Check Detail
sophos.com · SSL
Passed
Grade A
100.0%
Result Detail
SSL| Check name | Status | Value |
|---|---|---|
| certificate chain is complete | ✅ Passed | 3 |
| root CA is trusted | ✅ Passed | Trusted |
| cert valid for | ✅ Passed | 45 |
| chain certs are valid until | ✅ Passed | 17.03.2026 |
| CN matches Domainname | ✅ Passed | sophos.com |
| certificate subject | ✅ Passed | CN=www.sophos.com |
| certificate issuer | ✅ Passed | C=US, O=Let's Encrypt, CN=R13 |
| signature algorithm | ✅ Passed | RSA-SHA256 |
| TLS protocol | ✅ Passed | TLSv1.3 TLS_AES_256_GCM_SHA384 |
| Subject Alternative Names | ✅ Passed | assets.sophos.com, club.sophos.com, demo.sophos.com, dev-login.sophos.com, dev.preview.sophos.com, discover.sophos.com, home.sophos.com, investors.sophos.com, login.sophos.com, my.astaro.com, myutm.sophos.com, news.sophos.com, partnerportal.sophos.com, partners.sophos.com, prod.preview.sophos.com, qa.preview.sophos.com, secure2.sophos.com, sophos.com, sophserv.sophos.com, stage.preview.sophos.com, test-login.sophos.com, www.hitmanpro.com, www.secureworks.com, www.secureworks.jp, www.sophos.com, www.surfright.com, www.surfright.nl |
| Public Key | ✅ Passed | RSA 2048 |
Certificate chain
| # | Common name | Issuer | Valid until | CA |
|---|---|---|---|---|
| 0 | www.sophos.com | C=US, O=Let's Encrypt, CN=R13 | 17.03.2026 13:51:02 | No |
| 1 | www.sophos.com | C=US, O=Let's Encrypt, CN=R13 | 17.03.2026 13:51:02 | No |
| 2 | R13 | C=US, O=Internet Security Research Group, CN=ISRG Root X1 | 13.03.2027 00:59:59 | Yes |
TLS details
| Negotiated protocol | TLSv1.3 |
|---|---|
| Cipher suite | TLS_AES_256_GCM_SHA384 (256 bit) |
| Cipher version | TLSv1.3 |
| Perfect Forward Secrecy | Attention |
| Earliest chain expiry | 17.03.2026 13:51 |
Fingerprints
| SHA-256 | D2:C0:2F:EC:2D:A0:A0:42:A0:24:08:19:7D:40:77:9C:03:19:1B:DC:6C:14:05:5E:01:86:97:D8:05:B1:4D:01 |
|---|---|
| SHA-1 | 83:08:6C:A6:93:3E:C2:EA:B7:B6:15:7D:FE:86:0B:2D:67:9C:04:E9 |
Revocation
OCSP URLs
—
CRL URLs
Full Name:
URI:http://r13.c.lencr.org/83.crl
Issuer URLs (AIA)
http://r13.i.lencr.org/
OCSP Must-Staple
No
Trust evaluation
Attempted: Yes
Trusted: Yes
OpenSSL diagnostic command
openssl s_client -connect sophos.com:443 -servername sophos.com