Check Detail
bicseval.mcg.escrypt.com · SSL
Passed
Grade A
90.9%
Result Detail
SSL| Check name | Status | Value |
|---|---|---|
| certificate chain is complete | ✅ Passed | 3 |
| root CA is trusted | ❌ Missing | |
| cert valid for | ✅ Passed | 898 |
| chain certs are valid until | ✅ Passed | 01.04.2029 |
| CN matches Domainname | ✅ Passed | bicseval.mcg.escrypt.com |
| certificate subject | ✅ Passed | C=DE, O=ETAS GmbH, CN=bicseval.mcg.escrypt.com |
| certificate issuer | ✅ Passed | C=DE, O=ETAS GmbH, CN=KMS Root CA 2 |
| signature algorithm | ✅ Passed | RSA-SHA256 |
| TLS protocol | ✅ Passed | TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 |
| Subject Alternative Names | ✅ Passed | bicseval.mcg.escrypt.com |
| Public Key | ✅ Passed | RSA 4096 |
Certificate chain
| # | Common name | Issuer | Valid until | CA |
|---|---|---|---|---|
| 0 | bicseval.mcg.escrypt.com | C=DE, O=ETAS GmbH, CN=KMS Root CA 2 | 01.04.2029 13:47:04 | No |
| 1 | bicseval.mcg.escrypt.com | C=DE, O=ETAS GmbH, CN=KMS Root CA 2 | 01.04.2029 13:47:04 | No |
| 2 | KMS Root CA 2 | C=DE, O=ETAS GmbH, CN=KMS Root CA 2 | 26.10.2042 12:05:07 | Yes |
TLS details
| Negotiated protocol | TLSv1.2 |
|---|---|
| Cipher suite | ECDHE-RSA-AES256-GCM-SHA384 (256 bit) |
| Cipher version | TLSv1.2 |
| Perfect Forward Secrecy | OK |
| Earliest chain expiry | 01.04.2029 13:47 |
Fingerprints
| SHA-256 | 90:55:81:FE:3B:A2:9D:10:A9:A8:93:23:C2:CF:09:85:61:F0:5B:E7:A2:E0:71:95:11:43:D3:D8:B2:A0:FA:F9 |
|---|---|
| SHA-1 | 64:AA:DD:0D:A5:74:66:28:D8:19:6F:15:9C:E6:7B:98:9B:18:16:E7 |
Revocation
OCSP URLs
—
CRL URLs
Full Name:
URI:http://77.mcg.escrypt.com/crl?id=f83f225ff7bb9ecd0206182e60f605e3c24591fc
Issuer URLs (AIA)
—
OCSP Must-Staple
No
Trust evaluation
Attempted: Yes
Trusted: No
Verification failed
OpenSSL diagnostic command
openssl s_client -connect bicseval.mcg.escrypt.com:443 -servername bicseval.mcg.escrypt.com