SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (388 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

CNAME:	user.dotcom-monitor.us.
Resolves To:	8.29.56.60
Reverse IP lookup:	No records found
Nameserver:	ns1.dana-net.com.
Nameserver:	ns3.dana-net.com.
Nameserver:	ns2.dana-net.com.

General Information

Common Name:	*.dotcom-monitor.com
SANs:	DNS:*.dotcom-monitor.comDNS:dotcom-monitor.com Total number of SANs: 2
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	a011c5c4f67f45eff0882ad3ffaa58b2
Not Before:	Apr 18, 2024 00:00:00 GMT
Not After:	May 19, 2025 23:59:59 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Supported
Server:	Microsoft-IIS/10.0
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.dotcom-monitor.com

Decode this certificate for verbose information →

Subject Common Name	*.dotcom-monitor.com
Issuer Common Name	Sectigo RSA Domain Validation Secure Server CA
Issuer Organization	Sectigo Limited
Not Before:	Apr 18, 2024 00:00:00 GMT
Not After:	May 19, 2025 23:59:59 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	a011c5c4f67f45eff0882ad3ffaa58b2
SHA1 Fingerprint:	C6:2B:73:B0:5C:49:34:D1:D7:A0:EC:D2:18:64:06:4C:B0:B4:13:C6
MD5 Fingerprint:	36:98:CB:24:82:7D:C4:B5:5C:0A:D2:63:DB:B3:0A:81

Certificate # 2 - Common Name: Sectigo RSA Domain Validation Secure Server CA

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	Sectigo RSA Domain Validation Secure Server CA
Subject Organization	Sectigo Limited
Issuer Common Name	USERTrust RSA Certification Authority
Issuer Organization	The USERTRUST Network
Not Before:	Nov 02, 2018 00:00:00 GMT
Not After:	Dec 31, 2030 23:59:59 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	7d5b5126b476ba11db74160bbc530da7
SHA1 Fingerprint:	33:E4:E8:08:07:20:4C:2B:61:82:A3:A1:4B:59:1A:CD:25:B5:F0:DB
MD5 Fingerprint:	AD:AB:5C:4D:F0:31:FB:92:99:F7:1A:DA:7E:18:F6:13

OpenSSL Handshake

depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
verify return:1
depth=0 CN = *.dotcom-monitor.com
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: 8D8C5EC454AD8AE177E99BF99B05E1B8018D61E1
    Produced At: Apr 22 11:53:27 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 430BD20E4F137A1A6C918F24E5DA7E324D4733C8
      Issuer Key Hash: 8D8C5EC454AD8AE177E99BF99B05E1B8018D61E1
      Serial Number: A011C5C4F67F45EFF0882AD3FFAA58B2
    Cert Status: good
    This Update: Apr 22 11:53:27 2024 GMT
    Next Update: Apr 29 11:53:26 2024 GMT

    Signature Algorithm: sha256WithRSAEncryption
         2a:02:3f:fc:96:c4:e0:37:8f:eb:20:4b:7a:5e:a0:d7:ab:69:
         be:8d:cb:38:20:c0:48:62:06:86:7d:4f:63:91:4b:a1:52:e9:
         ac:4a:d4:3c:cc:19:95:4e:dd:7b:71:81:d5:96:ce:90:86:f1:
         29:0b:29:ef:a3:af:7a:32:0a:ec:6d:db:4c:d9:45:b5:d1:78:
         b3:87:02:b6:50:c3:ea:0a:bd:49:df:7f:53:b6:25:f4:e8:c0:
         92:a7:3e:13:2c:64:9b:82:c7:c5:39:db:8e:68:19:a8:ab:ea:
         9a:f9:bb:cb:c9:db:a1:48:85:2e:4b:e4:9e:b8:5c:ef:12:5f:
         58:d6:90:69:3a:87:98:fa:c1:85:61:87:61:23:f9:4e:f2:02:
         c4:eb:80:c8:d0:5b:fa:19:ac:59:5b:04:07:4e:48:18:3e:30:
         7c:09:5a:e5:f3:3d:f5:e0:a2:47:7b:3b:10:40:35:db:d2:37:
         58:2a:93:5d:59:ba:8b:70:47:14:c2:3d:ea:45:c2:a8:79:ea:
         16:66:81:37:38:b7:28:4c:a9:9e:81:9e:18:af:2e:85:0a:3b:
         dd:ba:c0:60:6a:47:99:de:42:a8:95:9a:11:4f:a2:c5:d2:3b:
         53:28:05:3d:a2:c0:73:49:c6:5a:bf:82:2f:37:94:ee:fd:df:
         75:a0:45:92
======================================
---
Certificate chain
 0 s:CN = *.dotcom-monitor.com
   i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.dotcom-monitor.com

issuer=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4148 bytes and written 414 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE