TLS/SSL certificate check


Protocol:
Best possible TLS 1.3 TLS 1.2 TLS 1.1 (obsolete) TLS 1.0 (obsolete)

Port to connect on:
Secure HTTP / HTTPS - port 443 Secured SMTP - port 465 Secured IMAP - port 993 Secured POP3 - port 995

Related tools

DNS lookupDNS propagation check
updated
WHOIS / RDAP lookupWHOIS / RDAP lookupPort scan + probeingHTTP/S request tool

To get this result as JSON data using the API, request the URL detailed below. Try it out or read more on the api.

GEThttps://iamroot.tech/ssl-certificate-check/api/?host=bbc.co.uk

TLS/SSL check of 'bbc.co.uk (151.101.0.81)'

Multiple A-records!

The domain 'bbc.co.uk' has severals A/AAAA-records - and thereby multiple IP's to check.

selected
151.101.0.81
click to use
151.101.64.81
click to use
151.101.128.81
click to use
151.101.192.81
click to use
2a04:4e42::81
click to use
2a04:4e42:200::81
click to use
2a04:4e42:400::81
click to use
2a04:4e42:600::81

Certificate retrival


  • Certificate 'www.bbc.com' retrived from 'bbc.co.uk' (151.101.0.81) on port 443 using TLS 1.3, in a total of 210ms.

Basic verification


Protocol:
All good
 TLS 1.3, cipher algorithm AES256
 
Protocol TLS 1.3 is verified okay and provide a sufficient level of security.

Host:
All good
 bbc.co.uk
 
Host 'bbc.co.uk' is matching Subject/SAN 'bbc.co.uk' of certificate. All good!

Certificate:
All good
 www.bbc.com, BRITISH BROADCASTING CORPORATION, GB
 
All good! See below for further details.

Chain of certificates

3 of 3 - End-Entity
www.bbc.com

Certificat:
www.bbc.com, BRITISH BROADCASTING CORPORATION, GB

Issued by:
GlobalSign RSA OV SSL CA 2018, GlobalSign nv-sa, BE

Valid:
From 30-11-2023 to 12-11-2024

Verification:
Succeeded!

SAN's:
www.bbc.com
www.bbc.co.uk
www.bbcrussian.com
bbc.co.uk
bbcrussian.com
session.bbc.co.uk
search.bbc.co.uk
open.live.bbc.co.uk
r.bbci.co.uk
account.bbc.com
session.bbc.com
bbc.com

Key:
RSA, 2048 bit
Signature algorithm:
sha256RSA

Serial:
3211AFE478112BBF5B08B1E7

PEM format:
Click to see certificate as PEM (modal)

2 of 3 - Intermediate
GlobalSign RSA OV SSL CA 2018

Certificat:
GlobalSign RSA OV SSL CA 2018, GlobalSign nv-sa, BE

Issued by:
GlobalSign

Valid:
From 20-11-2018 to 20-11-2028

Verification:
Succeeded!

Key:
RSA, 2048 bit
Signature algorithm:
sha256RSA

Serial:
01EE5F221DFC623BD4333A8557

PEM format:
Click to see certificate as PEM (modal)

1 of 3 - Root certificate
GlobalSign

Certificat:
GlobalSign

Issued by:
GlobalSign

Valid:
From 18-03-2009 to 18-03-2029

Verification:
Succeeded!

Key:
RSA, 2048 bit
Signature algorithm:
sha256RSA

Serial:
04000000000121585308A2

PEM format:
Click to see certificate as PEM (modal)

Root Store trust



Root Certificat:
GlobalSign
Issued by:
GlobalSign nv-sa

Root Store trust:
Fully trusted!

Microsoft:
Root Certificate 'GlobalSign' is fully trusted by Microsoft (Windows)

Apple:
Root Certificate 'GlobalSign' is fully is trusted by Apple (iOS, iPadOS, macOS)

Android:
Root Certificate 'GlobalSign' is fully is trusted by Android

Log

198+198
  • Host 'bbc.co.uk' resolved in 198ms
199+000
  • INFMultiple A-records!
    Domain 'bbc.co.uk' has several A-records, and thereby multiple IPs to check. IP 151.101.0.81 will be used.
200+001
  • Connected to host 'bbc.co.uk' (151.101.0.81) on port 443.
200+000
  • Secure connection established
211+011
  • Connection has been authenticated
211+000
  • Secure connection established and certificate has been retrived
211+000
  • Load and verify chain of certificates
433+222
  • Full chain of certificates has been loaded and verified in 221ms.
433+000
  • End-Entity certificate verification success
    Certificat 'www.bbc.com' SUCCEDED the verification.
433+000
  • Intermediate certificate verification success
    Certificat 'GlobalSign RSA OV SSL CA 2018' SUCCEDED the verification.
433+000
  • Root certificate verification success
    Certificat 'GlobalSign' SUCCEDED the verification.
433+000
  • Done
433+000
  • Check root store status of root certificate
435+002
  • Trustet by all major trusted root certificate stores
    The certificte is trustet by ALL major trusted root certificate store
435+000
  • Done
435+000
  • Host 'bbc.co.uk' is matching Subject/SAN 'bbc.co.uk' of certificate. All good!
435+000
  • Protocol TLS 1.3 verified okay!
435+000
  • Certificate has been verifyed