SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (79 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	111.65.250.2
Reverse IP lookup:	No records found
Nameserver:	ns2.fptonline.vn.
Nameserver:	ns1.fptonline.vn.

General Information

Common Name:	*.vnexpress.net
SANs:	DNS:*.vnexpress.netDNS:owa.vnexpress.netDNS:mail.vnexpress.netDNS:autodiscover.vnexpress.netDNS:www.vnexpress.netDNS:vnexpress.net Total number of SANs: 6
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	6cfd530fc46287bc0c3c9226
Not Before:	Jun 14, 2023 05:06:08 GMT
Not After:	Jul 15, 2024 05:06:07 GMT
Number of certs:	4
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	vne-qt-fe-lv1-4
HSTS:	max-age=31536000; includeSubDomains
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.vnexpress.net

Decode this certificate for verbose information →

Subject Common Name	*.vnexpress.net
Issuer Common Name	GlobalSign GCC R3 DV TLS CA 2020
Issuer Organization	GlobalSign nv-sa
Not Before:	Jun 14, 2023 05:06:08 GMT
Not After:	Jul 15, 2024 05:06:07 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	6cfd530fc46287bc0c3c9226
SHA1 Fingerprint:	0E:CB:5A:1E:27:4C:D6:56:0F:5C:3C:A0:25:A1:9E:0F:64:79:BC:9A
MD5 Fingerprint:	A5:0C:EF:52:69:90:81:C8:26:3D:46:50:0E:E1:5F:78

Certificate # 2 - Common Name: GlobalSign GCC R3 DV TLS CA 2020

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GlobalSign GCC R3 DV TLS CA 2020
Subject Organization	GlobalSign nv-sa
Issuer Common Name	GlobalSign
Issuer Organization	GlobalSign
Not Before:	Jul 28, 2020 00:00:00 GMT
Not After:	Mar 18, 2029 00:00:00 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	77bd0e0742d5d9e9d049d774d02a6f9a
SHA1 Fingerprint:	1C:61:0A:0A:87:D4:92:F4:83:22:C2:AF:D3:BE:9B:6A:D3:6B:6B:EE
MD5 Fingerprint:	A6:E7:E3:48:48:27:FD:C4:E0:C9:16:5B:AA:82:C7:4C

Certificate # 3 - Common Name: GlobalSign

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GlobalSign
Subject Organization	GlobalSign
Issuer Common Name	GlobalSign Root CA
Issuer Organization	GlobalSign nv-sa
Not Before:	Sep 19, 2018 00:00:00 GMT
Not After:	Jan 28, 2028 12:00:00 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	1ee5f169dff97352b6465d66a
SHA1 Fingerprint:	0B:BF:AB:97:05:95:95:E8:D1:EC:48:E8:9E:B8:65:7C:0E:5A:AE:71
MD5 Fingerprint:	58:BF:B0:EA:CF:17:E2:D0:A6:5A:4D:06:10:42:C3:BF

Certificate # 4 - Common Name: GlobalSign Root CA

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GlobalSign Root CA
Subject Organization	GlobalSign nv-sa
Issuer Common Name	GlobalSign Root CA
Issuer Organization	GlobalSign nv-sa
Not Before:	Sep 01, 1998 12:00:00 GMT
Not After:	Jan 28, 2028 12:00:00 GMT
Signature Algorithm:	sha1WithRSAEncryption
Serial Number:	40000000001154b5ac394
SHA1 Fingerprint:	B1:BC:96:8B:D4:F4:9D:62:2A:A8:9A:81:F2:15:01:52:A4:1D:82:9C
MD5 Fingerprint:	3E:45:52:15:09:51:92:E1:B7:5D:37:9F:B1:87:29:8A

OpenSSL Handshake

depth=3 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
verify return:1
depth=2 OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign GCC R3 DV TLS CA 2020
verify return:1
depth=0 CN = *.vnexpress.net
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:CN = *.vnexpress.net
   i:C = BE, O = GlobalSign nv-sa, CN = GlobalSign GCC R3 DV TLS CA 2020
-----BEGIN CERTIFICATE-----
MIIGqDCCBZCgAwIBAgIMbP1TD8Rih7wMPJImMA0GCSqGSIb3DQEBCwUAMFMxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBH
bG9iYWxTaWduIEdDQyBSMyBEViBUTFMgQ0EgMjAyMDAeFw0yMzA2MTQwNTA2MDha
Fw0yNDA3MTUwNTA2MDdaMBoxGDAWBgNVBAMMDyoudm5leHByZXNzLm5ldDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM7DCOhuKRBk8N3Pv+/yGmtmX9Dc
jspQ4Z0SZ3rUF+/UXkYFBgWjRUEv9OasyzF3I0uAeopmwr4rnALKGmT25BpmZzcx
eEUv4OU6/aK7g6Pb9s7ZpgM/s83w8nDXfI9nCOmrIAtXEGB6uKhZF5UHxaEaKPMb
MS7WBvC/lqVp98yIwXZdAtCi+XRouUZY+KkTvCuLBvR25O1DZAbkpd6URfwaFIJZ
qLSIFoSzjSGF2h/6IozRB1uMFVf06KTa/Z2eX1++bGWGf8oY3BsmPV4WR6J1yS3I
V4Q4Hs7ZDVCukxoMrMdmFK7Dfd4Qvb/cbdSUjcAwW4t+WQOGA8EVFbTMsfkCAwEA
AaOCA7MwggOvMA4GA1UdDwEB/wQEAwIFoDCBkwYIKwYBBQUHAQEEgYYwgYMwRgYI
KwYBBQUHMAKGOmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dz
Z2NjcjNkdnRsc2NhMjAyMC5jcnQwOQYIKwYBBQUHMAGGLWh0dHA6Ly9vY3NwLmds
b2JhbHNpZ24uY29tL2dzZ2NjcjNkdnRsc2NhMjAyMDBWBgNVHSAETzBNMEEGCSsG
AQQBoDIBCjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNv
bS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwCQYDVR0TBAIwADBBBgNVHR8EOjA4MDag
NKAyhjBodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzZ2NjcjNkdnRsc2NhMjAy
MC5jcmwwfwYDVR0RBHgwdoIPKi52bmV4cHJlc3MubmV0ghFvd2Eudm5leHByZXNz
Lm5ldIISbWFpbC52bmV4cHJlc3MubmV0ghphdXRvZGlzY292ZXIudm5leHByZXNz
Lm5ldIIRd3d3LnZuZXhwcmVzcy5uZXSCDXZuZXhwcmVzcy5uZXQwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFA2YwHN/q7292UdLSa0K
SgysPsd8MB0GA1UdDgQWBBSW4u7wfSOsaIPntDOZqBt8WloUKjCCAX8GCisGAQQB
1nkCBAIEggFvBIIBawFpAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEf
tZsAAAGIuExDXwAABAMASDBGAiEAr/4O8RPtSuksgLQl+uLZQVuB9zbz6Etfr6u3
5iZB9rECIQCWt0P/g2Ik8by+epsOaxlmJXPt6TKK4Yn5Nq0FznoswwB2AEiw42va
pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiLhMQ3kAAAQDAEcwRQIgAfPx
1vYUaOeh0Kk+dIEA2DzWsvsra9BNX2g9umwOOvACIQCfkodmrQymmFniEDiS88Fe
IIQpKAwPjMrDI9Za6AcnzgB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI
1/urAAABiLhMQ5cAAAQDAEcwRQIhAPI4cih74oPINeMMg90ERgCoGLce3B7bQHyn
iD7GMeimAiBp9dOrxFr1+2ftvIeReJ8XVc/gPU25hm7vgwW9umFAxDANBgkqhkiG
9w0BAQsFAAOCAQEATM50iSIifOjNduf0b3yAgsazgf9rQygFLE/t9eBLo9p+aGL1
TkjtMvQIh3eD3u49JCIbGDW6E5UwThBO19QwEW/zEW6rZT706Jtj2Uo/UW6Qcnaf
8Vl9D5qBnZ+R4UvTnyxkL0hO+v5BmwOubUxr+kqTRUu7S8LeenBDA36I8wiyRzpV
qSzc8NOZldbTwEJR1/f3XJkjsZBTgDJoG5XoXFoHiELP5Csy//cTHl5WYrbYm9fG
H0WP5ilApLXQ1lAKzerXeXCYSmyz2GyoT/LuhdHzbY2M1k1FyHyOhwLx0WjD2rSf
NvwFPdC5bpLAJXyrs1ydiHUaKvwmD0EvCnyZyA==
-----END CERTIFICATE-----
 1 s:C = BE, O = GlobalSign nv-sa, CN = GlobalSign GCC R3 DV TLS CA 2020
   i:OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIQd70OB0LV2enQSdd00CpvmjANBgkqhkiG9w0BAQsFADBM
MSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xv
YmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0yMDA3MjgwMDAwMDBaFw0y
OTAzMTgwMDAwMDBaMFMxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWdu
IG52LXNhMSkwJwYDVQQDEyBHbG9iYWxTaWduIEdDQyBSMyBEViBUTFMgQ0EgMjAy
MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKxnlJV/de+OpwyvCXAJ
IcxPCqkFPh1lttW2oljS3oUqPKq8qX6m7K0OVKaKG3GXi4CJ4fHVUgZYE6HRdjqj
hhnuHY6EBCBegcUFgPG0scB12Wi8BHm9zKjWxo3Y2bwhO8Fvr8R42pW0eINc6OTb
QXC0VWFCMVzpcqgz6X49KMZowAMFV6XqtItcG0cMS//9dOJs4oBlpuqX9INxMTGp
6EASAF9cnlAGy/RXkVS9nOLCCa7pCYV+WgDKLTF+OK2Vxw3RUJ/p8009lQeUARv2
UCcNNPCifYX1xIspvarkdjzLwzOdLahDdQbJON58zN4V+lMj0msg+c0KnywPIRp3
BMkCAwEAAaOCAYUwggGBMA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUDZjA
c3+rvb3ZR0tJrQpKDKw+x3wwHwYDVR0jBBgwFoAUj/BLf6guRSSuTVD6Y5qL3uLd
G7wwewYIKwYBBQUHAQEEbzBtMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcDIuZ2xv
YmFsc2lnbi5jb20vcm9vdHIzMDsGCCsGAQUFBzAChi9odHRwOi8vc2VjdXJlLmds
b2JhbHNpZ24uY29tL2NhY2VydC9yb290LXIzLmNydDA2BgNVHR8ELzAtMCugKaAn
hiVodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL3Jvb3QtcjMuY3JsMEcGA1UdIARA
MD4wPAYEVR0gADA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWdu
LmNvbS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAy8j/c550ea86oCkf
r2W+ptTCYe6iVzvo7H0V1vUEADJOWelTv07Obf+YkEatdN1Jg09ctgSNv2h+LMTk
KRZdAXmsE3N5ve+z1Oa9kuiu7284LjeS09zHJQB4DJJJkvtIbjL/ylMK1fbMHhAW
i0O194TWvH3XWZGXZ6ByxTUIv1+kAIql/Mt29PmKraTT5jrzcVzQ5A9jw16yysuR
XRrLODlkS1hyBjsfyTNZrmL1h117IFgntBA5SQNVl9ckedq5r4RSAU85jV8XK5UL
REjRZt2I6M9Po9QL7guFLu4sPFJpwR1sPJvubS2THeo7SxYoNDtdyBHs7euaGcMa
D/fayQ==
-----END CERTIFICATE-----
 2 s:OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
   i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
-----BEGIN CERTIFICATE-----
MIIETjCCAzagAwIBAgINAe5fFp3/lzUrZGXWajANBgkqhkiG9w0BAQsFADBXMQsw
CQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UECxMH
Um9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTE4MDkxOTAw
MDAwMFoXDTI4MDEyODEyMDAwMFowTDEgMB4GA1UECxMXR2xvYmFsU2lnbiBSb290
IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkdsb2JhbFNp
Z24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJXaQeQZ4Ihb1wIO2
hMoonv0FdhHFrYhy/EYCQ8eyip0EXyTLLkvhYIJG4VKrDIFHcGzdZNHr9SyjD4I9
DCuul9e2FIYQebs7E4B3jAjhSdJqYi8fXvqWaN+JJ5U4nwbXPsnLJlkNc96wyOkm
DoMVxu9bi9IEYMpJpij2aTv2y8gokeWdimFXN6x0FNx04Druci8unPvQu7/1PQDh
BjPogiuuU6Y6FnOM3UEOIDrAtKeh6bJPkC4yYOlXy7kEkmho5TgmYHWyn3f/kRTv
riBJ/K1AFUjRAjFhGV64l++td7dkmnq/X8ET75ti+w1s4FRpFqkD2m7pg5NxdsZp
hYIXAgMBAAGjggEiMIIBHjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB
/zAdBgNVHQ4EFgQUj/BLf6guRSSuTVD6Y5qL3uLdG7wwHwYDVR0jBBgwFoAUYHtm
GkUNl8qJUC99BM00qP/8/UswPQYIKwYBBQUHAQEEMTAvMC0GCCsGAQUFBzABhiFo
dHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9yb290cjEwMwYDVR0fBCwwKjAooCag
JIYiaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9yb290LmNybDBHBgNVHSAEQDA+
MDwGBFUdIAAwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5j
b20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBACNw6c/ivvVZrpRCb8RD
M6rNPzq5ZBfyYgZLSPFAiAYXof6r0V88xjPy847dHx0+zBpgmYILrMf8fpqHKqV9
D6ZX7qw7aoXW3r1AY/itpsiIsBL89kHfDwmXHjjqU5++BfQ+6tOfUBJ2vgmLwgtI
fR4uUfaNU9OrH0Abio7tfftPeVZwXwzTjhuzp3ANNyuXlava4BJrHEDOxcd+7cJi
WOx37XMiwor1hkOIreoTbv3Y/kIvuX1erRjvlJDKPSerJpSZdcfL03v3ykzTr1Eh
kluEfSufFT90y1HonoMOFm8b50bOI7355KKL0jlrqnkckSziYSQtjipIcJDEHsXo
4HA=
-----END CERTIFICATE-----
 3 s:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
   i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.vnexpress.net

issuer=C = BE, O = GlobalSign nv-sa, CN = GlobalSign GCC R3 DV TLS CA 2020

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 5412 bytes and written 404 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE