TLS/SSL certificate check


Protocol:
Best possible TLS 1.3 TLS 1.2 TLS 1.1 (obsolete) TLS 1.0 (obsolete)

Port to connect on:
Secure HTTP / HTTPS - port 443 Secured SMTP - port 465 Secured IMAP - port 993 Secured POP3 - port 995

Related tools

DNS lookupDNS propagation check
updated
WHOIS / RDAP lookupWHOIS / RDAP lookupPort scan + probeingHTTP/S request tool

To get this result as JSON data using the API, request the URL detailed below. Try it out or read more on the api.

GEThttps://iamroot.tech/ssl-certificate-check/api/?host=facebook.com

TLS/SSL check of 'facebook.com (157.240.254.35)'

Multiple A-records!

The domain 'facebook.com' has severals A/AAAA-records - and thereby multiple IP's to check.

End-Entity certificate verification warning

Certificat '*.facebook.com' SUCCEDED the verification, but raised some warnings:
*) Certificate will expire soon!

Certificate retrival


  • Certificate '*.facebook.com' retrived from 'facebook.com' (157.240.254.35) on port 443 using TLS 1.3, in a total of 66ms.

Basic verification


Protocol:
All good
 TLS 1.3, cipher algorithm AES128
 
Protocol TLS 1.3 is verified okay and provide a sufficient level of security.

Host:
All good
 facebook.com
 
Host 'facebook.com' is matching Subject/SAN 'facebook.com' of certificate. All good!

Certificate:
Warning
 *.facebook.com, Meta Platforms, US
 
The end-entity certificate '*.facebook.com' had some warnings:
*) Certificate will expire soon!

See below for further details.

Chain of certificates

3 of 3 - End-Entity
*.facebook.com

Certificat:
*.facebook.com, Meta Platforms, US

Issued by:
DigiCert SHA2 High Assurance Server CA, DigiCert Inc, US

Valid:
From 14-09-2023 to 14-12-2023

Verification:
Warning: Certificate will expire soon!

SAN's:
*.facebook.com
*.facebook.net
*.fbcdn.net
*.fbsbx.com
*.m.facebook.com
*.messenger.com
*.xx.fbcdn.net
*.xy.fbcdn.net
*.xz.fbcdn.net
facebook.com
messenger.com

Key:
ECC
Signature algorithm:
sha256RSA

Serial:
02EA0CE92857823F38DB386535A30262

PEM format:
Click to see certificate as PEM (modal)

2 of 3 - Intermediate
DigiCert SHA2 High Assurance Server CA

Certificat:
DigiCert SHA2 High Assurance Server CA, DigiCert Inc, US

Issued by:
DigiCert High Assurance EV Root CA, DigiCert Inc, US

Valid:
From 22-10-2013 to 22-10-2028

Verification:
Succeeded!

Key:
RSA, 2048 bit
Signature algorithm:
sha256RSA

Serial:
04E1E7A4DC5CF2F36DC02B42B85D159F

PEM format:
Click to see certificate as PEM (modal)

1 of 3 - Root certificate
DigiCert High Assurance EV Root CA

Certificat:
DigiCert High Assurance EV Root CA, DigiCert Inc, US

Issued by:
DigiCert High Assurance EV Root CA, DigiCert Inc, US

Valid:
From 09-11-2006 to 09-11-2031

Verification:
Succeeded!

Key:
RSA, 2048 bit
Signature algorithm:
sha1RSA

Serial:
02AC5C266A0B409B8F0B79F2AE462577

PEM format:
Click to see certificate as PEM (modal)

Root Store trust



Root Certificat:
DigiCert High Assurance EV Root CA
Issued by:
DigiCert

Root Store trust:
Fully trusted!

Microsoft:
Root Certificate 'DigiCert High Assurance EV Root CA' is fully trusted by Microsoft (Windows)

Apple:
Root Certificate 'DigiCert High Assurance EV Root CA' is fully is trusted by Apple (iOS, iPadOS, macOS)

Android:
Root Certificate 'DigiCert High Assurance EV Root CA' is fully is trusted by Android

Log

042+042
  • Host 'facebook.com' resolved in 41ms
042+000
  • INFMultiple A-records!
    Domain 'facebook.com' has several A-records, and thereby multiple IPs to check. IP 157.240.254.35 will be used.
051+008
  • Connected to host 'facebook.com' (157.240.254.35) on port 443.
051+000
  • Secure connection established
066+016
  • Connection has been authenticated
066+000
  • Secure connection established and certificate has been retrived
067+000
  • Load and verify chain of certificates
175+108
  • Full chain of certificates has been loaded and verified in 107ms.
175+000
  • WRNEnd-Entity certificate verification warning
    Certificat '*.facebook.com' SUCCEDED the verification, but raised some warnings: *) Certificate will expire soon!
175+000
  • Intermediate certificate verification success
    Certificat 'DigiCert SHA2 High Assurance Server CA' SUCCEDED the verification.
175+000
  • Root certificate verification success
    Certificat 'DigiCert High Assurance EV Root CA' SUCCEDED the verification.
175+000
  • Done
175+000
  • Check root store status of root certificate
177+002
  • Trustet by all major trusted root certificate stores
    The certificte is trustet by ALL major trusted root certificate store
177+000
  • Done
177+000
  • Host 'facebook.com' is matching Subject/SAN 'facebook.com' of certificate. All good!
177+000
  • Protocol TLS 1.3 verified okay!
177+000
  • Certificate has been verifyed