Check Detail
zalando.de · SSL
Passed
Grade A
100.0%
Result Detail
SSL| Check name | Status | Value |
|---|---|---|
| certificate chain is complete | ✅ Passed | 4 |
| root CA is trusted | ✅ Passed | Trusted |
| cert valid for | ✅ Passed | 385 |
| chain certs are valid until | ✅ Passed | 22.11.2026 |
| CN matches Domainname | ✅ Passed | zalando.de |
| certificate subject | ✅ Passed | CN=zalando.com |
| certificate issuer | ✅ Passed | C=US, O=Amazon, CN=Amazon RSA 2048 M01 |
| signature algorithm | ✅ Passed | RSA-SHA256 |
| TLS protocol | ✅ Passed | TLSv1.3 TLS_AES_128_GCM_SHA256 |
| Subject Alternative Names | ✅ Passed | zalando.com, zalando.ee, zalando.ch, zalando.com.tr, zalando.com.au, zalando.es, zalando.gr, zalando.it, zalando.se, *.zalando.com.tr, zalando.si, zalando.sk, *.zalando.com, zalando.ie, zalando.de, zalando.no, zalando.co.uk, *.zalando.com.au, zalando.bg, zalando.be, zalando.fi, zalando.pt, zalando.lu, zalando.hr, zalando.lv, zalando.dk, zalando.lt, zalando.hu, zalando.fr, zalando.at, zalando.cz, zalando.ro, zalando.nl, zalando.pl |
| Public Key | ✅ Passed | RSA 2048 |
Certificate chain
| # | Common name | Issuer | Valid until | CA |
|---|---|---|---|---|
| 0 | zalando.com | C=US, O=Amazon, CN=Amazon RSA 2048 M01 | 22.11.2026 00:59:59 | No |
| 1 | zalando.com | C=US, O=Amazon, CN=Amazon RSA 2048 M01 | 22.11.2026 00:59:59 | No |
| 2 | Amazon RSA 2048 M01 | C=US, O=Amazon, CN=Amazon Root CA 1 | 24.08.2030 00:21:28 | Yes |
| 3 | Amazon Root CA 1 | C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 | 31.12.2037 02:00:00 | Yes |
TLS details
| Negotiated protocol | TLSv1.3 |
|---|---|
| Cipher suite | TLS_AES_128_GCM_SHA256 (128 bit) |
| Cipher version | TLSv1.3 |
| Perfect Forward Secrecy | Attention |
| Earliest chain expiry | 22.11.2026 00:59 |
Fingerprints
| SHA-256 | 39:01:B1:DB:5A:2B:EC:87:76:FA:9B:8F:07:9C:37:90:11:FB:13:E3:CA:62:53:A6:85:CF:46:BA:74:56:BB:0A |
|---|---|
| SHA-1 | DF:92:C8:EF:37:81:D4:EC:96:DD:00:2A:B2:17:13:1A:72:43:4B:10 |
Revocation
OCSP URLs
http://ocsp.r2m01.amazontrust.com
CRL URLs
Full Name:
URI:http://crl.r2m01.amazontrust.com/r2m01.crl
Issuer URLs (AIA)
http://crt.r2m01.amazontrust.com/r2m01.cer
OCSP Must-Staple
No
Trust evaluation
Attempted: Yes
Trusted: Yes
OpenSSL diagnostic command
openssl s_client -connect zalando.de:443 -servername zalando.de