TLS/SSL certificate check


Port to connect on:
Secure HTTP / HTTPS - port 443 Secured SMTP - port 465 Secured IMAP - port 993 Secured POP3 - port 995

TLS/SSL check of 'bbc.co.uk (2a04:4e42::81)'

Multiple A-records!

The domain 'bbc.co.uk' has severals A/AAAA-records - and thereby multiple IP's to check.

click to use
151.101.0.81
click to use
151.101.64.81
click to use
151.101.128.81
click to use
151.101.192.81
click to use
2a04:4e42:200::81
click to use
2a04:4e42:400::81
click to use
2a04:4e42:600::81

Summary


Host:
bbc.co.uk, 2a04:4e42::81, port 443


Protocols:
All good
 4 supported protocols: TLS 1.3, TLS 1.2, TLS 1.1, TLS 1.0


Certificate:
All good
 Certificate 'www.bbc.com, BRITISH BROADCASTING CORPORATION, GB' is verified okay. Issued by 'GlobalSign RSA OV SSL CA 2018'. Expires 2025-07-19.

Protocol support



Protocol support:
TLS 1.3
Supported
TLS 1.2
Supported
TLS 1.1
Supported
TLS 1.0
Supported
SSL 3.0
No support
SSL 2.0
No support

Verification:
TLS 1.3 is supported
 
Consider disableing TLS 1.1, 1.0, SSL3 and SSL2 - as of March 2021, TLS 1.1 and 1.0 was officially deprecated, and as of June 2015 SSL3 and SSL2 was deprecated. Use of either protocol is not recomended

Chain of certificates

3 of 3 - End-Entity
www.bbc.com

Certificat:
www.bbc.com, BRITISH BROADCASTING CORPORATION, GB

Issued by:
GlobalSign RSA OV SSL CA 2018, GlobalSign nv-sa, BE

Valid:
From 2024-06-26 to 2025-07-19

Verification:
Certificate is verified okay

SAN's:
www.bbc.com
www.bbc.co.uk
www.bbcrussian.com
bbc.co.uk
bbcrussian.com
session.bbc.co.uk
search.bbc.co.uk
open.live.bbc.co.uk
news.bbc.co.uk
newsimg.bbc.co.uk
wwwnews.live.bbc.co.uk
cdnedge.bbc.co.uk
newsrss.bbc.co.uk
newsvote.bbc.co.uk
playlists.bbc.co.uk
node1.bbcimg.co.uk
r.bbci.co.uk
news.bbcimg.co.uk
account.bbc.com
session.bbc.com
bbc.com

Key:
RSA, 2048 bit
Signature algorithm:
sha256RSA

Serial:
62C34811A4083CC562DF7E91

PEM format:
Click to see certificate as PEM (modal)

2 of 3 - Intermediate
GlobalSign RSA OV SSL CA 2018

Certificat:
GlobalSign RSA OV SSL CA 2018, GlobalSign nv-sa, BE

Issued by:
GlobalSign

Valid:
From 2018-11-21 to 2028-11-21

Verification:
Certificate is verified okay

Key:
RSA, 2048 bit
Signature algorithm:
sha256RSA

Serial:
01EE5F221DFC623BD4333A8557

PEM format:
Click to see certificate as PEM (modal)

1 of 3 - Root certificate
GlobalSign

Certificat:
GlobalSign

Issued by:
GlobalSign

Valid:
From 2009-03-18 to 2029-03-18

Verification:
Certificate is verified okay

Key:
RSA, 2048 bit
Signature algorithm:
sha256RSA

Serial:
04000000000121585308A2

PEM format:
Click to see certificate as PEM (modal)

Root Store trust

GlobalSign

Issued by:
GlobalSign nv-sa

Root Store trust:
The root certificte is trustet by ALL major trusted root certificate stores

Microsoft:
Root Certificate is fully trusted by Microsoft (Windows)

Apple:
Root Certificate is fully is trusted by Apple (iOS, iPadOS, macOS)

Android:
Root Certificate is fully is trusted by Android

API

You may perform this lookup using the API and get the results as easy-to-parse JSON data.

Read more on the API at https://iamroot.tech/about/api (regarding authentication and rate limits, among other things), or give it a go right away using the 'try it' button.

 
GET
 https://iamroot.tech/ssl-certificate-check/api/?host=bbc.co.uk copy try it
 

Log

037+037
  • Host 'bbc.co.uk' resolved in 36ms
037+000
  • INFMultiple A-records!
    Domain 'bbc.co.uk' has several A-records, and thereby multiple IPs to check. IP 2a04:4e42::81 will be used.
037+000
  • Check protocols
037+000
  • Start SSL 2.0 protocol check, bbc.co.uk (2a04:4e42::81), port 443
038+000
  • Start TLS 1.3 protocol check, bbc.co.uk (2a04:4e42::81), port 443
038+000
  • Start TLS 1.2 protocol check, bbc.co.uk (2a04:4e42::81), port 443
039+000
  • Start TLS 1.1 protocol check, bbc.co.uk (2a04:4e42::81), port 443
039+000
  • Start TLS 1.0 protocol check, bbc.co.uk (2a04:4e42::81), port 443
039+000
  • Start SSL 3.0 protocol check, bbc.co.uk (2a04:4e42::81), port 443
040+002
  • Protocol check of SSL 2.0 done in 2ms - failed
    Unable to authenticate connection using SSL 2.0
041+002
  • Protocol check of SSL 3.0 done in 1ms - failed
    Unable to authenticate connection using SSL 3.0
048+009
  • Protocol check of TLS 1.0 done in 9ms - all good
048+010
  • Protocol check of TLS 1.3 done in 10ms - all good
048+010
  • Protocol check of TLS 1.2 done in 10ms - all good
052+013
  • Protocol check of TLS 1.1 done in 13ms - all good
052+012
  • TLS 1.3 is supported
    Consider disableing TLS 1.1, 1.0, SSL3 and SSL2 - as of March 2021, TLS 1.1 and 1.0 was officially deprecated, and as of June 2015 SSL3 and SSL2 was deprecated. Use of either protocol is not recomended
052+000
  • Done
052+000
  • Check certificate
052+000
  • Load and verify chain of certificates
217+165
  • Full chain of certificates has been loaded and verified in 164ms.
217+000
  • End-Entity certificate verification success
    Certificat 'www.bbc.com' SUCCEDED the verification.
217+000
  • Host 'bbc.co.uk' is matching Subject/SAN 'bbc.co.uk' of certificate. All good!
217+000
  • Intermediate certificate verification success
    Certificat 'GlobalSign RSA OV SSL CA 2018' SUCCEDED the verification.
217+000
  • Root certificate verification success
    Certificat 'GlobalSign' SUCCEDED the verification.
217+000
  • Check root store status of root certificate
218+001
  • Trustet by all major trusted root certificate stores
    The root certificte is trustet by ALL major trusted root certificate stores
218+000
  • Done
218+000
  • Done
218+000
  • Done
New features inbound 🚀
Within a couple of weeks, I'll launch a couple of new awesome features. Signup for the newsletter to stay updated, and get early access as a beta tester.

Signup using Google, Microsoft or Facebook .