Namecheap.com

SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

Hostname: Matches Common Name or/and SAN
Expired: No (281 days till expiration)
Public Key: We were unable to find any issues in the public key of end-entity certificate
Trusted: Yes, we were able to verify the certificate
Self-Signed: No, the end-entity certificate is not self-signed
Chain Issues: The order of certificates is invalid or certificates cannot build certification path
Weak signatures: No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status: OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To: 217.118.241.198
Reverse IP lookup: No records found
Nameserver: ns-1160.awsdns-17.org.
Nameserver: ns-1636.awsdns-12.co.uk.
Nameserver: ns-232.awsdns-29.com.
Nameserver: ns-799.awsdns-35.net.

General Information

Common Name: *.wfp.org
SANs: DNS:*.wfp.orgDNS:wfp.org Total number of SANs: 2
Signature Algorithm: sha256WithRSAEncryption
Key Type: RSA
Key size: 2048 bits
Serial Number: f8df4b825271d1a472ad14df0997af4
Not Before: Jan 04, 2024 00:00:00 GMT
Not After: Jan 03, 2025 23:59:59 GMT
Number of certs: 3
Revocation Status: good
OCSP Stapling: Not Supported
Server: nginx
HSTS: Not Supported
HPKP: Not Supported

Chain Information

Certificate # 1 - Common Name: *.wfp.org

Decode this certificate for verbose information →
Subject Common Name *.wfp.org
Issuer Common Name RapidSSL TLS RSA CA G1
Issuer Organization DigiCert Inc
Not Before: Jan 04, 2024 00:00:00 GMT
Not After: Jan 03, 2025 23:59:59 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: f8df4b825271d1a472ad14df0997af4
SHA1 Fingerprint: FD:09:DA:D9:AA:00:C6:DD:20:D7:63:C8:13:95:13:45:7D:90:F9:4B
MD5 Fingerprint: D9:40:77:78:41:39:3B:C3:D3:85:96:3B:36:6D:04:78

Certificate # 2 - Common Name: DigiCert Global Root G2

Decode this certificate for verbose information →
In place? No, this certificate does not directly certify the preceding one
Subject Common Name DigiCert Global Root G2
Subject Organization DigiCert Inc
Issuer Common Name DigiCert Global Root G2
Issuer Organization DigiCert Inc
Not Before: Aug 01, 2013 12:00:00 GMT
Not After: Jan 15, 2038 12:00:00 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 33af1e6a711a9a0bb2864b11d09fae5
SHA1 Fingerprint: DF:3C:24:F9:BF:D6:66:76:1B:26:80:73:FE:06:D1:CC:8D:4F:82:A4
MD5 Fingerprint: E4:A6:8A:C8:54:AC:52:42:46:0A:FD:72:48:1B:2A:44

Certificate # 3 - Common Name: RapidSSL TLS RSA CA G1

Decode this certificate for verbose information →
In place? No, this certificate does not directly certify the preceding one
Subject Common Name RapidSSL TLS RSA CA G1
Subject Organization DigiCert Inc
Issuer Common Name DigiCert Global Root G2
Issuer Organization DigiCert Inc
Not Before: Nov 02, 2017 12:24:33 GMT
Not After: Nov 02, 2027 12:24:33 GMT
Signature Algorithm: sha256WithRSAEncryption
Serial Number: b259422ced9812a15a04e99528a0efa
SHA1 Fingerprint: CB:FE:9E:B4:3B:3B:37:FE:0D:FB:C4:C2:EB:2D:4E:07:D0:8B:D8:E8
MD5 Fingerprint: 98:EB:0B:62:C3:FE:53:EA:C8:CA:A8:FD:B5:80:20:EE

OpenSSL Handshake

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1
verify return:1
depth=0 CN = *.wfp.org
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:CN = *.wfp.org
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1
   i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.wfp.org

issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL TLS RSA CA G1

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4256 bytes and written 398 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE