Check Detail
62.mcg.escrypt.com · SSL
Passed
Grade B
81.8%
Result Detail
SSL| Check name | Status | Value |
|---|---|---|
| certificate chain is complete | ✅ Passed | 3 |
| root CA is trusted | ❌ Missing | |
| cert valid for | ✅ Passed | 1151 |
| chain certs are valid until | ✅ Passed | 10.12.2029 |
| CN matches Domainname | ❌ Missing | |
| certificate subject | ✅ Passed | C=DE, O=ETAS GmbH, CN=*.mcg.escrypt.com |
| certificate issuer | ✅ Passed | C=DE, O=ETAS GmbH, CN=KMS Root CA 2 |
| signature algorithm | ✅ Passed | RSA-SHA256 |
| TLS protocol | ✅ Passed | TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 |
| Subject Alternative Names | ✅ Passed | *.mcg.escrypt.com |
| Public Key | ✅ Passed | RSA 4096 |
Certificate chain
| # | Common name | Issuer | Valid until | CA |
|---|---|---|---|---|
| 0 | *.mcg.escrypt.com | C=DE, O=ETAS GmbH, CN=KMS Root CA 2 | 10.12.2029 11:41:15 | No |
| 1 | *.mcg.escrypt.com | C=DE, O=ETAS GmbH, CN=KMS Root CA 2 | 10.12.2029 11:41:15 | No |
| 2 | KMS Root CA 2 | C=DE, O=ETAS GmbH, CN=KMS Root CA 2 | 26.10.2042 12:05:07 | Yes |
TLS details
| Negotiated protocol | TLSv1.2 |
|---|---|
| Cipher suite | ECDHE-RSA-AES256-GCM-SHA384 (256 bit) |
| Cipher version | TLSv1.2 |
| Perfect Forward Secrecy | OK |
| Earliest chain expiry | 10.12.2029 11:41 |
Fingerprints
| SHA-256 | 39:E9:EC:85:6A:0E:0D:4A:40:BB:23:0A:51:43:2B:80:B4:4F:66:05:8E:94:F7:CE:95:45:D0:3D:4D:A5:91:08 |
|---|---|
| SHA-1 | 36:B2:BD:5F:91:16:3A:C4:6D:2F:01:A0:DF:DD:EF:66:11:D3:34:7B |
Revocation
OCSP URLs
—
CRL URLs
Full Name:
URI:http://77.mcg.escrypt.com/crl?id=c3f061a9f58f50243d3b2fa75a0d3d3e1518bdde
Issuer URLs (AIA)
—
OCSP Must-Staple
No
Trust evaluation
Attempted: Yes
Trusted: No
Verification failed
OpenSSL diagnostic command
openssl s_client -connect 62.mcg.escrypt.com:443 -servername 62.mcg.escrypt.com