SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (66 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	82.165.229.83
Reverse IP lookup:	bap.web.de.
Nameserver:	ns-webde.ui-dns.com.
Nameserver:	ns-webde.ui-dns.org.
Nameserver:	ns-webde.ui-dns.de.
Nameserver:	ns-webde.ui-dns.biz.

General Information

Common Name:	*.web.de
SANs:	DNS:*.web.deDNS:web.de Total number of SANs: 2
Organization:	1&1 Mail & Media GmbH
Locality:	Montabaur
Signature Algorithm:	sha256WithRSAEncryption
Key Type:	RSA
Key size:	2048 bits
Serial Number:	e7041d9eba9715ddf4755f8926da6d9
Not Before:	Jun 20, 2023 10:02:36 GMT
Not After:	Jun 24, 2024 23:59:59 GMT
Number of certs:	2
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	Apache
HSTS:	max-age=31536000; includeSubdomains; preload
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.web.de

Decode this certificate for verbose information →

Subject Common Name	*.web.de
Subject Organization	1&1 Mail & Media GmbH
Issuer Common Name	Telekom Security ServerID OV Class 2 CA
Issuer Organization	Deutsche Telekom Security GmbH
Not Before:	Jun 20, 2023 10:02:36 GMT
Not After:	Jun 24, 2024 23:59:59 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	e7041d9eba9715ddf4755f8926da6d9
SHA1 Fingerprint:	A2:2A:B8:6E:C8:FA:31:2D:5F:D4:EF:C5:03:27:9D:08:22:C8:B8:E7
MD5 Fingerprint:	1E:D1:4C:59:E4:66:A4:59:B6:7A:7F:C8:EA:46:B3:5B

Certificate # 2 - Common Name: Telekom Security ServerID OV Class 2 CA

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	Telekom Security ServerID OV Class 2 CA
Subject Organization	Deutsche Telekom Security GmbH
Issuer Common Name	T-TeleSec GlobalRoot Class 2
Issuer Organization	T-Systems Enterprise Services GmbH
Not Before:	Aug 02, 2022 09:16:44 GMT
Not After:	Aug 02, 2027 23:59:59 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	e5d298915c40431a4e1c4ca488b8ea3
SHA1 Fingerprint:	52:86:9C:EF:1A:21:95:C4:16:82:0C:18:3B:80:C9:95:BB:BF:BE:DC
MD5 Fingerprint:	BE:FA:B4:7B:50:71:BD:46:03:89:FA:F2:DB:A3:B6:07

OpenSSL Handshake

depth=2 C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 2
verify return:1
depth=1 C = DE, O = Deutsche Telekom Security GmbH, CN = Telekom Security ServerID OV Class 2 CA
verify return:1
depth=0 C = DE, O = 1&1 Mail & Media GmbH, ST = Rheinland-Pfalz, L = Montabaur, CN = *.web.de
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:C = DE, O = 1&1 Mail & Media GmbH, ST = Rheinland-Pfalz, L = Montabaur, CN = *.web.de
   i:C = DE, O = Deutsche Telekom Security GmbH, CN = Telekom Security ServerID OV Class 2 CA
-----BEGIN CERTIFICATE-----
MIIH0jCCBjqgAwIBAgIQDnBB2eupcV3fR1X4km2m2TANBgkqhkiG9w0BAQsFADBo
MQswCQYDVQQGEwJERTEnMCUGA1UECgweRGV1dHNjaGUgVGVsZWtvbSBTZWN1cml0
eSBHbWJIMTAwLgYDVQQDDCdUZWxla29tIFNlY3VyaXR5IFNlcnZlcklEIE9WIENs
YXNzIDIgQ0EwHhcNMjMwNjIwMTAwMjM2WhcNMjQwNjI0MjM1OTU5WjBuMQswCQYD
VQQGEwJERTEeMBwGA1UECgwVMSYxIE1haWwgJiBNZWRpYSBHbWJIMRgwFgYDVQQI
Ew9SaGVpbmxhbmQtUGZhbHoxEjAQBgNVBAcTCU1vbnRhYmF1cjERMA8GA1UEAwwI
Ki53ZWIuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDey0omRxqy
726M5pLO4o1sRMCFMuLEzaiR1rLWwHMgORONriPJ+F/SQFWbM6xa3MfCI6NvjQeH
Q0SUm+HOvmHUhJ//fLP/zPYYPRcSNlZGvMTKBEJX+UQAjHMOTShspmXPDF1dH58/
rUmg/gYxGIdWH9+NppcLkJeK9n0MR5L98JUZQAocLXJmV5qwN/7cTSLeXJ2bFuKo
pc1n1DRAwQy9OwKLpITXiz4zUmAykc6nUjMhhUYl+L2SzbK0KEQZ2/NCCM8snlkv
JSD7ujxbOFF/7ElJceV/jr4bToqOKNBZdcQNh1T2dLT2uN/EwjKolA+AS6pvNGFg
ELAdMOm+q0U1AgMBAAGjggPwMIID7DAfBgNVHSMEGDAWgBQcBZOxf6g0MIxS4JZA
oHKjEF3g/zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsG
AQUFBwMBMB0GA1UdDgQWBBSAYlkodWtdVW6TYPEsdiF+6fw0dTBTBgNVHSAETDBK
MEgGBmeBDAECAjA+MDwGCCsGAQUFBwIBFjBodHRwOi8vZG9jcy5zZXJ2ZXJpZC50
ZWxlc2VjLmRlL2Nwcy9zZXJ2ZXJpZC5odG0wXgYDVR0fBFcwVTBToFGgT4ZNaHR0
cDovL2NybC5zZXJ2ZXJpZC50ZWxlc2VjLmRlL3JsL1RlbGVrb21fU2VjdXJpdHlf
U2VydmVySURfT1ZfQ2xhc3NfMl9DQS5jcmwwgZ8GCCsGAQUFBwEBBIGSMIGPMDEG
CCsGAQUFBzABhiVodHRwOi8vb2NzcC5zZXJ2ZXJpZC50ZWxlc2VjLmRlL29jc3By
MFoGCCsGAQUFBzAChk5odHRwOi8vY3J0LnNlcnZlcmlkLnRlbGVzZWMuZGUvY3J0
L1RlbGVrb21fU2VjdXJpdHlfU2VydmVySURfT1ZfQ2xhc3NfMl9DQS5jcnQwDAYD
VR0TAQH/BAIwADAbBgNVHREEFDASgggqLndlYi5kZYIGd2ViLmRlMIIB9wYKKwYB
BAHWeQIEAgSCAecEggHjAeEAdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlG
cR+1mwAAAYjYQa6OAAAEAwBIMEYCIQDMNXP0IUtR2XL4R+im85DU+9AN1EG8k4L+
/aSu9yNxTgIhAIJ1mbzYrfWpJRIi+fjiMEigCYucKNIPwB24DTdTzpaLAHYAdv+I
Pwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGI2EGshAAABAMARzBFAiA2
nVCkPat6bSNaJ9vp1M6OxSxP6ZIBM/IZ6YsVgsBYBwIhAL2wv/o+bJECrgID9Tp+
3E3cd4P/jKVYI/d/ykIvtIGhAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6Oq
HQcT0wwAAAGI2EGpgwAABAMARzBFAiAyPW45QTqC/Moe9uhVcp0oxB820qnxUpP8
AvjPqn3pgwIhALYSZMwb11YuGsTgyjluZAQvR7jusnIvU7dyPzAKQ7r4AHYA2ra/
az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGI2EGu4wAABAMARzBFAiEA
xkI4bVaY3Ljp1zi8u50TR93j5O0AvgBdO18uAEhcZPkCIE9g2yvNeIdC6USIgitH
q2m1b11BeXWNOaCCc/Cq3Ft6MA0GCSqGSIb3DQEBCwUAA4IBgQApSmS3mQ9ySH/e
fi69A2gaZA+eRaLBmQhImW6RcQuLgdmLSl+yk+9v6cHR5+UBK/qUyG3QIL+llvCt
9NRT7pZjPiJd7t6WghyeOGXlaxiBZqDa1cQsFCTKmxFbZQbsKwYJtlwkB5OYesy6
7WObxv5L1RNlK71HaVGrFJx5NdBwb7SZTHRMwk3AvVpTkAZpngarXm7V3qdshARD
OBywq6t+ElnWPLMF66V66geP5ybum+x6NDlPgfyZWTQ+ChZoInbscYb7FNcbfg7J
IUwbbMlfxaHeOM8c2sJhSTaLXXMPWmZU063MKKd7nMsolcmdDDyCHBMHnB8/VApg
aaWy6RtXKCMnxL0kf9+srILTgDu+3z8oa0oXd8tSoQZ1u6fyFP4RWdzvAV6Wkohn
fdlzDopOYfLfgYgRf04v3TzfnJ+JuLLFfN7wXaIbYZ0DcMOkRL/j2gfsdoYMDLyu
j45jHcYnJz+KEIOsZTp2W3yOlSF2q/Nklt/nvvTlJAOtilGP0oI=
-----END CERTIFICATE-----
 1 s:C = DE, O = Deutsche Telekom Security GmbH, CN = Telekom Security ServerID OV Class 2 CA
   i:C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=C = DE, O = 1&1 Mail & Media GmbH, ST = Rheinland-Pfalz, L = Montabaur, CN = *.web.de

issuer=C = DE, O = Deutsche Telekom Security GmbH, CN = Telekom Security ServerID OV Class 2 CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3952 bytes and written 381 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE