SSL Checker

Submit the Hostname and Port in the fields below. This checker supports SNI and STARTTLS.

Report

It's all good. We have not detected any issues.

Hostname:	Matches Common Name or/and SAN
Expired:	No (135 days till expiration)
Public Key:	We were unable to find any issues in the public key of end-entity certificate
Trusted:	Yes, we were able to verify the certificate
Self-Signed:	No, the end-entity certificate is not self-signed
Chain Issues:	No, we were unable to detect any issues in the certificate chain sent by the server
Weak signatures:	No, certificates sent by the server were not signed utilizing a weak hash function
OCSP Status:	OCSP Responder returned "good" status for the end-entity certificate

DNS Information

Resolves To:	5.45.213.2
Reverse IP lookup:	yandex.kz.
Nameserver:	ns1.yandex.net.
Nameserver:	ns2.yandex.net.

General Information

Common Name:	*.xn--d1acpjx3f.xn--p1ai
SANs:	DNS:.xn--d1acpjx3f.xn--p1aiDNS:.yandex.azDNS:yandex.azDNS:.yandex.byDNS:yandex.byDNS:.yandex.co.ilDNS:yandex.co.ilDNS:.yandex.comDNS:yandex.comDNS:.yandex.com.amDNS:yandex.com.amDNS:.yandex.com.geDNS:yandex.com.geDNS:.yandex.com.trDNS:yandex.com.trDNS:.yandex.eeDNS:yandex.eeDNS:.yandex.frDNS:yandex.frDNS:.yandex.kzDNS:yandex.kzDNS:.yandex.ltDNS:yandex.ltDNS:.yandex.lvDNS:yandex.lvDNS:.yandex.mdDNS:yandex.mdDNS:.yandex.ruDNS:yandex.ruDNS:.yandex.tjDNS:yandex.tjDNS:.yandex.tmDNS:yandex.tmDNS:.yandex.uzDNS:yandex.uzDNS:.ya.ruDNS:ya.ruDNS:.yandex.deDNS:yandex.deDNS:.yandex.orgDNS:yandex.orgDNS:.yandex.netDNS:yandex.netDNS:.yandex.jobsDNS:yandex.jobsDNS:.yandex.aeroDNS:yandex.aeroDNS:xn--d1acpjx3f.xn--p1ai Total number of SANs: 48
Organization:	YANDEX LLC
Locality:	Moscow
Signature Algorithm:	ecdsa-with-SHA384
Key Type:	ECDSA (secp256r1)
Key size:	256 bits
Serial Number:	7097913e97c436858de28d6c
Not Before:	Mar 04, 2024 10:29:07 GMT
Not After:	Sep 01, 2024 20:59:59 GMT
Number of certs:	3
Revocation Status:	good
OCSP Stapling:	Not Supported
Server:	Not Provided
HSTS:	Not Supported
HPKP:	Not Supported

Chain Information

Certificate # 1 - Common Name: *.xn--d1acpjx3f.xn--p1ai

Decode this certificate for verbose information →

Subject Common Name	*.xn--d1acpjx3f.xn--p1ai
Subject Organization	YANDEX LLC
Issuer Common Name	GlobalSign ECC OV SSL CA 2018
Issuer Organization	GlobalSign nv-sa
Not Before:	Mar 04, 2024 10:29:07 GMT
Not After:	Sep 01, 2024 20:59:59 GMT
Signature Algorithm:	ecdsa-with-SHA384
Serial Number:	7097913e97c436858de28d6c
SHA1 Fingerprint:	17:FB:0C:B6:3F:7F:A5:4C:41:AD:D0:5C:6B:9A:96:47:FE:AF:C8:5C
MD5 Fingerprint:	E7:C0:31:D9:A7:6C:4B:C7:78:8D:9D:B5:77:3F:81:73

Certificate # 2 - Common Name: GlobalSign ECC OV SSL CA 2018

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GlobalSign ECC OV SSL CA 2018
Subject Organization	GlobalSign nv-sa
Issuer Common Name	GlobalSign
Issuer Organization	GlobalSign
Not Before:	Nov 21, 2018 00:00:00 GMT
Not After:	Nov 21, 2028 00:00:00 GMT
Signature Algorithm:	ecdsa-with-SHA384
Serial Number:	1ee5f2295424905f90191a8dc
SHA1 Fingerprint:	95:3E:42:EE:8D:62:7C:ED:52:B9:6A:DF:C0:22:26:B5:DE:13:04:17
MD5 Fingerprint:	96:35:DE:98:6B:C7:F9:B1:9F:09:AE:C5:0E:3A:39:09

Certificate # 3 - Common Name: GlobalSign

Decode this certificate for verbose information →

In place?	Yes, this certificate directly certifies the preceding one
Subject Common Name	GlobalSign
Subject Organization	GlobalSign
Issuer Common Name	GlobalSign Root CA
Issuer Organization	GlobalSign nv-sa
Not Before:	Jun 19, 2019 00:00:00 GMT
Not After:	Jan 28, 2028 12:00:00 GMT
Signature Algorithm:	sha384WithRSAEncryption
Serial Number:	751e3f53e3185933e95f08eceead0297
SHA1 Fingerprint:	45:76:9B:51:27:DC:17:55:42:4B:EC:B5:68:C7:0B:43:39:83:3F:BE
MD5 Fingerprint:	F4:7B:40:BC:F4:BD:78:D4:6E:FB:94:F9:E1:A9:5C:13

OpenSSL Handshake

depth=2 OU = GlobalSign ECC Root CA - R5, O = GlobalSign, CN = GlobalSign
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign ECC OV SSL CA 2018
verify return:1
depth=0 C = RU, ST = Moscow, L = Moscow, O = YANDEX LLC, CN = *.xn--d1acpjx3f.xn--p1ai
verify return:1
CONNECTED(00000003)
OCSP response: no response sent
---
Certificate chain
 0 s:C = RU, ST = Moscow, L = Moscow, O = YANDEX LLC, CN = *.xn--d1acpjx3f.xn--p1ai
   i:C = BE, O = GlobalSign nv-sa, CN = GlobalSign ECC OV SSL CA 2018
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = BE, O = GlobalSign nv-sa, CN = GlobalSign ECC OV SSL CA 2018
   i:OU = GlobalSign ECC Root CA - R5, O = GlobalSign, CN = GlobalSign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:OU = GlobalSign ECC Root CA - R5, O = GlobalSign, CN = GlobalSign
   i:C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=C = RU, ST = Moscow, L = Moscow, O = YANDEX LLC, CN = *.xn--d1acpjx3f.xn--p1ai

issuer=C = BE, O = GlobalSign nv-sa, CN = GlobalSign ECC OV SSL CA 2018

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4033 bytes and written 400 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE