SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (41 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	162.252.204.215
Reverse IP lookup:	kohlrabi.sandwich.net.
Nameserver:	a.sn11.com.
Nameserver:	b.sn11.com.

General Information

Common Name:	geekingoutabout.com
SANs:	DNS:geekingoutabout.comDNS:www.geekingoutabout.com Total number of SANs: 2
Signature Algorithm:	ecdsa-with-SHA384
Key Type:	ECDSA (secp256r1)
Key size:	256 bits
Serial Number:	3681e807c88645cf4906ef5baf5b9a25e2f
Not Before:	Mar 09, 2024 07:23:47 GMT
Not After:	Jun 07, 2024 07:23:46 GMT
Number of certs:	3
Revocation Status:	good
OCSP Stapling:	Supported
Server:	Apache/2
HSTS:	max-age:31536000; includeSubdomains; preload
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: geekingoutabout.com

Decode this certificate for verbose information →

Subject Common Name	geekingoutabout.com
Issuer Common Name	E1
Issuer Organization	Let's Encrypt
Not Before:	Mar 09, 2024 07:23:47 GMT
Not After:	Jun 07, 2024 07:23:46 GMT
Signature Algorithm:	ecdsa-with-SHA384
Serial Number:	3681e807c88645cf4906ef5baf5b9a25e2f
SHA1 Fingerprint:	B1:02:AC:AF:B8:60:C2:86:4F:E5:61:44:54:20:C4:FE:E8:B7:C6:EB
MD5 Fingerprint:	1B:36:50:8B:FC:1C:D4:43:50:C4:3A:29:CE:13:C5:0E

Certificate # 2 - Common Name: E1

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	E1
Subject Organization	Let's Encrypt
Issuer Common Name	ISRG Root X2
Issuer Organization	Internet Security Research Group
Not Before:	Sep 04, 2020 00:00:00 GMT
Not After:	Sep 15, 2025 16:00:00 GMT
Signature Algorithm:	ecdsa-with-SHA384
Serial Number:	b3bddff8a7845bbce903a04135b34a45
SHA1 Fingerprint:	09:1E:8E:A1:B2:56:A3:12:96:2A:F6:C1:40:C0:FB:F0:79:A4:07:B3
MD5 Fingerprint:	90:D3:66:64:04:88:FC:F8:76:BD:BD:3A:19:C5:FB:F1

Certificate # 3 - Common Name: ISRG Root X2

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	ISRG Root X2
Subject Organization	Internet Security Research Group
Issuer Common Name	ISRG Root X1
Issuer Organization	Internet Security Research Group
Not Before:	Sep 04, 2020 00:00:00 GMT
Not After:	Sep 15, 2025 16:00:00 GMT
Signature Algorithm:	sha256WithRSAEncryption
Serial Number:	79e492886376fd40848c23fc631e463
SHA1 Fingerprint:	15:16:82:F5:21:8C:0A:51:1C:28:F4:06:0A:73:B9:CA:78:CE:9A:53
MD5 Fingerprint:	29:F1:C1:B2:6D:92:E8:93:B6:E6:85:2A:B7:08:CC:E1

OpenSSL Handshake

depth=3 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X2
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = E1
verify return:1
depth=0 CN = geekingoutabout.com
verify return:1
CONNECTED(00000003)
OCSP response: 
======================================
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: C = US, O = Let's Encrypt, CN = E1
    Produced At: Apr 26 00:02:00 2024 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: EF900170DD588F2A651E21511FDCD0BB6F512BAB
      Issuer Key Hash: 5AF3ED2BFC36C23779B95230EA546FCF55CB2EAC
      Serial Number: 03681E807C88645CF4906EF5BAF5B9A25E2F
    Cert Status: good
    This Update: Apr 26 00:02:00 2024 GMT
    Next Update: May  3 00:01:58 2024 GMT

    Signature Algorithm: ecdsa-with-SHA384
         30:64:02:30:16:52:2c:30:7a:ef:04:4a:7b:2c:ad:51:70:a1:
         d8:e3:2e:36:d8:2e:0d:91:ea:7d:0b:53:5d:ba:cd:f3:33:d2:
         d7:19:c6:38:75:9e:c2:85:1a:da:66:18:23:93:d1:17:02:30:
         72:5b:fa:fb:d8:09:a5:bd:6d:53:2e:cd:e7:30:bf:88:49:9e:
         09:9d:57:ae:c6:9e:ac:cf:5b:56:f3:8e:c9:4d:bf:54:f9:10:
         13:04:99:5d:91:b2:b5:24:e1:96:e8:36
======================================
---
Certificate chain
 0 s:CN = geekingoutabout.com
   i:C = US, O = Let's Encrypt, CN = E1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = Let's Encrypt, CN = E1
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X2
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
-----BEGIN CERTIFICATE-----
MIIEYDCCAkigAwIBAgIQB55JKIY3b9QISMI/xjHkYzANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy
Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yMDA5MDQwMDAwMDBa
Fw0yNTA5MTUxNjAwMDBaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5l
dCBTZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgy
MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0H
ttwW+1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7
AlF9ItgKbppbd9/w+kHsOdx1ymgHDB/qo4HlMIHiMA4GA1UdDwEB/wQEAwIBBjAP
BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8Qpau3ktIO/qS+J6Mz22LqXI3lTAf
BgNVHSMEGDAWgBR5tFnme7bl5AFzgAiIyBpY9umbbjAyBggrBgEFBQcBAQQmMCQw
IgYIKwYBBQUHMAKGFmh0dHA6Ly94MS5pLmxlbmNyLm9yZy8wJwYDVR0fBCAwHjAc
oBqgGIYWaHR0cDovL3gxLmMubGVuY3Iub3JnLzAiBgNVHSAEGzAZMAgGBmeBDAEC
ATANBgsrBgEEAYLfEwEBATANBgkqhkiG9w0BAQsFAAOCAgEAG38lK5B6CHYAdxjh
wy6KNkxBfr8XS+Mw11sMfpyWmG97sGjAJETM4vL80erb0p8B+RdNDJ1V/aWtbdIv
P0tywC6uc8clFlfCPhWt4DHRCoSEbGJ4QjEiRhrtekC/lxaBRHfKbHtdIVwH8hGR
Ib/hL8Lvbv0FIOS093nzLbs3KvDGsaysUfUfs1oeZs5YBxg4f3GpPIO617yCnpp2
D56wKf3L84kHSBv+q5MuFCENX6+Ot1SrXQ7UW0xx0JLqPaM2m3wf4DtVudhTU8yD
ZrtK3IEGABiL9LPXSLETQbnEtp7PLHeOQiALgH6fxatI27xvBI1sRikCDXCKHfES
c7ZGJEKeKhcY46zHmMJyzG0tdm3dLCsmlqXPIQgb5dovy++fc5Ou+DZfR4+XKM6r
4pgmmIv97igyIintTJUJxCD6B+GGLET2gUfA5GIy7R3YPEiIlsNekbave1mk7uOG
nMeIWMooKmZVm4WAuR3YQCvJHBM8qevemcIWQPb1pK4qJWxSuscETLQyu/w4XKAM
YXtX7HdOUM+vBqIPN4zhDtLTLxq9nHE+zOH40aijvQT2GcD5hq/1DhqqlWvvykdx
S2McTZbbVSMKnQ+BdaDmQPVkRgNuzvpqfQbspDQGdNpT2Lm4xiN9qfgqLaSCpi4t
EcrmzTFYeYXmchynn9NM0GbQp7s=
-----END CERTIFICATE-----
---
Server certificate
subject=CN = geekingoutabout.com

issuer=C = US, O = Let's Encrypt, CN = E1

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3506 bytes and written 414 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE