DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

canada.com · 34.111.67.160:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=canada.com
Issuer
C=US O=Google Trust Services CN=WR3
Valid from
2026-09-06T16:12:21+00:00
Expires
2026-12-05T17:08:16+00:00
Days remaining
51
Serial (hex)
F47432F069F68C0D0AF1CDD5E685E467
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:canada.com, DNS:*.canada.com

SHA-256 fingerprint

E9:28:E8:5F:16:9B:2D:ED:53:29:6D:A0:F9:35:0C:16:41:75:C4:25:B3:BD:D5:5A:EE:B3:58:56:C4:DE:F8:53
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:FALSE
subjectKeyIdentifier
38:30:39:0E:27:65:89:68:BA:44:F8:BC:8D:16:AB:E3:F2:3A:29:3E
authorityKeyIdentifier
C7:81:F5:FD:8E:88:D9:00:3C:4D:63:A2:50:31:24:A0:CE:23:FE:23
authorityInfoAccess
CA Issuers - URI:http://i.pki.goog/wr3.crt
subjectAltName
DNS:canada.com, DNS:*.canada.com
certificatePolicies
Policy: 2.23.140.1.2.1
crlDistributionPoints
Full Name: URI:http://c.pki.goog/wr3/kei6w5yrI_Q.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB: B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14 Timestamp : Sep 6 17:12:22.489 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:F7:07:7B:41:05:7D:86:02:42:0B:88: D3:A0:34:9C:A8:0B:44:89:32:80:FD:F9:BC:AC:31:0B: A9:73:D9:84:09:02:20:3D:50:F7:96:23:2C:61:F1:A1: E8:C1:50:DD:00:73:F0:D7:D0:AA:A3:C3:DE:C5:13:BD: C4:D4:09:B6:EA:02:46 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Sep 6 17:12:22.336 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:82:65:03:E7:E7:04:86:4C:8A:E5:E4: 69:6B:FA:2C:DF:2D:85:2C:30:6B:B5:E8:86:CF:14:EF: FD:CF:F1:93:ED:02:20:45:8F:09:DA:E1:8A:2F:D3:75: 6C:EA:C2:C9:B6:BE:03:D3:EC:DD:F4:83:76:41:4F:DA: D1:A1:C0:65:54:35:7B
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-15T16:32:23+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=Google Trust Services CN=WR3
Issuer
C=US O=Google Trust Services LLC CN=GTS Root R1
Valid from
2023-12-13T09:00:00+00:00
Expires
2029-02-20T14:00:00+00:00
Days remaining
858
Serial (hex)
7FF005A91568D63ABC22861684AA4B5A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

2F:E3:57:DB:13:75:1F:F9:16:0E:87:35:49:75:B3:40:74:98:F4:1C:9B:D1:6A:48:65:78:66:E6:E5:A9:B4:C7
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
C7:81:F5:FD:8E:88:D9:00:3C:4D:63:A2:50:31:24:A0:CE:23:FE:23
authorityKeyIdentifier
E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
authorityInfoAccess
CA Issuers - URI:http://i.pki.goog/r1.crt
crlDistributionPoints
Full Name: URI:http://c.pki.goog/r/r1.crl
certificatePolicies
Policy: 2.23.140.1.2.1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=Google Trust Services LLC CN=GTS Root R1
Issuer
C=BE O=GlobalSign nv-sa OU=Root CA CN=GlobalSign Root CA
Valid from
2020-06-19T00:00:42+00:00
Expires
2028-01-28T00:00:42+00:00
Days remaining
469
Serial (hex)
77BD0D6CDB36F91AEA210FC4F058D30D
Signature
RSA-SHA256
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

3E:E0:27:8D:F7:1F:A3:C1:25:C4:CD:48:7F:01:D7:74:69:4E:6F:C5:7E:0C:D9:4C:24:EF:D7:69:13:39:18:E5
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
authorityKeyIdentifier
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
authorityInfoAccess
OCSP - URI:http://ocsp.pki.goog/gsr1 CA Issuers - URI:http://pki.goog/gsr1/gsr1.crt
crlDistributionPoints
Full Name: URI:http://crl.pki.goog/gsr1/gsr1.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.11129.2.5.3.2 Policy: 1.3.6.1.4.1.11129.2.5.3.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →