SSL-Tools

SSL check results of www.mfat.govt.nz

NEW You can also bulk check multiple servers.

Discover if the webservers of www.mfat.govt.nz can be reached through a secure connection.

Summary

JSON Refresh

Report created Mon, 14 Apr 2025 03:26:42 +0000

The webservers of www.mfat.govt.nz can be reached through a secure connection.

Servers

Hostname / IP address Certificates Protocol
www.mfat.govt.nz
15.197.249.111
 www.mfat.govt.nz
HSTS
unexpected EOF
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
6 s

Certificates

First seen at:

CN=www.mfat.govt.nz

Certificate chain
  • www.mfat.govt.nz
    • remaining
    • 256 bit
    • ecdsa-with-SHA384
      • E5
        • remaining
        • 384 bit
        • sha256WithRSAEncryption
          • ISRG Root X1 (Certificate is self-signed.)
            • remaining
            • 4096 bit
            • sha256WithRSAEncryption
Subject
Common Name (CN)
  • www.mfat.govt.nz
Alternative Names
  • www.mfat.govt.nz
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • E5
validity period
Not valid before
2025-03-13
Not valid after
2025-06-11
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
  • TLS Web Client Authentication
Fingerprints
SHA256
AC:A4:82:3F:EF:F6:24:04:65:44:8E:42:6B:02:2C:5F:49:48:B1:B0:C4:E5:13:20:D5:7A:C3:FC:6D:2D:7C:47
SHA1
CB:20:1D:31:28:47:61:DB:DA:81:BE:BA:78:97:59:A0:D5:0F:07:A4
X509v3 extensions
subjectKeyIdentifier
  • 83:3F:93:F6:42:5D:4E:AF:48:71:C7:97:6D:30:05:73:7F:AC:D4:2E
authorityKeyIdentifier
  • keyid:9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
authorityInfoAccess
  • OCSP - URI:http://e5.o.lencr.org
  • CA Issuers - URI:http://e5.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://e5.c.lencr.org/116.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
  • D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
  • Timestamp : Mar 13 16:37:36.527 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:80:DF:6A:7A:CF:47:05:07:24:36:A5:
  • DE:FF:E9:64:BF:6F:DD:15:10:7C:3D:AD:B6:6F:4A:E2:
  • 5B:A1:FE:1A:9C:02:20:26:2F:BF:6A:9A:A2:3A:3D:94:
  • 38:F6:0E:FB:00:E5:EC:22:48:3B:DE:A8:AA:E4:FD:2B:
  • 7D:A6:0A:10:5E:E1:DA
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
  • 22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
  • Timestamp : Mar 13 16:37:36.544 2025 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:21:00:A8:E7:B1:4C:7D:51:3C:76:11:87:5A:
  • 2F:D2:86:F5:30:43:DA:E5:7D:7D:E1:39:8E:F3:60:9C:
  • 43:39:63:A5:88:02:20:0F:EA:DA:45:76:E0:40:C9:6D:
  • 82:23:6C:7B:4D:79:22:3B:66:FC:59:2A:FD:9B:4C:3E:
  • 6B:E8:B8:2E:35:BA:51