TLS/SSL certificate check


Port to connect on:
Secure HTTP / HTTPS - port 443 Secured SMTP - port 465 Secured IMAP - port 993 Secured POP3 - port 995

TLS/SSL check of 'damian.ns.cloudflare.com (108.162.195.50)'

Multiple A-records!

The domain 'damian.ns.cloudflare.com' has severals A/AAAA-records - and thereby multiple IP's to check.

click to use
162.159.44.50
click to use
172.64.35.50

Summary


Host:
damian.ns.cloudflare.com, 108.162.195.50, port 443


Protocols:
All good
 4 supported protocols: TLS 1.3, TLS 1.2, TLS 1.1, TLS 1.0


Certificate:
All good
 Certificate 'cloudflare.com, US' is verified okay. Issued by 'Cloudflare Inc ECC CA-3'. Expires 31-12-2024.

Protocol support



Protocol support:
TLS 1.3
Supported
TLS 1.2
Supported
TLS 1.1
Supported
TLS 1.0
Supported
SSL 3.0
No support
SSL 2.0
No support

Verification:
TLS 1.3 is supported
 
Please consider disableing TLS 1.1, 1.0, SSL3 and SSL2 - as of March 2021, TLS 1.1 and 1.0 was oficially depricated, and as of June 2015 SSL3 and SSL2 was depricated. Use of either protocol is not recomended

Chain of certificates

3 of 3 - End-Entity
cloudflare.com

Certificat:
cloudflare.com, US

Issued by:
Cloudflare Inc ECC CA-3, US

Valid:
From 29-01-2024 to 31-12-2024

Verification:
Certificate is verified okay

SAN's:
cloudflare.com
ns.cloudflare.com
*.ns.cloudflare.com
*.secondary.cloudflare.com
secondary.cloudflare.com

Key:
ECC
Signature algorithm:
sha256ECDSA

Serial:
02B85884C0A69C74F3A30FCE1F360007

PEM format:
Click to see certificate as PEM (modal)

2 of 3 - Intermediate
Cloudflare Inc ECC CA-3

Certificat:
Cloudflare Inc ECC CA-3, US

Issued by:
Baltimore CyberTrust Root, IE

Valid:
From 27-01-2020 to 31-12-2024

Verification:
Certificate is verified okay

Key:
ECC
Signature algorithm:
sha256RSA

Serial:
0A3787645E5FB48C224EFD1BED140C3C

PEM format:
Click to see certificate as PEM (modal)

1 of 3 - Root certificate
Baltimore CyberTrust Root

Certificat:
Baltimore CyberTrust Root, IE

Issued by:
Baltimore CyberTrust Root, IE

Valid:
From 12-05-2000 to 12-05-2025

Verification:
Certificate is verified okay

Key:
RSA, 2048 bit
Signature algorithm:
sha1RSA

Serial:
020000B9

PEM format:
Click to see certificate as PEM (modal)

Root Store trust

Root Certificat:
Baltimore CyberTrust Root
Issued by:
DigiCert

Root Store trust:
The root certificte is trustet by ALL major trusted root certificate stores

Microsoft:
Root Certificate is fully trusted by Microsoft (Windows)

Apple:
Root Certificate is fully is trusted by Apple (iOS, iPadOS, macOS)

Android:
Root Certificate is fully is trusted by Android

API

You may perform this lookup using the API and get the results as easy-to-parse JSON data.

Read more on the API at https://iamroot.tech/about/api (regarding authentication and rate limits, among other things), or give it a go right away using the 'try it' button.

 
GET
 https://iamroot.tech/ssl-certificate-check/api/?host=damian.ns.cloudflare.com copy try it
 

Log

050+050
  • Host 'damian.ns.cloudflare.com' resolved in 49ms
050+000
  • INFMultiple A-records!
    Domain 'damian.ns.cloudflare.com' has several A-records, and thereby multiple IPs to check. IP 108.162.195.50 will be used.
050+000
  • Check protocols
050+000
  • Start SSL 2.0 protocol check, damian.ns.cloudflare.com (108.162.195.50), port 443
050+000
  • Start TLS 1.2 protocol check, damian.ns.cloudflare.com (108.162.195.50), port 443
050+000
  • Start TLS 1.3 protocol check, damian.ns.cloudflare.com (108.162.195.50), port 443
050+000
  • Start TLS 1.0 protocol check, damian.ns.cloudflare.com (108.162.195.50), port 443
050+000
  • Start TLS 1.1 protocol check, damian.ns.cloudflare.com (108.162.195.50), port 443
051+000
  • Start SSL 3.0 protocol check, damian.ns.cloudflare.com (108.162.195.50), port 443
059+008
  • Protocol check of SSL 3.0 done in 8ms - failed
    Unable to authenticate connection using SSL 3.0
059+009
  • Protocol check of SSL 2.0 done in 8ms - failed
    Unable to authenticate connection using SSL 2.0
075+025
  • Protocol check of TLS 1.3 done in 24ms - all good
079+029
  • Protocol check of TLS 1.0 done in 28ms - all good
079+029
  • Protocol check of TLS 1.1 done in 28ms - all good
081+030
  • Protocol check of TLS 1.2 done in 30ms - all good
081+022
  • TLS 1.3 is supported
    Please consider disableing TLS 1.1, 1.0, SSL3 and SSL2 - as of March 2021, TLS 1.1 and 1.0 was oficially depricated, and as of June 2015 SSL3 and SSL2 was depricated. Use of either protocol is not recomended
081+000
  • Done
081+000
  • Check certificate
081+000
  • Load and verify chain of certificates
164+083
  • Full chain of certificates has been loaded and verified in 83ms.
164+000
  • End-Entity certificate verification success
    Certificat 'cloudflare.com' SUCCEDED the verification.
164+000
  • Host 'damian.ns.cloudflare.com' is matching Subject/SAN '*.ns.cloudflare.com' of certificate. All good!
164+000
  • Intermediate certificate verification success
    Certificat 'Cloudflare Inc ECC CA-3' SUCCEDED the verification.
164+000
  • Root certificate verification success
    Certificat 'Baltimore CyberTrust Root' SUCCEDED the verification.
164+000
  • Check root store status of root certificate
166+001
  • Trustet by all major trusted root certificate stores
    The root certificte is trustet by ALL major trusted root certificate stores
166+000
  • Done
166+000
  • Done
166+000
  • Done