THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

befly.com.br · 18.229.97.249:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=befly.com.br
Issuer
C=US O=Amazon CN=Amazon RSA 2048 M04
Valid from
2026-10-03T00:00:00+00:00
Expires
2027-04-18T23:59:59+00:00
Days remaining
167
Serial (hex)
09C6C49D5AF3B0B8828B21882B711DE3
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:befly.com.br, DNS:travelhubapi.com.br, DNS:*.befly.com.br, DNS:flytour.com.br, DNS:*.flytour.com.br, DNS:*.travelhubapi.com.br

SHA-256 fingerprint

28:85:68:A8:4B:D5:25:BB:A8:B9:12:D8:B1:D6:DE:FD:D4:95:DC:A4:B8:E5:31:CE:89:52:7D:2C:C1:38:27:7F
Certificate extensions & PEM
authorityKeyIdentifier
1F:52:92:61:56:82:54:7F:81:66:D8:1D:3D:0A:AA:32:5C:87:DD:08
subjectKeyIdentifier
4D:68:1C:2E:96:28:D3:70:3F:05:7E:D4:83:35:34:D4:1F:94:DA:C5
subjectAltName
DNS:befly.com.br, DNS:travelhubapi.com.br, DNS:*.befly.com.br, DNS:flytour.com.br, DNS:*.flytour.com.br, DNS:*.travelhubapi.com.br
certificatePolicies
Policy: 2.23.140.1.2.1
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl.r2m04.amazontrust.com/r2m04.crl
authorityInfoAccess
OCSP - URI:http://ocsp.r2m04.amazontrust.com CA Issuers - URI:http://crt.r2m04.amazontrust.com/r2m04.cer
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Oct 3 00:15:24.063 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:9C:7D:7C:EF:83:78:10:CA:57:03:B2: 47:10:BF:A4:87:BD:44:1D:06:A8:F2:5D:72:F0:59:3B: A3:34:1C:96:A6:02:21:00:AD:60:B5:66:EF:6D:78:C7: 94:7B:19:D6:E8:A9:26:67:6D:E2:C3:4A:A7:C8:F8:73: CF:E7:56:40:65:CF:E4:D1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Oct 3 00:15:24.048 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:DD:64:6B:D9:19:77:7A:C8:1F:58:4B: 02:EC:03:0D:FE:4C:49:B4:A0:1B:A6:C9:0B:CC:95:D2: 5B:4F:4D:B1:F4:02:20:10:4C:83:22:C3:7D:81:0A:8E: 70:3A:BC:28:72:E5:20:E2:25:86:B3:5F:25:8F:7E:E7: B0:4B:F0:43:7A:7B:A9 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Oct 3 00:15:24.125 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:4F:09:A0:61:AE:55:8D:42:59:E0:0E:AB: 67:AD:F9:B7:FC:05:1D:49:2E:09:D7:CD:A8:C7:3F:D6: 79:1E:86:B2:02:20:67:F2:2D:25:27:92:35:6B:33:73: 74:BE:A2:1E:03:97:B1:BC:34:40:67:A8:F5:2B:79:DD: 9B:F4:42:51:44:CD
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-02T10:22:53+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Amazon CN=Amazon RSA 2048 M04
Issuer
C=US O=Amazon CN=Amazon Root CA 1
Valid from
2022-08-23T22:26:35+00:00
Expires
2030-08-23T22:26:35+00:00
Days remaining
1390
Serial (hex)
0773124F2A952E3ED18A58BDB85D1BC0CE5F27
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

13:8B:DF:6E:23:AC:97:1E:B4:E6:26:B2:79:DD:6A:26:F0:57:51:0F:1D:E3:94:29:3A:5E:EA:28:60:DE:01:9B
Certificate extensions & PEM
basicConstraints
CA:TRUE, pathlen:0
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
subjectKeyIdentifier
1F:52:92:61:56:82:54:7F:81:66:D8:1D:3D:0A:AA:32:5C:87:DD:08
authorityKeyIdentifier
84:18:CC:85:34:EC:BC:0C:94:94:2E:08:59:9C:C7:B2:10:4E:0A:08
authorityInfoAccess
OCSP - URI:http://ocsp.rootca1.amazontrust.com CA Issuers - URI:http://crt.rootca1.amazontrust.com/rootca1.cer
crlDistributionPoints
Full Name: URI:http://crl.rootca1.amazontrust.com/rootca1.crl
certificatePolicies
Policy: 2.23.140.1.2.1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=Amazon CN=Amazon Root CA 1
Issuer
C=US ST=Arizona L=Scottsdale O=Starfield Technologies, Inc. CN=Starfield Services Root Certificate Authority - G2
Valid from
2015-05-25T12:00:00+00:00
Expires
2037-12-31T01:00:00+00:00
Days remaining
4076
Serial (hex)
067F944A2A27CDF3FAC2AE2B01F908EEB9C4C6
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

87:DC:D4:DC:74:64:0A:32:2C:D2:05:55:25:06:D1:BE:64:F1:25:96:25:80:96:54:49:86:B4:85:0B:C7:27:06
Certificate extensions & PEM
basicConstraints
CA:TRUE
keyUsage
Digital Signature, Certificate Sign, CRL Sign
subjectKeyIdentifier
84:18:CC:85:34:EC:BC:0C:94:94:2E:08:59:9C:C7:B2:10:4E:0A:08
authorityKeyIdentifier
9C:5F:00:DF:AA:01:D7:30:2B:38:88:A2:B8:6D:4A:9C:F2:11:91:83
authorityInfoAccess
OCSP - URI:http://ocsp.rootg2.amazontrust.com CA Issuers - URI:http://crt.rootg2.amazontrust.com/rootg2.cer
crlDistributionPoints
Full Name: URI:http://crl.rootg2.amazontrust.com/rootg2.crl
certificatePolicies
Policy: X509v3 Any Policy
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgITBn+USionzfP6wq4rAfkI7rnExjANBgkqhkiG9w0BAQsF
ADCBmDELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNj
b3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4x
OzA5BgNVBAMTMlN0YXJmaWVsZCBTZXJ2aWNlcyBSb290IENlcnRpZmljYXRlIEF1
dGhvcml0eSAtIEcyMB4XDTE1MDUyNTEyMDAwMFoXDTM3MTIzMTAxMDAwMFowOTEL
MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv
b3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj
ca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM
9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw
IFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6
VOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L
93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm
jgSubJrIqg0CAwEAAaOCATEwggEtMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/
BAQDAgGGMB0GA1UdDgQWBBSEGMyFNOy8DJSULghZnMeyEE4KCDAfBgNVHSMEGDAW
gBScXwDfqgHXMCs4iKK4bUqc8hGRgzB4BggrBgEFBQcBAQRsMGowLgYIKwYBBQUH
MAGGImh0dHA6Ly9vY3NwLnJvb3RnMi5hbWF6b250cnVzdC5jb20wOAYIKwYBBQUH
MAKGLGh0dHA6Ly9jcnQucm9vdGcyLmFtYXpvbnRydXN0LmNvbS9yb290ZzIuY2Vy
MD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwucm9vdGcyLmFtYXpvbnRydXN0
LmNvbS9yb290ZzIuY3JsMBEGA1UdIAQKMAgwBgYEVR0gADANBgkqhkiG9w0BAQsF
AAOCAQEAYjdCXLwQtT6LLOkMm2xF4gcAevnFWAu5CIw+7bMlPLVvUOTNNWqnkzSW
MiGpSESrnO09tKpzbeR/FoCJbM8oAxiDR3mjEH4wW6w7sGDgd9QIpuEdfF7Au/ma
eyKdpwAJfqxGF4PcnCZXmTA5YpaP7dreqsXMGz7KQ2hsVxa81Q4gLv7/wmpdLqBK
bRRYh5TmOTFffHPLkIhqhBGWJ6bt2YFGpn6jcgAKUj6DiAdjd4lpFw85hdKrCEVN
0FE6/V1dN2RMfjCyVSRCnTawXZwXgWHxyvkQAiSr6w10kY17RSlQOYiypok1JR4U
akcjMS9cmvqtmg5iUaQqqcT5NJ0hGA==
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →