TLS/SSL certificate check


Port to connect on:
Secure HTTP / HTTPS - port 443 Secured SMTP - port 465 Secured IMAP - port 993 Secured POP3 - port 995

TLS/SSL check of 'dns.google (8.8.4.4)'

Multiple A-records!

The domain 'dns.google' has severals A/AAAA-records - and thereby multiple IP's to check.

selected
8.8.4.4
click to use
8.8.8.8

Summary


Host:
dns.google, 8.8.4.4, port 443


Protocols:
All good
 2 supported protocols: TLS 1.3, TLS 1.2


Certificate:
All good
 Certificate 'dns.google' is verified okay. Issued by 'GTS CA 1C3'. Expires 01-07-2024.

Protocol support



Protocol support:
TLS 1.3
Supported
TLS 1.2
Supported
TLS 1.1
No support
TLS 1.0
No support
SSL 3.0
No support
SSL 2.0
No support

Verification:
TLS 1.3 is supported
 

Chain of certificates

3 of 3 - End-Entity
dns.google

Certificat:
dns.google

Issued by:
GTS CA 1C3, Google Trust Services LLC, US

Valid:
From 08-04-2024 to 01-07-2024

Verification:
Certificate is verified okay

SAN's:
dns.google
dns.google.com
*.dns.google.com
8888.google
dns64.dns.google
8.8.8.8
8.8.4.4
2001:4860:4860:0000:0000:0000:0000:8888
2001:4860:4860:0000:0000:0000:0000:8844
2001:4860:4860:0000:0000:0000:0000:6464
2001:4860:4860:0000:0000:0000:0000:0064

Key:
ECC
Signature algorithm:
sha256RSA

Serial:
00C27FFE41751BB95E0AC8B804F3156EDA

PEM format:
Click to see certificate as PEM (modal)

2 of 3 - Intermediate
GTS CA 1C3

Certificat:
GTS CA 1C3, Google Trust Services LLC, US

Issued by:
GTS Root R1, Google Trust Services LLC, US

Valid:
From 12-08-2020 to 29-09-2027

Verification:
Certificate is verified okay

Key:
RSA, 2048 bit
Signature algorithm:
sha256RSA

Serial:
0203BC53596B34C718F5015066

PEM format:
Click to see certificate as PEM (modal)

1 of 3 - Root certificate
GTS Root R1

Certificat:
GTS Root R1, Google Trust Services LLC, US

Issued by:
GTS Root R1, Google Trust Services LLC, US

Valid:
From 21-06-2016 to 21-06-2036

Verification:
Certificate is verified okay

Key:
RSA, 4096 bit
Signature algorithm:
sha384RSA

Serial:
6E47A9C54B470C0DEC33D089B91CF4E1

PEM format:
Click to see certificate as PEM (modal)

Root Store trust

Root Certificat:
GTS Root R1
Issued by:
Google Trust Services LLC

Root Store trust:
The root certificte is trustet by ALL major trusted root certificate stores

Microsoft:
Root Certificate is fully trusted by Microsoft (Windows)

Apple:
Root Certificate is fully is trusted by Apple (iOS, iPadOS, macOS)

Android:
Root Certificate is fully is trusted by Android

API

You may perform this lookup using the API and get the results as easy-to-parse JSON data.

Read more on the API at https://iamroot.tech/about/api (regarding authentication and rate limits, among other things), or give it a go right away using the 'try it' button.

 
GET
 https://iamroot.tech/ssl-certificate-check/api/?host=dns.google copy try it
 

Log

040+040
  • Host 'dns.google' resolved in 39ms
040+000
  • INFMultiple A-records!
    Domain 'dns.google' has several A-records, and thereby multiple IPs to check. IP 8.8.4.4 will be used.
040+000
  • Check protocols
040+000
  • Start SSL 2.0 protocol check, dns.google (8.8.4.4), port 443
040+000
  • Start TLS 1.2 protocol check, dns.google (8.8.4.4), port 443
040+000
  • Start TLS 1.3 protocol check, dns.google (8.8.4.4), port 443
040+000
  • Start TLS 1.1 protocol check, dns.google (8.8.4.4), port 443
040+000
  • Start TLS 1.0 protocol check, dns.google (8.8.4.4), port 443
040+000
  • Start SSL 3.0 protocol check, dns.google (8.8.4.4), port 443
050+010
  • Protocol check of SSL 3.0 done in 9ms - failed
    Unable to authenticate connection using SSL 3.0
050+010
  • Protocol check of SSL 2.0 done in 9ms - failed
    Unable to authenticate connection using SSL 2.0
057+017
  • Protocol check of TLS 1.0 done in 16ms - failed
    Unable to authenticate connection using TLS 1.0
058+017
  • Protocol check of TLS 1.1 done in 17ms - failed
    Unable to authenticate connection using TLS 1.1
077+037
  • Protocol check of TLS 1.3 done in 36ms - all good
085+045
  • Protocol check of TLS 1.2 done in 44ms - all good
085+035
  • TLS 1.3 is supported
085+000
  • Done
085+000
  • Check certificate
085+000
  • Load and verify chain of certificates
222+137
  • Full chain of certificates has been loaded and verified in 136ms.
222+000
  • End-Entity certificate verification success
    Certificat 'dns.google' SUCCEDED the verification.
222+000
  • Host 'dns.google' is matching Subject/SAN 'dns.google' of certificate. All good!
222+000
  • Intermediate certificate verification success
    Certificat 'GTS CA 1C3' SUCCEDED the verification.
222+000
  • Root certificate verification success
    Certificat 'GTS Root R1' SUCCEDED the verification.
222+000
  • Check root store status of root certificate
223+001
  • Trustet by all major trusted root certificate stores
    The root certificte is trustet by ALL major trusted root certificate stores
224+000
  • Done
224+000
  • Done
224+000
  • Done