TLS/SSL certificate check


Port to connect on:
Secure HTTP / HTTPS - port 443 Secured SMTP - port 465 Secured IMAP - port 993 Secured POP3 - port 995

TLS/SSL check of '365.expresso.blog (2a00:4b40:aaaa:2001::5)'

Multiple A-records!

The domain '365.expresso.blog' has severals A/AAAA-records - and thereby multiple IP's to check.

click to use
37.9.175.131

Summary


Host:
365.expresso.blog, 2a00:4b40:aaaa:2001::5, port 443


Protocols:
All good
 2 supported protocols: TLS 1.3, TLS 1.2


Certificate:
All good
 Certificate '*.expresso.blog' is verified okay. Issued by 'YR1'. Expires 2026-12-14.

Protocol support



Protocol support:
TLS 1.3
Supported
TLS 1.2
Supported
TLS 1.1
No support
TLS 1.0
No support
SSL 3.0
No support
SSL 2.0
No support

Verification:
TLS 1.3 is supported
 

Chain of certificates

4 of 4 - End-Entity
*.expresso.blog

Certificat:
*.expresso.blog

Issued by:
YR1, Let's Encrypt, US

Valid:
From 2026-09-15 to 2026-12-14

Verification:
Certificate is verified okay

SAN's:
*.expresso.blog
expresso.blog

Key:
RSA, 4096 bit
Signature algorithm:
sha256RSA

Serial:
06B698D5A6C77A6AD2D750549AEBD848A85D

PEM format:
Click to see certificate as PEM (modal)

3 of 4 - Intermediate
YR1

Certificat:
YR1, Let's Encrypt, US

Issued by:
Root YR, ISRG, US

Valid:
From 2025-09-03 to 2028-09-02

Verification:
Certificate is verified okay

Key:
RSA, 2048 bit
Signature algorithm:
sha256RSA

Serial:
00A20253F15F2691C05DC1CE13B9BCCA4E

PEM format:
Click to see certificate as PEM (modal)

2 of 4 - Intermediate
Root YR

Certificat:
Root YR, ISRG, US

Issued by:
ISRG Root X1, Internet Security Research Group, US

Valid:
From 2026-05-13 to 2032-09-02

Verification:
Certificate is verified okay

Key:
RSA, 4096 bit
Signature algorithm:
sha256RSA

Serial:
00F24B6D17F9D9AD7CB1C9FEA78782699F

PEM format:
Click to see certificate as PEM (modal)

1 of 4 - Root certificate
ISRG Root X1

Certificat:
ISRG Root X1, Internet Security Research Group, US

Issued by:
ISRG Root X1, Internet Security Research Group, US

Valid:
From 2015-06-04 to 2035-06-04

Verification:
Certificate is verified okay

Key:
RSA, 4096 bit
Signature algorithm:
sha256RSA

Serial:
008210CFB0D240E3594463E0BB63828B00

PEM format:
Click to see certificate as PEM (modal)

Root Store trust

ISRG Root X1

Issued by:
Internet Security Research Group

Root Store trust:
The root certificte is trustet by ALL major trusted root certificate stores

Microsoft:
Root Certificate is fully trusted by Microsoft (Windows)

Apple:
Root Certificate is fully is trusted by Apple (iOS, iPadOS, macOS)

Android:
Root Certificate is fully is trusted by Android

Track this lookup for changes

Setup TLS/SSL monitor
Keep track of TLS/SSL certificate renewals, changes, and expirations.

Setup is done in 15 seconds. Alerts by e-mail. No cost. E-mail confirmation is needed.

Read more at https://iamroot.tech/user/frontpage/.

API

You may perform this lookup using the API and get the results as easy-to-parse JSON data.

Read more on the API at https://iamroot.tech/about/api (regarding authentication and rate limits, among other things), or give it a go right away using the 'try it' button.

 
GET
 https://iamroot.tech/ssl-certificate-check/api/?host=365.expresso.blog&hostPort= copy try it
 

Log

086+086
  • Host '365.expresso.blog' resolved in 84ms
086+000
  • INFMultiple A-records!
    Domain '365.expresso.blog' has several A-records, and thereby multiple IPs to check. IP 2a00:4b40:aaaa:2001::5 will be used.
086+000
  • Check protocols
086+000
  • Start SSL 2.0 protocol check, 365.expresso.blog (2a00:4b40:aaaa:2001::5), port 443
086+000
  • Start TLS 1.3 protocol check, 365.expresso.blog (2a00:4b40:aaaa:2001::5), port 443
086+000
  • Start TLS 1.2 protocol check, 365.expresso.blog (2a00:4b40:aaaa:2001::5), port 443
087+000
  • Start TLS 1.1 protocol check, 365.expresso.blog (2a00:4b40:aaaa:2001::5), port 443
090+000
  • Start SSL 3.0 protocol check, 365.expresso.blog (2a00:4b40:aaaa:2001::5), port 443
090+000
  • Start TLS 1.0 protocol check, 365.expresso.blog (2a00:4b40:aaaa:2001::5), port 443
213+123
  • Protocol check of SSL 3.0 done in 122ms - failed
    Unable to authenticate connection using SSL 3.0
214+128
  • Protocol check of SSL 2.0 done in 128ms - failed
    Unable to authenticate connection using SSL 2.0
324+237
  • Protocol check of TLS 1.1 done in 236ms - failed
    Unable to authenticate connection using TLS 1.1
330+240
  • Protocol check of TLS 1.0 done in 239ms - failed
    Unable to authenticate connection using TLS 1.0
387+301
  • Protocol check of TLS 1.3 done in 301ms - all good
510+423
  • Protocol check of TLS 1.2 done in 423ms - all good
512+298
  • TLS 1.3 is supported
512+000
  • Done
512+000
  • Check certificate
512+000
  • Load and verify chain of certificates
530+018
  • Full chain of certificates has been loaded and verified in 17ms.
530+000
  • End-Entity certificate verification success
    Certificat '*.expresso.blog' SUCCEDED the verification.
530+000
  • Host '365.expresso.blog' is matching Subject/SAN '*.expresso.blog' of certificate. All good!
530+000
  • Intermediate certificate verification success
    Certificat 'YR1' SUCCEDED the verification.
530+000
  • Intermediate certificate verification success
    Certificat 'Root YR' SUCCEDED the verification.
530+000
  • Root certificate verification success
    Certificat 'ISRG Root X1' SUCCEDED the verification.
530+000
  • Check root store status of root certificate
532+002
  • Trustet by all major trusted root certificate stores
    The root certificte is trustet by ALL major trusted root certificate stores
532+000
  • Done
532+000
  • Done
532+000
  • Done
New features inbound 🚀
Within a couple of months, I'll launch a several new awesome features and tools. Signup for the newsletter to stay updated, and get early access as a beta tester.

Signup using Google  Microsoft  Slack  Discord  GitHub  or use this form.