SSL Checker
Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.
Report
Hostname: | done Matches Common Name or/and SAN |
Expired: | done No (366 days till expiration) |
Public Key: | done We were unable to find any issues in the public key of end-entity certificate |
Trusted: | close We were unable to verify this certificate |
Self-Signed: | done No, the end-entity certificate is not self-signed |
Chain Issues: | done No, we were unable to detect any issues in the certificate chain sent by the server |
Weak signatures: | done No, certificates sent by the server were not signed utilizing a weak hash function |
OCSP Status: | done OCSP Responder returned "good" status for the end-entity certificate |
DNS Information
Resolves To: | 52.205.111.157 |
Reverse IP lookup: | ec2-52-205-111-157.compute-1.amazonaws.com. |
Nameserver: | ns-1000.awsdns-61.net. |
Nameserver: | ns-1415.awsdns-48.org. |
Nameserver: | ns-1560.awsdns-03.co.uk. |
Nameserver: | ns-208.awsdns-26.com. |
General Information
Common Name: | *.vmn.net |
SANs: | DNS:*.vmn.netDNS:vmn.net Total number of SANs: 2 |
Signature Algorithm: | sha256WithRSAEncryption |
Key Type: | RSA |
Key size: | 2048 bits |
Serial Number: | 281a345129123505e0544c49 |
Not Before: | Mar 25, 2024 22:52:01 GMT |
Not After: | Apr 26, 2025 20:00:56 GMT |
Number of certs: | 2 |
Revocation Status: | good |
OCSP Stapling: | Not Supported |
Server: | Apache/2.4.10 (Debian) |
HSTS: | Not Supported |
HPKP: | Not Supported |
Chain Information
Certificate # 1 - Common Name: *.vmn.net
Decode this certificate for verbose information → launchSubject Common Name | *.vmn.net |
Issuer Common Name | GlobalSign GCC R6 AlphaSSL CA 2023 |
Issuer Organization | GlobalSign nv-sa |
Not Before: | Mar 25, 2024 22:52:01 GMT |
Not After: | Apr 26, 2025 20:00:56 GMT |
Signature Algorithm: | sha256WithRSAEncryption |
Serial Number: | 281a345129123505e0544c49 |
SHA1 Fingerprint: | 62:BD:DA:DB:BE:F3:56:A2:F6:B3:9B:05:27:58:F9:BD:51:EB:42:0C |
MD5 Fingerprint: | 28:DD:E4:14:4B:35:C1:EE:77:17:13:9B:1F:AA:D7:63 |
Certificate # 2 - Common Name: GlobalSign GCC R6 AlphaSSL CA 2023
Decode this certificate for verbose information → launchIn place? | Yes, this certificate directly certifies the preceding one |
Subject Common Name | GlobalSign GCC R6 AlphaSSL CA 2023 |
Subject Organization | GlobalSign nv-sa |
Issuer Common Name | GlobalSign |
Issuer Organization | GlobalSign |
Not Before: | Jul 19, 2023 03:43:25 GMT |
Not After: | Jul 19, 2026 00:00:00 GMT |
Signature Algorithm: | sha256WithRSAEncryption |
Serial Number: | 7f1f2c902e83d0e3b6fb3bee478b5e80 |
SHA1 Fingerprint: | 58:F6:A6:8D:38:86:7D:61:B3:46:F3:BB:29:8B:CB:0F:CD:D3:0A:99 |
MD5 Fingerprint: | 4C:63:08:2D:06:A1:D5:8D:99:8F:46:A3:81:FA:8C:A1 |
OpenSSL Handshake
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign GCC R6 AlphaSSL CA 2023 verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 CN = *.vmn.net verify return:1 CONNECTED(00000003) OCSP response: no response sent --- Certificate chain 0 s:CN = *.vmn.net i:C = BE, O = GlobalSign nv-sa, CN = GlobalSign GCC R6 AlphaSSL CA 2023 -----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgIMKBo0USkSNQXgVExJMA0GCSqGSIb3DQEBCwUAMFUxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSswKQYDVQQDEyJH bG9iYWxTaWduIEdDQyBSNiBBbHBoYVNTTCBDQSAyMDIzMB4XDTI0MDMyNTIyNTIw MVoXDTI1MDQyNjIwMDA1NlowFDESMBAGA1UEAwwJKi52bW4ubmV0MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1EPHYEGxUUgRxirPYXp7MO0LvuvI1ax YSVZSJPQIWoBSTg1ji5tIs0cq58gJYj7JOxdN/fDNR3RhKUWT4BJLLDbDU/2eeoP dZ+A3jlJzj9hJpGe8KEzfCV3THCIIrtkf684ABoSr0JS8zVqfpw057gKec7OlN/g +SHVPDvi/qkt8SB6usXt3YM3hR2fTBb9SrOhNFog5V9sXOJRpRl4tCQNbWji9YOy Mk0E9ReSgU1IDrfi8gjgAcVdRYdfMKvVjQPJ1B2SW2BTvebzC/vxQRoinojKuQen XvE7V6kzpYVLjAv+8oFh0m4OTEcwzdwJONnGMVdPXqdVfZWJ8wZ7awIDAQABo4ID XDCCA1gwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwgZkGCCsGAQUFBwEB BIGMMIGJMEkGCCsGAQUFBzAChj1odHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29t L2NhY2VydC9nc2djY3I2YWxwaGFzc2xjYTIwMjMuY3J0MDwGCCsGAQUFBzABhjBo dHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9nc2djY3I2YWxwaGFzc2xjYTIwMjMw VwYDVR0gBFAwTjAIBgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIB FiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzBEBgNVHR8E PTA7MDmgN6A1hjNodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzZ2NjcjZhbHBo YXNzbGNhMjAyMy5jcmwwHQYDVR0RBBYwFIIJKi52bW4ubmV0ggd2bW4ubmV0MB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBS9BbfzipM8 c8t5+g+FEqF3lhiRdDAdBgNVHQ4EFgQUPA7PdTsTZBIDRxdg/OEskfuHsw4wggF9 BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AKLjCuRF772tm3447Udnd1PXgluElNcr XhssxLlQpEfnAAABjnfQTK4AAAQDAEYwRAIgO2MGuthWxE5CuKvn0/fUN3dba/Ot 4F9IP+7itSkiMHACIHkYcxKypLsAs2kT9VkS+hhL4TY37XsDK4PRHziggoxnAHcA TnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGOd9BNsAAABAMASDBG AiEAyYQlje2DjQGqPNyUWusL9gqpk/Y8cCTD0+SSv1B6GvECIQCg+XblTNZ0zEIb RAnaPkq6wUp7r98tS5oNSzmbOTBWnQB1AOCSs/wMHcjnaDYf3mG5lk0KUngZinLW csSwTaVtb1QEAAABjnfQTZkAAAQDAEYwRAIgKR2mJlQOMMv1T17B8yu6uvzwt9gK Wmf+hNG1ucTTuLwCIEqIHowiDDjO4ZQhwXI0w6DSkGPf7VkK8ACPPPV0KlG7MA0G CSqGSIb3DQEBCwUAA4IBAQBNAlxVPXtUue2ktbbFBVvIjMe8TDEjYvIZZEfO1AIC 8IWUq3rfmTZ0lJcCfssh4R6cYmylqgvQbwqoJDV2B/K7G5TqNMqxCaV4DM5GbtAp AtF8kAEiHlerlQSLztVEXjpG+8L76t29hHR/GuaRBbessgJlEAxoCDHG7HODwWEb I8a+d5WagL9nfMoI8K+jsTPMrHJbimj4sCl3i1lRd3Oqs7m3r9zJqlAvD7gpGalY 1S88+QlCA2GuD9mnAqORKn21tXP3Yr7utSJ5jodHjEBfjIm8kTfiKvHIYE/IgGJ/ bKWYlJPU08cvj/fnldr9Gmi8J+nlvHIW2dTRYoYBgoOy -----END CERTIFICATE----- 1 s:C = BE, O = GlobalSign nv-sa, CN = GlobalSign GCC R6 AlphaSSL CA 2023 i:OU = GlobalSign Root CA - R6, O = GlobalSign, CN = GlobalSign -----BEGIN CERTIFICATE----- MIIFjDCCA3SgAwIBAgIQfx8skC6D0OO2+zvuR4tegDANBgkqhkiG9w0BAQsFADBM MSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSNjETMBEGA1UEChMKR2xv YmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0yMzA3MTkwMzQzMjVaFw0y NjA3MTkwMDAwMDBaMFUxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWdu IG52LXNhMSswKQYDVQQDEyJHbG9iYWxTaWduIEdDQyBSNiBBbHBoYVNTTCBDQSAy MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00Jvk5ADppO0rgDn j1M14XIb032Aas409JJFAb8cUjipFOth7ySLdaWLe3s63oSs5x3eWwzTpX4BFkzZ bxT1eoJSHfT2M0wZ5QOPcCIjsr+YB8TAvV2yJSyq+emRrN/FtgCSTaWXSJ5jipW8 SJ/VAuXPMzuAP2yYpuPcjjQ5GyrssDXgu+FhtYxqyFP7BSvx9jQhh5QV5zhLycua n8n+J0Uw09WRQK6JGQ5HzDZQinkNel+fZZNRG1gE9Qeh+tHBplrkalB1g85qJkPO J7SoEvKsmDkajggk/sSq7NPyzFaa/VBGZiRRG+FkxCBniGD5618PQ4trcwHyMojS FObOHQIDAQABo4IBXzCCAVswDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBS9 BbfzipM8c8t5+g+FEqF3lhiRdDAfBgNVHSMEGDAWgBSubAWjkxPioufi1xzWx/B/ yGdToDB7BggrBgEFBQcBAQRvMG0wLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwMi5n bG9iYWxzaWduLmNvbS9yb290cjYwOwYIKwYBBQUHMAKGL2h0dHA6Ly9zZWN1cmUu Z2xvYmFsc2lnbi5jb20vY2FjZXJ0L3Jvb3QtcjYuY3J0MDYGA1UdHwQvMC0wK6Ap oCeGJWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vcm9vdC1yNi5jcmwwIQYDVR0g BBowGDAIBgZngQwBAgEwDAYKKwYBBAGgMgoBAzANBgkqhkiG9w0BAQsFAAOCAgEA fMkkMo5g4mn1ft4d4xR2kHzYpDukhC1XYPwfSZN3A9nEBadjdKZMH7iuS1vF8uSc g26/30DRPen2fFRsr662ECyUCR4OfeiiGNdoQvcesM9Xpew3HLQP4qHg+s774hNL vGRD4aKSKwFqLMrcqCw6tEAfX99tFWsD4jzbC6k8tjSLzEl0fTUlfkJaWpvLVkpg 9et8tD8d51bymCg5J6J6wcXpmsSGnksBobac1+nXmgB7jQC9edU8Z41FFo87BV3k CtrWWsdkQavObMsXUPl/AO8y/jOuAWz0wyvPnKom+o6W4vKDY6/6XPypNdebOJ6m jyaILp0quoQvhjx87BzENh5s57AIOyIGpS0sDEChVDPzLEfRsH2FJ8/W5woF0nvs BTqfYSCqblQbHeDDtCj7Mlf8JfqaMuqcbE4rMSyfeHyCdZQwnc/r9ujnth691AJh xyYeCM04metJIe7cB6d4dFm+Pd5ervY4x32r0uQ1Q0spy1VjNqUJjussYuXNyMmF HSuLQQ6PrePmH5lcSMQpYKzPoD/RiNVD/PK0O3vuO5vh3o7oKb1FfzoanDsFFTrw 0aLOdRW/tmLPWVNVlAb8ad+B80YJsL4HXYnQG8wYAFb8LhwSDyT9v+C1C1lcIHE7 nE0AAp9JSHxDYsma9pi4g0Phg3BgOm2euTRzw7R0SzU= -----END CERTIFICATE----- --- Server certificate subject=CN = *.vmn.net issuer=C = BE, O = GlobalSign nv-sa, CN = GlobalSign GCC R6 AlphaSSL CA 2023 --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 3734 bytes and written 444 bytes Verification error: unable to get local issuer certificate --- New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 Session-ID: 5B0295CFDA5B451ECDAE538F25111DD6825D8D172484266DC0B377DB2CE0B6DF Session-ID-ctx: Master-Key: 65C5582E8589ADE33E146254C89F8CEFBB37B172C9ED59923C21D84F23D496716E8990B265BE7A6274E40C363E5D5025 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 300 (seconds) TLS session ticket: 0000 - 14 49 2b a9 be 8a e8 d1-cc ee 6b 40 18 a0 59 85 .I+.......k@..Y. 0010 - 23 9f a5 7c 9a 76 9f 72-16 7c 03 47 90 9b 7d c1 #..|.v.r.|.G..}. 0020 - 92 a3 98 4e 1c 9c 83 4e-03 0f 95 42 17 21 c3 1c ...N...N...B.!.. 0030 - 9a 19 7a 1e 11 f2 d5 97-92 9e 6f 6c ea 66 5f 34 ..z.......ol.f_4 0040 - 42 3a 4e 64 3a 60 9f 80-1c 1e c6 3b de 54 dd 5f B:Nd:`.....;.T._ 0050 - 20 72 97 fb 20 4f 52 2e-ae cb 93 64 6b 55 17 da r.. OR....dkU.. 0060 - 84 f4 d7 8d 29 4f 08 e9-52 cc af c6 0a 11 27 47 ....)O..R.....'G 0070 - 04 52 fc 21 1e 61 66 eb-cc c2 4e 60 fb 9d aa d0 .R.!.af...N`.... 0080 - 03 b4 10 3d 29 54 33 87-b1 42 1d e1 24 3b df 34 ...=)T3..B..$;.4 0090 - 7e 71 a0 70 5a c7 6f fb-6b 47 83 09 6d 1c 0d 61 ~q.pZ.o.kG..m..a 00a0 - bf 71 3a 4f 40 98 79 d4-89 c5 9b 68 85 90 88 36 .q:O@.y....h...6 00b0 - e2 27 38 23 d9 d4 01 aa-2a dc fe 9d 6e 01 f0 2e .'8#....*...n... Start Time: 1714025200 Timeout : 7200 (sec) Verify return code: 20 (unable to get local issuer certificate) Extended master secret: no --- DONE