Check Detail
epmis.gov.bd · SSL
Passed
Grade A
100.0%
Result Detail
SSL| Check name | Status | Value |
|---|---|---|
| certificate chain is complete | ✅ Passed | 5 |
| root CA is trusted | ✅ Passed | Trusted |
| cert valid for | ✅ Passed | 224 |
| chain certs are valid until | ✅ Passed | 13.09.2026 |
| CN matches Domainname | ✅ Passed | epmis.gov.bd |
| certificate subject | ✅ Passed | CN=*.epmis.gov.bd |
| certificate issuer | ✅ Passed | C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 |
| signature algorithm | ✅ Passed | RSA-SHA256 |
| TLS protocol | ✅ Passed | TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 |
| Subject Alternative Names | ✅ Passed | *.epmis.gov.bd, epmis.gov.bd |
| Public Key | ✅ Passed | RSA 2048 |
Certificate chain
| # | Common name | Issuer | Valid until | CA |
|---|---|---|---|---|
| 0 | *.epmis.gov.bd | C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 | 13.09.2026 01:59:59 | No |
| 1 | *.epmis.gov.bd | C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 | 13.09.2026 01:59:59 | No |
| 2 | Sectigo Public Server Authentication CA DV R36 | C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 | 22.03.2036 00:59:59 | Yes |
| 3 | Sectigo Public Server Authentication Root R46 | C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority | 19.01.2038 00:59:59 | Yes |
| 4 | USERTrust RSA Certification Authority | C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority | 19.01.2038 00:59:59 | Yes |
TLS details
| Negotiated protocol | TLSv1.2 |
|---|---|
| Cipher suite | ECDHE-RSA-AES128-GCM-SHA256 (128 bit) |
| Cipher version | TLSv1.2 |
| Perfect Forward Secrecy | OK |
| Earliest chain expiry | 13.09.2026 01:59 |
Fingerprints
| SHA-256 | 1D:56:00:19:BC:D5:EB:08:9B:33:F2:88:5B:B4:C3:70:F1:B7:37:B6:7C:9F:BF:1B:9D:30:1F:7B:0A:D7:4A:23 |
|---|---|
| SHA-1 | D4:17:B9:14:E5:17:2B:73:63:68:D3:3B:A2:EB:F4:65:1C:2F:CC:DC |
Revocation
OCSP URLs
http://ocsp.sectigo.com
CRL URLs
—
Issuer URLs (AIA)
http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt
OCSP Must-Staple
No
Trust evaluation
Attempted: Yes
Trusted: Yes
OpenSSL diagnostic command
openssl s_client -connect epmis.gov.bd:443 -servername epmis.gov.bd