SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (221 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

CNAME:	user.dotcom-monitor.us.
Resolves To:	8.29.56.60
Reverse IP lookup:	No records found
Nameserver:	ns3.dana-net.com.
Nameserver:	ns1.dana-net.com.
Nameserver:	ns2.dana-net.com.

General Information

Common Name:	*.dotcom-monitor.com
SANs:	DNS:*.dotcom-monitor.comDNS:dotcom-monitor.com Total number of SANs: 2
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	c13c647f6de7e9627f3e0f975d5bd5b2
Not Before:	Apr 12, 2023 00:00:00 GMT
Not After:	May 12, 2024 23:59:59 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Supported
Server:	Microsoft-IIS/10.0
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.dotcom-monitor.com

Decode this certificate for verbose information →

Subject Common Name	*.dotcom-monitor.com
Issuer Common Name	Sectigo RSA Domain Validation Secure Server CA
Issuer Organization	Sectigo Limited
Not Before:	Apr 12, 2023 00:00:00 GMT
Not After:	May 12, 2024 23:59:59 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	c13c647f6de7e9627f3e0f975d5bd5b2
SHA1 Fingerprint:	96:60:95:65:09:79:05:72:95:2E:52:8C:D1:CE:84:10:95:93:03:60
MD5 Fingerprint:	EB:D9:B5:49:A7:DD:EE:F9:2B:53:28:2D:4A:81:5B:F6

Certificate # 2 - Common Name: Sectigo RSA Domain Validation Secure Server CA

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	Sectigo RSA Domain Validation Secure Server CA
Subject Organization	Sectigo Limited
Issuer Common Name	USERTrust RSA Certification Authority
Issuer Organization	The USERTRUST Network
Not Before:	Nov 02, 2018 00:00:00 GMT
Not After:	Dec 31, 2030 23:59:59 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	7d5b5126b476ba11db74160bbc530da7
SHA1 Fingerprint:	33:E4:E8:08:07:20:4C:2B:61:82:A3:A1:4B:59:1A:CD:25:B5:F0:DB
MD5 Fingerprint:	AD:AB:5C:4D:F0:31:FB:92:99:F7:1A:DA:7E:18:F6:13

OpenSSL Handshake

depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
verify return:1
depth=0 CN = *.dotcom-monitor.com
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: 8D8C5EC454AD8AE177E99BF99B05E1B8018D61E1
    Produced At: Sep 30 19:33:50 2023 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 430BD20E4F137A1A6C918F24E5DA7E324D4733C8
      Issuer Key Hash: 8D8C5EC454AD8AE177E99BF99B05E1B8018D61E1
      Serial Number: C13C647F6DE7E9627F3E0F975D5BD5B2
    Cert Status: good
    This Update: Sep 30 19:33:50 2023 GMT
    Next Update: Oct  7 19:33:49 2023 GMT

    Signature Algorithm: sha256WithRSAEncryption
         ce:51:34:07:58:fe:b9:ba:2a:4c:58:7a:eb:a9:eb:33:60:7d:
         52:93:ba:05:cb:c7:07:82:a0:63:95:bc:12:dd:27:c4:ea:1f:
         8b:1e:c6:76:28:8d:57:6b:1d:7d:33:06:79:ef:cf:bd:a0:3a:
         d6:c6:d2:a7:50:3a:22:03:07:c2:cf:65:71:86:81:0b:9a:61:
         5b:2c:4a:e4:8d:99:17:5c:0f:b6:cb:66:58:eb:49:bc:f5:dd:
         44:28:87:b8:f6:b1:43:30:12:78:85:3e:c1:f4:27:7e:77:ab:
         27:8c:85:83:e1:96:37:d7:ab:7d:dc:17:f6:7c:26:e3:13:fb:
         56:6b:f2:46:6b:ff:c8:70:ea:41:fe:a0:c2:c4:41:24:00:8a:
         e8:d0:84:53:ee:7e:37:99:91:09:13:05:be:0c:9a:44:9b:92:
         63:ca:d9:14:80:6c:1a:cb:63:bd:4b:f8:60:4a:5e:50:d6:4a:
         2b:70:25:4d:5f:55:43:d3:d1:9c:b5:c9:2f:f9:2d:26:c3:29:
         c7:99:4a:a0:48:2a:dd:1a:be:47:8c:6b:1c:6a:b6:8f:1d:07:
         d3:9f:33:5f:33:e1:a1:59:19:ac:52:71:8d:42:cc:e7:b1:88:
         ff:50:9f:aa:be:f2:e3:a3:5d:a2:69:25:3c:66:cc:88:b4:ba:
         df:a5:1f:35
======================================
---
Certificate chain
 0 s:CN = *.dotcom-monitor.com
   i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.dotcom-monitor.com

issuer=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4148 bytes and written 414 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE