E8C40E358BE0C3DCC03CF8A8EAE
    Cert Status: good
    This Update: Mar 24 20:06:00 2024 GMT
    Next Update: Mar 31 20:05:59 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
         d0:66:f4:bb:fa:b8:d3:26:81:99:72:b2:d3:68:3a:f9:a9:94:
         d2:3f:ff:13:85:9a:39:c8:ed:02:eb:2c:fe:4a:2b:fe:ee:a0:
         df:ba:5e:a0:7a:47:b5:67:8d:68:f0:9b:7a:33:f2:28:e4:f7:
         46:7d:0f:90:51:68:b4:c8:25:3f:e5:c7:1c:b7:f6:52:94:ed:
         1d:99:07:b5:71:fa:1c:fe:c3:57:cf:fd:02:c6:1c:fe:6c:79:
         7a:7e:88:d6:3b:27:30:76:ec:ee:51:49:31:74:1b:aa:c0:e9:
         f4:e9:38:65:e9:e6:e7:44:b1:7b:99:e3:85:d2:3f:21:70:1c:
         75:f7:92:3c:0f:86:6f:57:4b:a8:85:bc:f5:aa:1f:47:29:ce:
         b2:bf:85:48:c9:25:61:11:c2:62:fd:ca:8f:4f:e0:91:9e:b1:
         8e:23:41:c8:b3:7f:7d:db:52:8a:22:db:9b:91:6d:42:b6:59:
         60:f9:e8:7c:7d:80:de:f1:fa:cb:97:51:1a:d6:6e:a5:07:c2:
         81:57:8a:b3:c1:b9:ec:c2:6e:58:d3:76:e4:f3:88:be:e7:76:
         99:41:ce:4e:99:85:20:a4:2d:fe:48:90:87:b8:ed:ec:0a:f1:
         54:67:b1:d4:ff:9c:a6:f5:67:9c:44:a0:67:5a:d0:cd:a7:7a:
         3e:c3:7c:b2
======================================
---
Certificate chain
 0 s:CN = *.thisamericanlife.org
   i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.thisamericanlife.org

issuer=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 5664 bytes and written 411 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE