SSL Report: api-it.sgmw-pre.icvcs.com (1.95.129.95)
Assessed on:  Sun, 23 Nov 2025 09:29:35 UTC | Clear cache

Due to a recently discovered bug in Apple's code, your browser is exposed to MITM attacks. Click here for more information.

Summary
Overall Rating
T
If trust issues are ignored: B
0
20
40
60
80
100
Certificate
 
Protocol Support
 
Key Exchange
 
Cipher Strength
 

Visit our documentation page for more information, configuration guides, and books. Known issues are documented here.
This server's certificate is not trusted, see below for details.
This server's certificate is not trusted by major browsers. MORE INFO »
This server's certificate chain is incomplete. Grade capped to B.
This site works only in browsers with SNI support.
This server supports TLS 1.3.  MORE INFO »
Certificate #1: RSA 4096 bits (1.2.840.113549.1.1.10)
Server Key and Certificate #1
Subject api-it.sgmw-pre.icvcs.com
Fingerprint SHA256: f142d99e9a738613f2e6f3c5d70b511e81287f5201ec36a53ee2c21822a9878b
Pin SHA256: Umwuma9tOUo5saKj4Bf51gKXLVTQt2/TE4sgHx/cMhc=
Common names api-it.sgmw-pre.icvcs.com
Alternative names api-it.sgmw-pre.icvcs.com
Serial Number 0195df8bb19a04fee4044023590b428c
Valid from Sat, 29 Mar 2025 01:37:09 UTC
Valid until Wed, 29 Mar 2028 01:37:09 UTC (expires in 2 years and 4 months)
Key RSA 4096 bits (e 65537)
Weak key (Debian) No
Issuer SGMW RSA-PSS Equipment Sub CA1
Signature algorithm 1.2.840.113549.1.1.10
Extended Validation No
Certificate Transparency No
OCSP Must Staple No
Revocation information CRL
CRL: https://x2-sck-obs-pki.obs.cn-north-4.myhuaweicloud.com/crls/sgmwrsa-pssequipmentsubca1/rF38dc8Zgx7.crl   HTTPS URIs are not universally supported
Revocation status Unchecked (only trusted certificates can be checked)
DNS CAA No (more info)
Trusted No   NOT TRUSTED (Why?)
Mozilla  Apple  Android  Java  Windows 


Additional Certificates (if supplied)
Certificates provided 1 (1794 bytes)
Chain issues Incomplete


Certification Paths
No trust paths available
Issuer unknown, or intermediate certificate(s) missing.
No trust paths available
Issuer unknown, or intermediate certificate(s) missing.
No trust paths available
Issuer unknown, or intermediate certificate(s) missing.
No trust paths available
Issuer unknown, or intermediate certificate(s) missing.
No trust paths available
Issuer unknown, or intermediate certificate(s) missing.

Click here to expand

Configuration
Protocols
TLS 1.3 Yes
TLS 1.2 Yes
TLS 1.1 No
TLS 1.0 No
SSL 3 No
SSL 2 No


Cipher Suites
# TLS 1.3 (suites in server-preferred order)
TLS_AES_256_GCM_SHA384 (0x1302)   ECDH x25519 (eq. 3072 bits RSA)   FS 256
TLS_CHACHA20_POLY1305_SHA256 (0x1303)   ECDH x25519 (eq. 3072 bits RSA)   FS 256
TLS_AES_128_GCM_SHA256 (0x1301)   ECDH x25519 (eq. 3072 bits RSA)   FS 128
# TLS 1.2 (suites in server-preferred order)
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)   ECDH x25519 (eq. 3072 bits RSA)   FS 256