I was able to get this info using curl, available for Windows/Linux/Unix/MacOS etc.:
curl -v https://www.truecrypt.org
* SSL connection using TLS_DHE_RSA_WITH_AES_256_CBC_SHA
* Server certificate:
* subject: CN=www.truecrypt.org,OU=Domain Control Validated,O=www.truecrypt.org
* start date: Apr 10 12:41:56 2009 GMT
* expire date: Apr 10 12:41:56 2012 GMT
* common name: www.truecrypt.org
* issuer: serialNumber=07969287,CN=Go Daddy Secure Certification
(most output cut out for brevity)
I consider this issue (that you cannot see this using standard browser tools) a serious security issue for truecrtypt web site.
SSL serves two purposes: encryption and authentication. In this specific case, encryption is not important at all, and authentication is very important. And they:
Use lowest-grade certificate, that really just proves that someone who can access [email protected] or similar address bought that cert.
Won't let the user see the certificate easily, therefore verifying the certificate is problematic for most users.