~/tools / ssl-checker

SSL Checker

Check SSL certificate expiry, chain validity, TLS version and cipher. Catches expired certs, weak crypto and chain issues.

>
[ OK ] Valid for 245 more days.
── output ─────
Issued to
cname-hmrc-gov-uk.production.tax.service.gov.uk
Issued by
Amazon RSA 2048 M01
Valid from
2025-11-23
Valid until
2026-12-22 (245 days)
TLS version
TLSv1.3
Cipher
TLS_AES_128_GCM_SHA256
Key
RSA · 2048 bit
Signature
sha256WithRSAEncryption
Forward secrecy
yes
Self-signed
no
Must-staple
no
SHA-256 fingerprint
C9:C0:B2:38:47:0A:5C:30:3C:E6:2E:62:7E:3D:0A:DB:BD:F4:2A:EA:83:2A:49:BE:BF:0A:B6:64:9F:CE:5C:A7
Serial
04929A3217323E920648A68BCF7EF05D
subject_alt_names · 8
cname-hmrc-gov-uk.production.tax.service.gov.uk hmrc-gov-uk.vpn.production.tax.service.gov.uk hmrc.gov.uk hmrc-gov-uk.isc.production.tax.service.gov.uk redirect.hmrc.gov.uk www.hmrc.gov.uk www.inlandrevenue.gov.uk hmrc-gov-uk.production.tax.service.gov.uk
certificate_chain · 3 certs
[ leaf ]cname-hmrc-gov-uk.production.tax.service.gov.uk
245 days left
issuer: Amazon RSA 2048 M01
2025-11-23 → 2026-12-22
[ inter ]Amazon RSA 2048 M01
1585 days left
issuer: Amazon Root CA 1
2022-08-23 → 2030-08-23
[ inter ]Amazon Root CA 1
4271 days left
issuer: Starfield Services Root Certificate Authority - G2
2015-05-25 → 2037-12-31
// Save hmrc.gov.uk → we'll run this daily and alert on changes. /signup →