Check Detail
hotmail.com · SSL
Passed
Grade A
100.0%
Result Detail
SSL| Check name | Status | Value |
|---|---|---|
| certificate chain is complete | ✅ Passed | 4 |
| root CA is trusted | ✅ Passed | Trusted |
| cert valid for | ✅ Passed | 140 |
| chain certs are valid until | ✅ Passed | 26.02.2027 |
| CN matches Domainname | ✅ Passed | hotmail.com |
| certificate subject | ✅ Passed | C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=outlook.live.com |
| certificate issuer | ✅ Passed | C=US, O=Microsoft Corporation, CN=Microsoft TLS G2 RSA CA OCSP 10 |
| signature algorithm | ✅ Passed | RSA-SHA384 |
| TLS protocol | ✅ Passed | TLSv1.3 TLS_AES_256_GCM_SHA384 |
| Subject Alternative Names | ✅ Passed | outlook.live.com, outlook-sdf.live.com, attachment.outlook.office.net, attachment.outlook.officeppe.net, hotmail.com, *.calendar.live.com, *.hotmail.com, *.live.com, *.mail.live.com, live.com, *.fp.measure.office.com, premium.outlook.com |
| Public Key | ✅ Passed | RSA 2048 |
Certificate chain
| # | Common name | Issuer | Valid until | CA |
|---|---|---|---|---|
| 0 | outlook.live.com | C=US, O=Microsoft Corporation, CN=Microsoft TLS G2 RSA CA OCSP 10 | 26.02.2027 22:43:42 | No |
| 1 | outlook.live.com | C=US, O=Microsoft Corporation, CN=Microsoft TLS G2 RSA CA OCSP 10 | 26.02.2027 22:43:42 | No |
| 2 | Microsoft TLS G2 RSA CA OCSP 10 | C=US, O=Microsoft Corporation, CN=Microsoft TLS RSA Root G2 | 03.06.2029 22:03:03 | Yes |
| 3 | Microsoft TLS RSA Root G2 | C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2 | 20.06.2029 01:59:59 | Yes |
TLS details
| Negotiated protocol | TLSv1.3 |
|---|---|
| Cipher suite | TLS_AES_256_GCM_SHA384 (256 bit) |
| Cipher version | TLSv1.3 |
| Perfect Forward Secrecy | Attention |
| Earliest chain expiry | 26.02.2027 22:43 |
Fingerprints
| SHA-256 | 85:25:C1:EA:E5:34:15:6A:3B:91:CF:CB:4D:DC:08:26:74:80:C4:C4:27:2E:55:EC:92:0F:2A:C6:93:AC:F3:8F |
|---|---|
| SHA-1 | 2F:6A:46:20:31:DE:2A:33:0F:C5:ED:34:25:82:8E:27:75:1D:4E:4E |
Revocation
OCSP URLs
http://oneocsp.microsoft.com/ocsp
CRL URLs
Full Name:
URI:http://www.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2010_Partition00062.crl
URI:http://crl2.microsoft.com/pkiops/crl/partition/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2010_Partition00062.crl
Issuer URLs (AIA)
http://www.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2010.crt
http://caissuers.microsoft.com/pkiops/certs/Microsoft%20TLS%20G2%20RSA%20CA%20OCSP%2010.crt
OCSP Must-Staple
No
Trust evaluation
Attempted: Yes
Trusted: Yes
OpenSSL diagnostic command
openssl s_client -connect hotmail.com:443 -servername hotmail.com